Patent ID: 8688657

Claim:
A computer-implemented method for data loss prevention, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying a network configured with a data loss prevention system; identifying a first file within the network; identifying a source of the first file by determining that an origin of the first file is within the network; determining, based on the source of the first file being within the network, that the first file is subject to a data loss prevention policy; applying the data loss prevention policy to the first file based on the determination that the first file is subject to the data loss prevention policy; identifying entry of a second file into the network; in response to identifying the entry of the second file into the network, identifying a source of the second file; determining, based on the source of the second file, that an origin of the second file is outside the network, the source of the second file causing the entry of the second file into the network; determining that the origin of the second file does not contain sensitive information intended to be protected by the data loss prevention system; allowing a use of the second file based on a determination that the second file is not subject to the data loss prevention policy.