Patent ID: 9027078
Filing Date: 2015-05-05
Classification: G06F

Abstract:
1. A computer-implemented method for enforcing data loss prevention policies on sandboxed applications, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying, with at least one processor, an application process that is in a sandbox, wherein a broker process has intercepted an attempt by the application process to access a file and, in response, created a file handle for the file on behalf of the application process within the sandbox for the application process to have access to the file via the file handle; intercepting, with at least one processor, an input/output request performed on the file handle by the application process, wherein the input/output request comprises an identifier of the application process; extracting, with at least one processor, the identifier of the application process from the input/output request; enforcing, with at least one processor, a data loss prevention policy on the file by attributing the input/output request to the application process instead of to the broker process based on the identifier of the application process.