Preventing Insider Information Leakage for Enterprises

This paper proposes a novel mechanism for protecting sensitive information inside big organisations against unauthorised disclosure by insider or outsider adversaries. Protecting sensitive content from being disclosed to unauthorised parties is a major concern for big enterprises, such as government agencies, banks, clinics and corporations. This paper mainly focuses on preventing insider information leakage whilst allowing authorised users to have privileged access on sensitive information from inside or outside an organisational premises. In this paper we use location-based services to bind devices to an organisational predefined geographical locations, helping to ensure that each organisation owns and manages its own devices (where its sensitive content can 'only' be accessed).