Design And Implementation Of DLP System For Mobile Intelligent Terminals

As mobiles become more powerful,an increasing number of employees have been or are about to break free from the office style to deal with daily work affairs through mobile.At the same time,with the trend that enterprise key data moves to mobile terminal,mobile terminal data leakage prevention has become an important issue.To solve the problem,we set up a data leakage prevention system for mobile terminal.The system implements a pre-decryption transparent encryption technology module,a dynamic sandbox isolation region technology module and virtual remote desktop technology module.Also,for the mobiles accessing in,the system achieves security access control,terminal equipment control,behavioral safety audits and other effective protection to ensure that the office mobile terminal data security in storage,transmission,use of comprehensive.The main work of this paper is as follows:1?We use the Hook technology based on the Xposed framework to implement the transparent encryption and decryption of the file system,and embeds the pre-decrypting thought on the basis of this.It solves the safety problem of the traditional transparent encryption technolog,and improves the transparent encryption performance,saving the file system operation process of the cost;2?Through the process of communication regulatory mechanism,the mobile terminal is divided into two private office space,we set up a separate mobile terminal on the work area,and put the enterprise key data in the area to quarantine public and private environment;3?Based on libfreerdp-android.so dynamic link library,we design and implement the virtual remote desktop technology.Through the idea of combining Thin Client and mobile terminal,we achieve the mobile terminal Remote Desktop Protocol(RDP)technology.So that,we can avoid the situation that the enterprise key data be leakaged through the network;4?We design and implement a Data Leakage Prevention System.For the mobiles accessing in,the system achieves security access control,terminal equipment control,behavioral safety audits and other effective protection to ensure that the office mobile terminal data security in storage,transmission,use of comprehensive.