Abstract: A cross domain monitoring service is described herein. The cross domain monitoring service may receive a request of a requestor to associate a set of attributes to an access control set for a predetermined set of users with respect to a computing resource of a domain, which the set of attributes includes at least one of a read access privilege, a write access privilege, or an execute access privilege for the computing resource. In response to a determination that the requestor has a privilege to perform an association of the set of attributes to the access control set for the predetermined set of users, the cross domain monitoring service may update the access control set with the association to the set of attributes, in which the updating the access control set causes one or more cryptographic keys associated with the access control set to receive the sets of attributes.

Abstract: The present disclosure describes techniques to detect and remediate cybersecurity threats within an enterprise network. More specifically, a Data Management Operating System (DMOS) analysis server is described that is configured to detect and remediate interactions initiated by enterprise devices with data items stored within an enterprise network. The DMOS analysis server may be configured to capture, via a security client that resides on the enterprise device, datum metadata associated with a data operation initiated by the enterprise device, analyze the datum metadata to determine whether the data operation is associated with a cybersecurity threat, and in doing so facilitate an execution of the data operation. In some examples, the DMOS analysis server may generate a response protocol for delivery to a global key server to facilitate execution of the data operation or restrict access to the data item by the enterprise device.

Abstract: A method and system of transporting data securely. A payload comprising a first encrypted data is serialized. The serialized payload is prepended with a first header to create a first data packet. The first data packet is encrypted using the second key to create a second data packet. The second data packet is prepended with a second header to create a third data packet. The third data packet is transported to a destination via a secure data transport.

Abstract: A method and system of securing data. A security client program stored in a memory of a user device intercepts an operating system call performed by a calling application of the user device for an unencrypted asset. A first key for the unencrypted asset from a server is requested. Upon receiving the first key for the unencrypted asset from a server, a secure resource is created by encrypting the unencrypted asset. Then, the operating system call is completed and an update message is sent to the server.