Systems and methods for enforcing data loss prevention policies on mobile devices

摘要

A computer-implemented method for enforcing data loss prevention policies on mobile devices may include (1) identifying a mobile device that connected to a network and that may include sensitive data and that is in a predetermined state that is designated for transferring data for data loss prevention analysis, (2) requesting, from a data loss prevention policy database via the network, a data loss prevention policy category for the sensitive data based on an analysis the sensitive data, (3) receiving the data loss prevention policy category, tagging, based on the data loss prevention policy category, the sensitive data on the mobile device with a data loss prevention policy tag and (4) enforcing on the mobile device, based on the data loss prevention policy tag, a data loss prevention rule for the data loss prevention category of the sensitive data. Various other methods, systems, and computer-readable media are also disclosed.

主权项

1. A computer-implemented method for enforcing data loss prevention policies on mobile devices, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:
identifying a mobile device that is connected to a network and that comprises sensitive data and that is in a charging state in which the mobile device draws power from a source other than a primary battery of the mobile device; requesting, from a data loss prevention policy database via the network, a data loss prevention policy category for the sensitive data on the mobile device based on an analysis of at least a portion of the sensitive data at the data loss prevention policy database, wherein the data loss prevention policy category indicates a type of risk caused by potential loss of the sensitive data; receiving, from the data loss prevention policy database via the network, the data loss prevention policy category for the sensitive data on the mobile device; tagging, based on the data loss prevention policy category, the sensitive data on the mobile device with a data loss prevention policy tag; determining that the mobile device is no longer connected to the network; while the mobile device is not connected to the network, enforcing on the mobile device, based on the data loss prevention policy tag, a data loss prevention rule for the data loss prevention category of the sensitive data without communicating with the data loss prevention policy database.