CT-ISG: Data Tethers - Preventing Sensitive Data from Loss and Theft

Data Tethers项目正在构建一个操作系统，当便携式计算机或存储设备丢失或被盗时，该操作系统可以防止敏感数据丢失。此类信息的丢失是司空见惯的，而且往往具有极大的破坏性。数据测试器通过确保当便携式设备离开安全环境时，不允许敏感数据随身携带来解决这一问题。许多组织都有政策规定，这些数据不应该离开他们的办公场所，但他们没有执行机制。数据泰瑟斯提供了这种机制。数据传送器必须在数据从一个文件复制到另一个文件时跟踪数据，因为其目标是防止数据丢失，而不仅仅是保护特定的文件。该系统必须处理现代计算机中被删除的文件、临时存储位置和其他隐蔽位置中的数据挥之不去的问题，因为窃贼也会在这些地方寻找敏感数据。Data Tethers将被添加到Sun Microsystem的Open Solaris中，这是一个现有的常用操作系统，并将利用Sun的标准机制为Open Solaris添加功能。Data Tethers项目的预期结果将是一个有效的开源操作系统，使敏感数据的所有者和管理员能够避免因丢失其设备而丢失这些数据。该系统将通过众所周知的网络分发机制向所有人免费提供，并将作为其他操作系统供应商如何向其系统添加类似服务的模板。

The Data Tethers project is building an operating system that prevents loss of sensitive data when portable computers or storage devices are lost or stolen. Loss of such information is commonplace and often very damaging. Data Tethers addresses this problem by ensuring that when a portable device leaves a secure environment, sensitive data is not allowed to go with it. Many organizations have policies saying that such data should not leave their premises, but they have no enforcement mechanism. Data Tethers provides that mechanism. Data Tethers must track data as it is copied from file to file, since the goal is to prevent data loss, not just to protect particular files. The system must deal with issues of data lingering on in deleted files, temporary storage locations, and other obscure places in a modern computer, since thieves will look for sensitive data in those places, as well. Data Tethers is being added to Sun Microsystem's Open Solaris, an existing operating system in common use, and will make use of Sun's standard mechanism for adding functionality to Open Solaris. The expected results of the Data Tethers project will be a working open source operating system that will allow the owners and curators of sensitive data to avoid loss of that data through loss of their devices. This system will be freely available to all through a well-known web distribution mechanism, and will also serve as a template for how other operating system providers can add similar services to their systems.