Managing transmission and storage of sensitive data

摘要

Systems and methods for injecting sensitive data into outgoing traffic that is to be sent to a remote server from a client by a network security appliance logically interposed between the server and the client are provided. According to one embodiment, the method includes intercepting, by a network security appliance, outgoing traffic from the client to the server. The network security appliance identifies a submission command within the outgoing traffic that is used for submitting sensitive data of a user to the server. The network security appliance retrieves the sensitive data and modifies the outgoing traffic by injecting the sensitive data into the submission command to form modified outgoing traffic. The network security appliance transmits the modified outgoing traffic to the server.

主权项

1. A method comprising:
intercepting, by a network security appliance logically interposed between a local client and a remote server, outgoing traffic from the local client to the remote server; identifying, by the network security appliance, a submission command contained within the outgoing traffic, wherein the submission command is of a type that directs the network security appliance to submit sensitive data of a user of the local client to the remote server on behalf of the user; retrieving, by the network security appliance, the sensitive data from a storage device within or coupled to the network security appliance; modifying, by the network security appliance, the outgoing traffic by injecting the sensitive data into the outgoing traffic to form modified outgoing traffic; and sending, by the network security appliance, the modified outgoing traffic to the remote server.