Thesis Details

Control of External Devices on macOS to Prevent Data Leaks

Master's Thesis Student: Zuzelka Jozef Academic Year: 2019/2020 Supervisor: Pluskal Jan, Ing., Ph.D.
Czech title
Řízení externích zařízení na macOS s cílem zabránit úniku dat
Language
English
Abstract

This thesis is aimed at managing and blocking of external devices in Apple macOS operating system to prevent leaks of sensitive data. The implemented solution presents a chosen approach for blocking external drives and selected cloud drives.  The project uses the DiskArbitration framework to block external devices, as it is the most suitable approach for this type of task. However, cloud drives are in reality just synchronized folders, therefore Endpoint Security framework had to be utilized to achieve an adequate level of control. Currently supported cloud providers are iCloud and Dropbox, and access to them can be restricted either entirely or to read-only. The ability to synchronize remote changes was preserved; however, in the case of Dropbox, its GUI cannot be used to edit files.

Keywords

Apple, OS X, macOS, Audit, Device Drivers, Kernel Extensions, System Extensions, IOKit, DriverKit, External Device, Device Control, Channel Control, DLP, Data Leaks Prevention, Kauth, MACF, KEXT, SYSX, iCloud, Dropbox, USB

Department
Degree Programme
Information Technology, Field of Study Computer Networks and Communication
Files
Status
defended, grade D
Date
17 July 2020
Reviewer
Committee
Ryšavý Ondřej, doc. Ing., Ph.D. (DIFS FIT BUT), předseda
Grégr Matěj, Ing., Ph.D. (DIFS FIT BUT), člen
Hrubý Martin, Ing., Ph.D. (DITS FIT BUT), člen
Kekely Lukáš, Ing., Ph.D. (DCSY FIT BUT), člen
Kořenek Jan, doc. Ing., Ph.D. (DCSY FIT BUT), člen
Vojnar Tomáš, prof. Ing., Ph.D. (DITS FIT BUT), člen
Citation
ZUZELKA, Jozef. Control of External Devices on macOS to Prevent Data Leaks. Brno, 2020. Master's Thesis. Brno University of Technology, Faculty of Information Technology. 2020-07-17. Supervised by Pluskal Jan. Available from: https://www.fit.vut.cz/study/thesis/22637/
BibTeX
@mastersthesis{FITMT22637,
    author = "Jozef Zuzelka",
    type = "Master's thesis",
    title = "Control of External Devices on macOS to Prevent Data Leaks",
    school = "Brno University of Technology, Faculty of Information Technology",
    year = 2020,
    location = "Brno, CZ",
    language = "english",
    url = "https://www.fit.vut.cz/study/thesis/22637/"
}
Back to top