Implementation of Logging for Information Tracking on Network

In recent years, information leakage cases happen frequently and are one of big problems. 70% of such a cases are caused by human factors such as mismanagements and/or careless operations. Such a factors can be removed by the control of information flow and/or the check of computer operations. Therefore, some studies to control information flows have been proposed. However, almost studies focus on single computer. Thus, it is insufficient in recent working situations which exchange a lot of information through network. In this paper, we propose a framework to track sensitive information flow on multiple computers at kernel. The framework hooks system calls which may cause the diffusion of information, maintains their logs, and uses their logs to trace information. As the result, we can trace information on multiple computers. It would be useful for the control of the operations which uses sensitive information.