NETWORK-BASED DATA LOSS PREVENTION SYSTEM USING INFORMATION OF SSL/TLS HANDSHAKING PACKET AND HTTPS ACCESS SELECTION BLOCK METHOD THEREOF

摘要

PURPOSE: An information exposure prevention system using the information of an SSL/TLS (Secure Socket Layer/Transport Layer Security) handshaking packet and an HTTPS (Hyper Text Transfer Protocol over Secure socket layer) access blocking method are provided to selectively block an HTTPS session by using a host URL (Universal Resource Locator) provided as a clear text. CONSTITUTION: A packet processing unit (120) receives internet packets with a mirroring type. The packet processing unit extracts a host URL from a message set with an SSL handshaking process from the internet packets. The packet processing unit confirms the extracted host URL blocking target from a blocking target URL list. When the extracted host URL corresponds to the block target URL list, the packet processing unit blocks a session corresponding to the message. [Reference numerals] (110) Packet mirroring device; (120) Packet processing unit; (130) Log DB; (140) Blocking target DB; (20) Management server; (AA) Client; (BB) Download; (CC) Server