Data loss prevention for mobile computing devices

摘要

System calls to a kernel of a mobile computing device are monitored. A particular system call is intercepted relating to input/output (I/O) functionality of the mobile computing device. A data loss prevention (DLP) policy is identified that is applicable to the particular system call. An action is performed on the particular system call based at least in part on the DLP policy.

主权项

1. At least one non-transitory machine accessible storage medium having instructions stored thereon, the instructions when executed on a machine, cause the machine to:
intercept a system call to a kernel of a mobile computing device, wherein the system call involves photograph data; query a data loss prevention (DLP) agent on the mobile computing device to identify a particular DLP policy applicable to use of the photograph data, wherein the particular DLP policy conditionally restricts use of the photograph data based at least in part on location of the mobile computing device; identify a current detected location of the mobile computing device; and perform, based on the particular DLP policy and the current detected location, an action on the intercepted system call.