|
概要(英語)
|
In recent years, information leakage cases happen
frequently and are one of big problems. 70% of such a cases are
caused by human factors such as mismanagements and/or careless
operations. Such a factors can be removed by the control of information
flow and/or the check of computer operations. Therefore,
some studies to control information flows have been proposed.
However, almost studies focus on single computer. Thus, it is
insufficient in recent working situations which exchange a lot of
information through network.
In this paper, we propose a framework to track sensitive
information flow on multiple computers at kernel. The framework
hooks system calls which may cause the diffusion of information,
maintains their logs, and uses their logs to trace information.
As the result, we can trace information on multiple computers.
It would be useful for the control of the operations which uses
sensitive information.
|