Patent ID: 8429745

Claim:
A computer-implemented method for data loss prevention on mobile computing systems, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying a mobile computing system, the mobile computing system being configured to execute only one application at a time as a foreground application; determining that the mobile computing system has begun executing a sensitive application as the foreground application, wherein the sensitive application displays information that is subject to a data-loss-prevention policy; in response to determining that the mobile computing system is executing the sensitive application as the foreground application, identifying a first enumeration of screenshots stored on the mobile computing system when the mobile computing system began executing the sensitive application as the foreground application; identifying a second enumeration of screenshots stored on the mobile computing system after the mobile computing system began executing the sensitive application as the foreground application; determining that at least one new screenshot was taken on the mobile computing system while the sensitive application was the foreground application by detecting a difference between the first enumeration of screenshots and the second enumeration of screenshots; performing a security action upon detecting the difference between the first enumeration of screenshots and the second enumeration of screenshots.