Patent ID: 9058485
Filing Date: 2015-06-16
Classification: G06F

Abstract:
1. A method, implemented by a computing system programmed to perform the following, comprising: detecting, by a data loss prevention (DLP) filter driver executing on the computing system, when an application opens and closes a file stored on a removable media mounted on a file system of the computing system; when the application opens the file, when the application performs an operation on the file, mirroring, by the DLP filter driver, the operation directed to the file object to the remote transaction object; when the application closes the file, initiating, by the DLP filter driver, a scan of the local copy to detect a violation of the DLP policy in the data being written to the file stored in the removable media; aborting a local transaction when a violation of the DLP policy is detected during the scan to prevent the data to be written to the local copy; and committing the remote transaction object to be written to the file stored in the removable media when no violation of the DLP policy is detected during the scan to allow the data to be written to the file stored on the removable media.