user file activity block / monitor

Discussion in 'other security issues & news' started by mikeo1313, Jan 12, 2011.

Thread Status:
Not open for further replies.
  1. mikeo1313

    mikeo1313 Registered Member

    Joined:
    Jun 22, 2006
    Posts:
    108
    can anyone suggest a software that would impede someone from saving as, or transmitting certain files from an os?

    I'm pretty sure there has to be something out there to monitor file activity but if the goal is that people can have access to a file yet not be able to save it to disk or send it to their email, to prevent this from happening.

    Only ideas I have are the only way you can ALMOST pull it off is taking out drives & disabling usb ports. Also, blocking common email web pages, but you can certainly miss one you've never known.

    Any suggestions?
     
  2. mikeo1313

    mikeo1313 Registered Member

    Joined:
    Jun 22, 2006
    Posts:
    108
    pretty much assumed you'd have to block usb ports and highly limit webaccess to surf only certain pre-defined webpages, that dont have webmail.
     
  3. katio

    katio Guest

    It's not possible. Well, you could build a "Mission Impossible" room with no connection to the outside and pat down everyone entering for cellphones and cameras. After leaving everyone gets the "Men in Black" treatment...

    Here's a nice idea that gets by the most restrictive firewalls: http://blog.didierstevens.com/2008/03/31/hiding-inside-wikipedia/

    Or you just don't grant people whom you don't trust access.
     
  4. trismegistos

    trismegistos Registered Member

    Joined:
    Jan 29, 2009
    Posts:
    365
    It is theoretically possible but you have to put so much effort to finely tune it to your individual concerns. Only kernel hooking Classical HIPS with file monitor with or without network monitor will be able to do that like Malware defender.

    In blocking common email web pages, you can do that with a proxy web filter or with a host file, and have malware defender to guard the latter from being modified or even be read to begin with.
     
  5. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
Loading...
Thread Status:
Not open for further replies.