一种基于ICAP的实时数据防泄漏方案  

A Real Time Data Leakage Prevent System based on ICAP

作　　者：高翔[1,2] 武斌[1,2] 俞学浩 吴赞红[3] 

机构地区：[1]北京邮电大学信息安全中心,北京100876 [2]北京邮电大学灾备技术国家工程实验室,北京100876 [3]广东电网电力调度控制中心,广东广州510600

出　　处：《信息网络安全》2013年第11期49-53,共5页Netinfo Security

基　　金：国家自然基金[61070204;61101108]

摘　　要：文章介绍了现今数据防泄漏技术的研究现状,分析了现有数据防泄漏技术实现的难点和弱点。在前人的基础上提出并改进了一套基于ICAP协议的实时数据防泄漏方案,弥补了现有技术对HTTPS协议流量进行分析检测的困难和对恶意软件通过加密通道盗取敏感数据无法防御的不足。最后搭建实验环境,测试其运行性能,证明了该系统具有一定的实用价值。This paper introduce nowadays Data Leakage Prevent（DLP） researching. And analysis the challenge and weakness of present DLP techniques. Thanks for the achievements of previous researhers, we design and implement a real time data leakage prevent system based on ICAP. This system makes up for 2 the weaknesses of regular DLP solutions. One is the ability of intercept and analysis HTTPS encrypted data flow, the other one is defending data leakage due to malicious software＇s custom encrypted tunnel over regular HTTP port. Last of all, we build up the environment and test the average latency of our DLP system which proves it have potential of being put into practise.

关 键 词：数据防泄漏 ICAP 质询响应 透明Web代理 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]