user file activity block / monitor

[mikeo1313]

can anyone suggest a software that would impede someone from saving as, or transmitting certain files from an os?

I'm pretty sure there has to be something out there to monitor file activity but if the goal is that people can have access to a file yet not be able to save it to disk or send it to their email, to prevent this from happening.

Only ideas I have are the only way you can ALMOST pull it off is taking out drives & disabling usb ports. Also, blocking common email web pages, but you can certainly miss one you've never known.

Any suggestions?

[mikeo1313]

pretty much assumed you'd have to block usb ports and highly limit webaccess to surf only certain pre-defined webpages, that dont have webmail.

It's not possible. Well, you could build a "Mission Impossible" room with no connection to the outside and pat down everyone entering for cellphones and cameras. After leaving everyone gets the "Men in Black" treatment...

Here's a nice idea that gets by the most restrictive firewalls: http://blog.didierstevens.com/2008/0...ide-wikipedia/

Or you just don't grant people whom you don't trust access.

[trismegistos]

Originally Posted by mikeo1313

can anyone suggest a software that would impede someone from saving as, or transmitting certain files from an os?

I'm pretty sure there has to be something out there to monitor file activity but if the goal is that people can have access to a file yet not be able to save it to disk or send it to their email, to prevent this from happening.

Only ideas I have are the only way you can ALMOST pull it off is taking out drives & disabling usb ports. Also, blocking common email web pages, but you can certainly miss one you've never known.

Any suggestions?

It is theoretically possible but you have to put so much effort to finely tune it to your individual concerns. Only kernel hooking Classical HIPS with file monitor with or without network monitor will be able to do that like Malware defender.

In blocking common email web pages, you can do that with a proxy web filter or with a host file, and have malware defender to guard the latter from being modified or even be read to begin with.

[MrBrian]

Windows Rights Management Services