Theft prevention for sensitive information
Methods, systems, and techniques for application isolation by remote-enabling applications are provided. Example embodiments provide an Adaptive Rendering Application Isolation System (“ARAIS”), which transparently enables applications to run in an isolated execution environment yet be rendered locally in a manner that facilitates preventing theft of sensitive information while allowing users to interact with any third-party application or website via the local environment without overburdening available bandwidth or computational resources by, in some cases, evaluating only select information responsive only to select events, as compared to whitelist/blacklist techniques, monitoring all information provided by the user, or other techniques. The ARAIS typically includes an orchestrator server that comprises one or more of a sensitive-information theft-prevention logic engine, information-theft prevention engines, or a rules engine. These components cooperate to deliver isolation-ready technology with sensitive-information theft prevention to client applications.
1. A non-transitory machine-readable storage medium that provides instructions that, when executed by a processor causes operations to be performed including:
instantiating an instance of a remote application in an executing computing device;
intercepting, at the remote application instance in the executing computing device, a first set of one or more draw commands associated with output of the remote application instance;
providing, by the executing computing device, the first set of one or more draw commands to a rendering computing device for rendering a display of a first web page, wherein the rendering computing device is remotely located, separate, and distinct from the executing computing device;
receiving, by the executing computing device, user inputs representing an action of a user of an instance of a local application on the rendering computing device with the first web page, the local application instance and the remote application instance cooperatively providing an application isolation session isolating the local application instance from malicious changes to the remote application;
determining that the user inputs include a trigger event;
responsive to determining that the user inputs include the trigger event, evaluating one or more characteristics of one or more fields in a rendering output of the remote application instance to detect a candidate sensitive information field;
determining that the candidate sensitive information field includes verified sensitive information; and
responsive to determining that the candidate sensitive information field includes the verified sensitive information, preventing the verified sensitive information from being provided from the local application instance or the remote application instance to another application or computing device.
2. The non-transitory machine-readable storage medium of claim 1 , wherein the trigger event includes one of: a form submit event, a predetermined number of keystrokes, and predetermined number of keystrokes that satisfy requirements for variety of character types.
3. The non-transitory machine-readable storage medium of claim 1 , wherein evaluating the one or more characteristics of the one or more fields in the rendering output of the remote application instance to detect the candidate sensitive information field comprises:
evaluating the one or more characteristics of the one or more fields in the rendering output of the remote application instance against sensitive-information rules; and
determining a field of the one or more fields is a candidate sensitive information field when one or more first characteristics of the field matches a predetermined number of the sensitive-information rules.
4. The non-transitory machine-readable storage medium of claim 3 , wherein a first sensitive-information rule of the sensitive-information rules evaluates character types and a character length of text in the field.
5. The non-transitory machine-readable storage medium of claim 1 , wherein the operations further comprise:
providing a notification to the user indicating the verified sensitive information that the user attempted to provide to a target of the action of the user, wherein the notification includes options to submit a petition to reclassify the verified sensitive information as non-sensitive information or to change an authority level of the user to provide the verified sensitive information.
6. The non-transitory machine-readable storage medium of claim 1 , wherein preventing the verified sensitive information from being provided from the local application instance or the remote application instance to another application or computing device further comprises:
modifying contents of the candidate sensitive information field, including one or more of:
replacing characters, randomly redistributing characters, and deleting, replacing, or scrambling a media clip.
7. The non-transitory machine-readable storage medium of claim 1 , wherein determining that the candidate sensitive information field includes the verified sensitive information further comprises:
generating a secure version of candidate sensitive information in the candidate sensitive information field;
comparing the generated secure version of the candidate sensitive information to a stored secure version of the candidate sensitive information; and
identifying the candidate sensitive information as the verified sensitive information when the secure version of the candidate sensitive information matches the stored secure version of the candidate sensitive information.
8. The non-transitory machine-readable storage medium of claim 1 , wherein determining that the user inputs include the trigger event further comprises:
identifying a role associated with the user; and
determining that the user inputs include one or more of a plurality of user action types defined as trigger events for the role associated with the user.
