Abstract: A set of DLP rules are enforced to prevent loss of biometric data on a computing device. Attempts to perform operations targeting biometric data are detected, and the specific biometric data being targeted is identified. It is determined whether given attempted operations targeting biometric data are permitted, according to the set of DLP rules. This can take the form of enforcing DLP rules governing attempted operations based on factors such as the type of biometric data, quantity of biometric data, quality of biometric data, target of an attempt to transmit biometric data, specific users and/or applications that initiated attempted operations, specific people represented by the biometric data, relationships between them, etc. In response to determining that a specific attempted operation targeting biometric data is not permitted according to the DLP rules, the operation is blocked. If the DLP rules do not prohibit the operation, its execution is permitted.

Abstract: Techniques for data loss prevention in an image-specific domain using image data identifiers and validators are described. According to some embodiments, a method may include defining an image data identifier and a data identifier validator, the image data identifier specifying one or more prohibited object types, and the data identifier validator specifying one or more prohibited object sub-types. The method may include receiving an image, identifying one or more objects in the image based on attributes of the one or more objects, determining an object type of a first object of the one or more objects, and determining whether the object type of the first object matches at least one of the one or more prohibited object types.

Abstract: Structured text and pattern matching may be performed for data loss prevention in object-specific image domain. According to some embodiments, a method may include receiving an image, identifying one or more objects in the image based on attributes of the one or more objects, and determining an object type of a first object of the one or more objects by a computing device. The method may include identifying, by the computing device, one or more specific regions of the first object for recognition based on the object type of the first object and recognizing text in the one or more specific regions of the first object. In some embodiments, the method may then include providing, by the computing device, the text recognized in the one or more specific regions of the first object to a security engine, wherein the security engine may be configured to evaluate whether the text comprises sensitive information.

Abstract: Structured text and pattern matching may be performed for data loss prevention in object-specific image domain. According to some embodiments, a method may include receiving an image, identifying one or more objects in the image based on attributes of the one or more objects, and determining an object type of a first object of the one or more objects by a computing device. The method may include identifying, by the computing device, one or more specific regions of the first object for recognition based on the object type of the first object and recognizing text in the one or more specific regions of the first object. In some embodiments, the method may then include providing, by the computing device, the text recognized in the one or more specific regions of the first object to a security engine, wherein the security engine may be configured to evaluate whether the text comprises sensitive information.

Abstract: A system and method for generating a cancelable biometric includes providing at least one pattern and combining the at least one pattern with a biometric image by employing a transform pixel operation to generate a transformed enrollment such that information about the transform pixel operation and the at least one pattern form a security key for protecting the biometric image. The biometric image is reused to generate another security key in the event that the security key is to be canceled.

Abstract: A system and method for generating a cancelable biometric includes shifting at least one pixel region in a biometric image comprised of pixel regions. The at least one pixel region is combined with at least one other pixel region to form a replacement region for the at least one pixel region to form a transformed image. The biometric image is reused to generate another transformed image if the transformed image is to be canceled.

Abstract: A system and method for generating a cancelable biometric includes providing at least one pattern and combining the at least one pattern with a biometric image by employing a transform pixel operation to generate a transformed enrollment such that information about the transform pixel operation and the at least one pattern form a security key for protecting the biometric image. The biometric image is reused to generate another security key in the event that the security key is to be canceled.

Abstract: A system and method for generating a cancelable biometric includes shifting at least one pixel region in a biometric image comprised of pixel regions. The at least one pixel region is combined with at least one other pixel region to form a replacement region for the at least one pixel region to form a transformed image. The biometric image is reused to generate another transformed image if the transformed image is to be canceled.