Shutter: Preventing Information Leakage Based on Domain Gateway for Social Networks

With the explosion of Online Social Networking (OSN), participation in social networking sites has dramatically increased in organizations like enterprises, campuses, etc. Lots of privacy or security information can be shared by a vast network of people including friends and strangers, which brings potential threats of information leakage. However, existing information protection methods cannot effectively detect the fine-grained user request contexts to OSN sites, resulting in security vulnerability in the organizations. In this paper, we propose Shutter, an information protection system based on domain gateway for social networks. Shutter employs a fine-grained traffic filter to analyze a massive number of HTTP requests and a scalable message parsing scheme for both HTTP and HTTPS traffic, which utilizes the characteristics of OSN requests to accelerate the parsing phrase. Shutter also leverages a rule matcher based on layered tire and multi-pattern matching algorithm to achieve high matching throughput, as well as fast rules inserting and deleting operations. We perform our experiments by collecting real request traffic and using the traffic data as our test input. The results demonstrate that Shutter achieves high throughput and preeminent scalability detecting user requests to OSN sites with insignificant memory overhead.