Patent ID: 9621590
Date: 2017-04-11
CPC Classifications: G06F,H04L

Claim:
1. A computer-implemented method for applying data-loss-prevention policies, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: maintaining a list of multiple-process applications whose access to sensitive data is controlled by data-loss-prevention (DLP) policies; detecting an attempt by a process to access sensitive data; determining, after the process attempts to access the sensitive data, that the process is not a primary process of a multiple-process application within the list of multiple-process applications; determining, in response to determining that the process is not the primary process of the multiple-process application, that the process is a child process of the primary process of the multiple-process application; applying, based at least in part on the determination that the process is a child process of the primary process of the multiple-process application, a DLP policy associated with the multiple-process application to the process in order to prevent loss of sensitive data.