Data loss prevention for endpoint-based security

1. An apparatus, comprising:

a network module configured to receive, at an end user device, a request for content from a network source;

a policy module configured to compare the network source of the requested content against a policy that is stored on the end user device prior to the content being allowed on the end user device;

an action module configured to perform at least one action related to the requested content based on the comparison between the network source of the requested content and the policy; and

a content module configured to, in response to receiving the content at the end user device:

perform a security analysis and a data sensitivity analysis of the received content on the end user device, the security analysis checking for a security threat within the content and the data sensitivity analysis checking that the content is free of sensitive information and complies with an authorization to use the content at a network location where the content is being uploaded, the authorization comprising a permission level that a user associated with the network location where the content is being uploaded has to access content; and

block the content from being uploaded to the network location in response to failing at least one of the security analysis and the data sensitivity analysis.

2. The apparatus of claim 1 , wherein the security analysis comprises checking the received content for malicious material, the malicious material comprising at least one selected from the group of malware, viruses, troj an horses, worms, spyware, and adware.

3. The apparatus of claim 1 , wherein the security analysis comprises a granular action control analysis that determines whether the user of the end user device is authorized to access the content and to determine the level of the user's access.

4. The apparatus of claim 1 , wherein the security analysis comprises a request body control analysis that verifies content that is provided as input and a manner in which it is sent to a remote device.

5. The apparatus of claim 4 , wherein the action module, on the end user device, generates a match for the request body of the content, the match transmitted to a remote device for confirmation to allow or restrict access to the content.

6. The apparatus of claim 5 , wherein the action module, on the end user device, uses regular expressions to create rules for identifying matches in the data.

7. The apparatus of claim 1 , wherein the content module analyzes the received content prior to the received content being transmitted to a remote cloud device.

8. The apparatus of claim 7 , wherein the content module analyzes the received content to determine if the received content comprises personal information, the personal information comprising one or more of personally identifiable information (“PIT”), protected health information (“PHI”), and payment card information (“PCP”).

9. The apparatus of claim 7 , wherein, in response to determining that the received content comprises personal information, the content module one or more of:

allows the content to be transmitted to the remote cloud device and monitors the content on the remote cloud device;

sends a notification that the content comprises personal information and prompts for confirmation to allow or block the content from being transmitted to the remote cloud device; and

blocks the content from being uploaded to the remote cloud device.

10. A method, comprising:

receiving, at an end user device, a request for content from a network source;

comparing the network source of the requested content against a policy that is stored on the end user device prior to the content being allowed on the end user device;

performing at least one action related to the requested content based on the comparison between the network source of the requested content and the policy; and

in response to receiving the content at the end user device:

performing a security analysis and a data sensitivity analysis of the received content on the end user device, the security analysis checking for a security threat within the content and the data sensitivity analysis checking that the content is free of sensitive information and complies with an authorization to use the content at a network location where the content is being uploaded, the authorization comprising a permission level that a user associated with the network location where the content is being uploaded has to access content; and

blocking the content from being uploaded to the network location in response to failing at least one of the security analysis and the data sensitivity analysis.

11. The method of claim 10 , wherein the security analysis comprises checking the received content for malicious material, the malicious material comprising at least one selected from the group of malware, viruses, trojan horses, worms, spyware, and adware.

12. The method of claim 10 , wherein the security analysis comprises a granular action control analysis that determines whether the user of the end user device is authorized to access the content and to determine the level of the user's access.

13. The method of claim 10 , wherein the security analysis comprises a request body control analysis that verifies content that is provided as input and a manner in which it is sent to a remote device.

14. The method of claim 13 , further comprising generating, on the end user device, a match for the request body of the content, the match transmitted to a remote device for confirmation to allow or restrict access to the content.

15. The method of claim 10 , further comprising analyzing the received content prior to the received content being transmitted to a remote cloud device.

16. The method of claim 15 , further comprising analyzing the received content to determine if the received content comprises personal information, the personal information comprising one or more of personally identifiable information (“PII”), protected health information (“PHI”), and payment card information (“PCI”).

17. The method of claim 15 , further comprising, in response to determining that the received content comprises personal information, one or more of:

allowing the content to be transmitted to the remote cloud device and monitors the content on the remote cloud device;

sending a notification that the content comprises personal information and prompts for confirmation to allow or block the content from being transmitted to the remote cloud device; and

blocking the content from being uploaded to the remote cloud device.

18. An apparatus, comprising:

means for receiving, at an end user device, a request for content from a network source;

means for comparing the network source of the requested content against a policy that is stored on the end user device prior to the content being allowed on the end user device;

means for performing at least one action related to the requested content based on the comparison between the network source of the requested content and the policy; and

means for, in response to receiving the content at the end user device:

performing a security analysis and a data sensitivity analysis of the received content on the end user device, the security analysis checking for a security threat within the content and the data sensitivity analysis checking that the content is free of sensitive information and complies with an authorization to use the content at a network location where the content is being uploaded, the authorization comprising a permission level that a user associated with the network location where the content is being uploaded has to access content; and

blocking the content from being uploaded to the network location in response to failing at least one of the security analysis and the data sensitivity analysis.

19. The method of claim 14 , further comprising, on the end user device, using regular expressions to create rules for identifying matches in the data.

20. The apparatus of claim 18 , wherein the security analysis comprises checking the received content for malicious material, the malicious material comprising at least one selected from the group of malware, viruses, trojan horses, worms, spyware, and adware.