公开(公告)号：US20220083646A1

公开(公告)日：2022-03-17

申请号：US17419780

申请日：2020-01-03

Applicant: Proofpoint, Inc.

Inventor： Boris Traktirnik ,  Liliya Anissimov ,  Gabriel Kalmar ,  Nir Barak ,  Ariel Lemelson

IPC: G06F21/53 ,  G06F21/54 ,  G06F21/83 ,  G06F21/84

Abstract: A system and method monitors access of an external storage device connected to a target device. A notification of a connection of the external storage device to the target device is received, a notification of an external file access on the external storage device is received, and activity of a user on the target device is monitored to detect a user operation accessing a source file stored on the target device. Events are logged based upon the connection, the user operation, and the external file access. Two or more of the events are associated with a copy of the source file to the external connected storage device and the source file history. An alert regarding the association is forwarded to a monitor application in communication with the target device.

公开(公告)号：US11775670B2

公开(公告)日：2023-10-03

申请号：US17231484

申请日：2021-04-15

Applicant: Proofpoint, Inc.

Inventor： Guy Ziv ,  Boris Traktirnik ,  Nir Barak ,  Tai Tikotzki ,  Sagi Schechter ,  Rotem Gingold

IPC: G06F21/62 ,  G06F9/451 ,  G06F3/0486 ,  G06F3/0481 ,  G06F16/17 ,  G06F9/54 ,  G06F16/16

CPC classification number: G06F21/6227 ,  G06F3/0481 ,  G06F3/0486 ,  G06F9/451 ,  G06F9/545 ,  G06F16/1734 ,  G06F16/16 ,  G06F21/6209 ,  G06F21/6218 ,  G06F2221/2147

Abstract: A system for preventing duplication of a computer source file to a destination file includes a user application accessed by a user of a computer. An agent application hosted by the computer registers for a notification of a user interface action with an operating system (OS) of the computer. The agent receives notice from the OS of the user interface action and determines if the user interface action is indicative of a data file duplication operation of a source file to a destination file location The Agent compares a property of the source file and a property of the destination file location to a blocking criteria, and blocks the user interface action from reaching the application.

公开(公告)号：US12164625B2

公开(公告)日：2024-12-10

申请号：US17419780

申请日：2020-01-03

Applicant: Proofpoint, Inc.

Inventor： Boris Traktirnik ,  Liliya Anissimov ,  Gabriel Kalmar ,  Nir Barak ,  Ariel Lemelson

IPC: G06F21/53 ,  G06F21/54 ,  G06F21/83 ,  G06F21/84

Abstract: A system and method monitors access of an external storage device connected to a target device. A notification of a connection of the external storage device to the target device is received, a notification of an external file access on the external storage device is received, and activity of a user on the target device is monitored to detect a user operation accessing a source file stored on the target device. Events are logged based upon the connection, the user operation, and the external file access. Two or more of the events are associated with a copy of the source file to the external connected storage device and the source file history. An alert regarding the association is forwarded to a monitor application in communication with the target device.

公开(公告)号：US20220335149A1

公开(公告)日：2022-10-20

申请号：US17231484

申请日：2021-04-15

Applicant: Proofpoint, Inc.

Inventor： Guy Ziv ,  Boris Traktirnik ,  Nir Barak ,  Tal Tikotzki ,  Sagi Schechter ,  Rotem Gingold

IPC: G06F21/62 ,  G06F9/451 ,  G06F16/17 ,  G06F3/0481 ,  G06F3/0486

Abstract: A system for preventing duplication of a computer source file to a destination file includes a user application accessed by a user of a computer. An agent application hosted by the computer registers for a notification of a user interface action with an operating system (OS) of the computer. The agent receives notice from the OS of the user interface action and determines if the user interface action is indicative of a data file duplication operation of a source file to a destination file location The Agent compares a property of the source file and a property of the destination file location to a blocking criteria, and blocks the user interface action from reaching the application.