A Sensitive Information Detection Method Based on Network Traffic Restore

Abstract

With increasing importance of protecting sensitive data, it is necessary to monitoring the transmission of sensitive data. Most recent methods detect the network packet based on the analyzing IP, port, size characteristics and payload of the network traffic packets, which can not be used for detecting sensitive document transmitted via network. Hence, this paper propose asensitive information detection method based on network traffic restore solution to fix the problem. This method firstly use TCP reassembling to restore documents from network traffic, and then use TF-IDF model to judge the similarity with those documents marked with sensitive flag, which is very simple and efficient