Patent ID: 8272042

Claim:
A system, comprising: a monitoring tool, executed by at least one hardware processor, configured to monitor communication of a source computer over a network, wherein the communication comprises one or more first types of data, and at least some of said first types of data are associated with a first security classification selected from a plurality of predetermined security classifications, wherein said predetermined security classifications comprise sub-classification categories of confidentiality, integrity and availability; and a classification tool, executed by the at least one hardware processor, configured to: assign one of said plurality of predetermined security classifications to said source computer based at least in part on said first security classification, assign one of said plurality of predetermined security classifications to a destination computer receiving said communication from said source computer based at least in part on said first security classification, determine whether said assigned security classification of said source computer is different from said assigned security classification of said destination computer; wherein the monitoring tool is further configured to: issue an alert and hold said communication until an authorization to transmit said communication is received when said assigned security classification of said source computer is different from said assigned security classification of said destination computer; and transmit said communication when said assigned security classification of said source computer is the same as said assigned security classification of said destination computer.