Win32 based sensor for email auditing

Abstract

At present time email became a part of enterprise culture and contains big amount of companypsilas intellectual property. But improper use of email may lead to leakage of sensitive information and other problems. One of the ways to prevent this is to use outgoing email auditing. One of the main parts of this process is email sensor. The paper describes a model and Win32 implementation of network sensor for this aim. Sensor captures data directly from network traffic, parses it, extracts email information and sends to a control unit. Device is intended for enterprise email auditing systems.