|
Data Security is the core part
of any organization nowadays as
data loss or data leakage cannot
be tolerated by any
organization. There is a Data
loss/leak prevention solution
which is a system that is
designed to detect potential
data breach / data ex-filtration
transmissions and prevent them
by monitoring, detecting and
blocking sensitive data which
in-use (endpoint actions),
in-motion (network traffic)
and at-rest (data
storage). In data leakage
incidents, sensitive data is
disclosed to unauthorized
personnel either by malicious
intent or inadvertent mistake.
Such sensitive data can come in
the form of private or company
information, intellectual
property (IP), financial or
patient information, credit-card
data, and other information
depending on the business and
the industry.
Standard Security Measures
like Firewalls, Intrusion
Detection System and Antivirus
Software are commonly available
mechanisms that safeguard
computer against Viruses,
outside/insider attacks.
Advanced Security Measures
employ machine learning and
temporal reasoning algorithms
for detecting abnormal access to
data (i.e., databases or
information retrieval systems)
or abnormal email exchange,
honeypots for detecting
authorized personnel with
malicious intentions, and
activity-based verification
(e.g., recognition of keystrokes
dynamics) for detecting abnormal
access to data.
Designated DLP Solutions
detect and prevent unauthorized
attempts to copy or send
sensitive data, intentionally or
unintentionally, without
authorization, mainly by
personnel who are authorized to
access the sensitive
information. In order to
classify certain information as
sensitive, these solutions use
mechanisms, such as exact data
matching, structured or
unstructured data
fingerprinting, statistical
methods, rule and regular
expression matching, published
lexicons, conceptual
definitions, and keywords
Data Loss Prevention software
Solution is a comprehensive,
content-aware solution that
discovers, monitors, and
protects confidential data
wherever it is stored or used –
across network, storage and
endpoint systems.
 |