9. The non-transitory machine-readable storage medium of claim 1 , wherein the local application instance on the rendering computing device is an instance of a web browser, and the action of the user is performed by a web application loaded in the web browser instance on the rendering computing device.
10. The non-transitory machine-readable storage medium of claim 1 , wherein the local application instance on the rendering computing device is an instance of an isolator application, and the action of the user is performed by the isolator application instance on the rendering computing device.
11. A server, comprising:
a processor; and
a non-transitory machine-readable storage medium that stores instructions that, when executed by the processor, causes the server to perform operations including:
instantiating an instance of a remote application in an executing computing device;
intercepting, at the remote application instance in the executing computing device, a first set of one or more draw commands associated with output of the remote application instance;
providing, by the executing computing device, the first set of one or more draw commands to a rendering computing device for rendering a display of a first web page, wherein the rendering computing device is remotely located, separate, and distinct from the executing computing device;
receiving, by the executing computing device, user inputs representing an action of a user of an instance of a local application on the rendering computing device with the first web page, the local application instance and the remote application instance cooperatively providing an application isolation session isolating the local application instance from malicious changes to the remote application;
determining that the user inputs include a trigger event;
responsive to determining that the user inputs include the trigger event, evaluating one or more characteristics of one or more fields in a rendering output of the remote application instance to detect a candidate sensitive information field;
determining that the candidate sensitive information field includes verified sensitive information; and
responsive to determining that the candidate sensitive information field includes the verified sensitive information, preventing the verified sensitive information from being provided from the local application instance or the remote application instance to another application or computing device.
12. The server of claim 11 , wherein the trigger event includes one of: a form submit event, a predetermined number of keystrokes, and predetermined number of keystrokes that satisfy requirements for variety of character types.
13. The server of claim 11 , wherein evaluating the one or more characteristics of the one or more fields in the rendering output of the remote application instance to detect the candidate sensitive information field comprises:
evaluating the one or more characteristics of the one or more fields in the rendering output of the remote application instance against sensitive-information rules; and
determining a field of the one or more fields is a candidate sensitive information field when one or more first characteristics of the field matches a predetermined number of the sensitive-information rules.
14. The server of claim 13 , wherein a first sensitive-information rule of the sensitive-information rules evaluates character types and a character length of text in the field.
15. The server of claim 11 , wherein the operations further comprise:
providing a notification to the user indicating the verified sensitive information that the user attempted to provide to a target of the action of the user, wherein the notification includes options to submit a petition to reclassify the verified sensitive information as non-sensitive information or to change an authority level of the user to provide the verified sensitive information.
16. The server of claim 11 , wherein preventing the verified sensitive information from being provided from the local application instance or the remote application instance to another application or computing device further comprises:
modifying contents of the candidate sensitive information field, including one or more of:
replacing characters, randomly redistributing characters, and deleting, replacing, or scrambling a media clip.
17. The server of claim 11 , wherein determining that the candidate sensitive information field includes the verified sensitive information further comprises:
generating a secure version of candidate sensitive information in the candidate sensitive information field;
comparing the generated secure version of the candidate sensitive information to a stored secure version of the candidate sensitive information; and
identifying the candidate sensitive information as the verified sensitive information when the secure version of the candidate sensitive information matches the stored secure version of the candidate sensitive information.
18. The server of claim 11 , wherein determining that the user inputs include the trigger event further comprises:
identifying a role associated with the user; and
determining that the user inputs include one or more of a plurality of user action types defined as trigger events for the role associated with the user.
19. The server of claim 11 , wherein the local application instance on the rendering computing device is an instance of a web browser, and the action of the user is performed by a web application loaded in the web browser instance on the rendering computing device.
20. The server of claim 11 , wherein the local application instance on the rendering computing device is an instance of an isolator application, and the action of the user is performed by the isolator application instance on the rendering computing device.