The following information was submitted:
Transactions: INTERNATIONAL JOURNAL of COMPUTERS
Transactions ID Number: 20-797
Full Name: Yasuhiro Kirihata
Position: Researcher
Age: ON
Sex: Male
Address: 4-12-7, Higashishinagawa, Shinagawa-ku, Tokyo
Country: JAPAN
Tel: +81-3-5780-2111
Tel prefix:
Fax:
E-mail address: yasuhiro.kirihata.yk@hitachi-solutions.com
Other E-mails: ykirih@yahoo.co.jp
Title of the Paper: data loss prevention for confidential web contents and security evaluation with ban logic
Authors as they appear in the Paper: Yasuhiro Kirihata, Yoshiki Sameshima, Takashi Onoyama, Norihisa Komoda
Email addresses of all the authors: yasuhiro.kirihata.yk@hitachi-solutions.com,yoshiki.sameshima.vf@hitachi-solutions.com,takashi.onoyama.js@hitachi-solutions.com,komoda@ist.osaka-u.ac.jp
Number of paper pages: 9
Abstract: Since the enforcement of the Private Information Protection Law of Japan, protection of confidential information is one of the significant issues in enterprises and organizations. However, many incidents of confidential information leakage occur and this becomes a serious issue in the industrial society. There is no effective countermeasure to prevent it so far. In this paper, we propose a web content protection system to realize the protection of confidential web contents. The system provides special viewer application to view the encrypted content data and realize the prohibition of copying and taking snapshots for the displayed confidential data. Adopting the dynamical encryption methodology by the intermediate encryption proxy, it is possible to protect the web contents generated dynamically by web applications. Applying our approach to the conventional web system, system administrators can manage the distribution of the confidential information and prevent the!
m from being leaked out from the office. We describe the system architecture and implementation details. We also evaluate the security of the system implementation and the internal authentication protocol with BAN logic.
Keywords: BAN logic, Content access control, Data loss prevention, Protocol verification, Web security
EXTENSION of the file: .doc
Special (Invited) Session: A Novel Approach for Protection of Confidential Web Contents
Organizer of the Session: 652-143
How Did you learn about congress:
IP ADDRESS: 202.246.252.97
