Securing Confidential Documents in Local Network Using an Email Filtering Technique

• Main Author: SAMUEL ROMPAS (NIM: 23516013), PATRICE
• Format: Theses
• Language: Indonesia
• Online Access: https://digilib.itb.ac.id/gdl/view/29915
• Institution: Institut Teknologi Bandung

<p align="justify">This study proposes a new approach in email filtering to secure confidential documents. In practice, an email is checked by a program if containing spam or virus before sent to its destination. By using an existing anti-spam or email anti-virus technology, it is possible to prevent an unauthorized person in an organization to send an email consisting of confidential documents. This technique provides a mean of changing the technology that is normally filtering spam and virus from outside of local area network to become a tool to secure confidential document by filtering outgoing emails. <br /> <br /> Confidential documents must be prevented from leaking outside an organization’s premises. Despite various ways to move a document to a different location, email is still one of the main alternatives to communication between parties and used to send documents as attachments. Many means of protection have been implemented to avert the risk of data leakage via email, but they do not stop this problem from keep happening. Thus, a different approach to secure confidential document leakage by email is required. <br /> <br /> The solution consists of three parts which are a sample architecture, a delivery approval mechanism, and an email filtering agent. The network architecture centers on the placement of email filtering agent to focus on checking outgoing emails. The delivery approval mechanism is designed to ensure document confidentiality while providing system availability when required. The email filtering agent is a result of expanding a program called Amavis so that it is capable to do document classification and filtering as extra features. <br /> <br /> Some testing scenarios are carried out to validate the functionality of the agent inside the architecture. The implementation of this technique is proven to be a success. The results show that the proposed solution can secure confidential documents while handling normal email delivery.<p align="justify">