Questions tagged [dlp]
Data Loss Prevention (DLP) is a computer security term referring to systems that identify, monitor, and protect data in use, in motion and at rest
31
questions
-1
votes
1answer
36 views
MAC OS full admin rights and software removal in a corp environment
We have MAC OS for our developers (running with root). We also deploy an DLP endpoint agent. Now what happens, in some cases they just sudo and uninstall the agent because it slows down the machine. ...
1
vote
1answer
81 views
DLP vs end-to-end messengers
I am interested in how DLP systems work. I have noticed that developers of DLP say that the software can see messenger traffic including end-to-end solutions. I understand MITM, certificate change, ...
5
votes
5answers
442 views
DLP to protect Source code for Startups
My client is a small startup who wants to protect their Source code, have basic network security, USB disable etc. are in place.
Wondering what are DLP options suitable for a small startup, mainly ...
1
vote
0answers
33 views
How do Data Leak Prevention (DLP) implemented in Google or Facebook workspace?
I wonder how do Data leak prevention for mitigate insider threat being implemented in mature company/organization, ex. Google, Facebook, Netflix?
What tools that are used?
How do they have visibility ...
-1
votes
2answers
161 views
PGP Data loss prevention for Linux endpoints
If a company allows his employees to use encryption, especially PGP encryption, it will run into trouble. Because AES128 is unbreakable, that means traffic which is routed in the intranet can't be ...
3
votes
1answer
111 views
Why would a goal of DLP solution implementation include “loss of mitigation”?
I'm studying for the CCSP exam and a practice question read:
The goals of DLP solution implementation include all of the following,
except:
A. Policy enforcement
B. Elasticity
C. Data ...
0
votes
1answer
62 views
Difference between legitimate file transfer vs data exfiltration of confidential files using FTP
I have FTP logs and some other logs assuming that corporate environment is actively monitored. How would I know that user is using ftp to transfer regular file and not using the same to transfer ...
1
vote
2answers
182 views
How to detect long lived SSH sessioned
I am trying to figure out a way to detect ssh sessions that have been established over a long period of time. I seem to recall that there were ways to detect tcp connections that have been connected ...
0
votes
1answer
255 views
Blocking Email Attachment download from outside company in Office 365
In Office 365, Emails can accessed from anywhere (within or outside of the company).
Want to block Email attachment download from outside of the company.
Emails should be accessible from outside of ...
-1
votes
1answer
39 views
DLP Tool for requirement [closed]
Is there any DLP tool with default policies to comply with south african laws and regulations on PII ?
0
votes
2answers
94 views
DLP and personal information
I think my company installed something in our Navigators. I think it is a DLP (Data Loss Prevention) tool.
Does that mean the administrator of the DLP can control our secret information? For example ...
2
votes
1answer
1k views
How to detect file uploads from our network? [duplicate]
I'm looking to monitor file uploads to the internet (mainly through web browsers) from our network. Specifically our application source files.
What is the best way to do this? I'm aware some DLP ...
0
votes
1answer
127 views
Prepare for effects of Data Loss Prevention
My company are preparing to install DLP (Data Loss Prevention) on our machines. I don't know what that means, how it works, what it can block for us, or how they can control our PCs and our ...
0
votes
4answers
398 views
Can we use Data Loss Prevention (DLP) to Protect encryption keys? [closed]
I would like to setup DLP in Network taping mode to identify and protect if someone is sending the encryption keys outside to organization. Is it possible to configure such rule in the DLP policy?
1
vote
1answer
145 views
Monitor or prevent? DLP [duplicate]
Scenario:
I'm administrating my company's network all alone. I'm the only IT guy around and can not spend too much time with anything special as some people would start freaking out.
I have to ...
1
vote
4answers
178 views
DLP email techniques
I've been asked to implement some external commands to be called by our email server in order to perform some basic check over outgoing messages.
I'm doing a research to understand what kind of ...
2
votes
2answers
2k views
Block mobile tethering on android phones from Windows (DLP)
In our small organisation I have tried my best at implementing DLP by:
Making sure users access all files from the server
Local disks are denied access (forced to work only on network drives)
...
-3
votes
3answers
1k views
How do I prevent users to pose the document by taking pictures using a camera? [duplicate]
I have a problem in data leakage prevention: users can copy the documents on SharePoint by take many pictures (using a camera).
Please help me to prevent that user's action.
2
votes
3answers
595 views
Is my Data Loss Prevention approach missing something obvious?
I think I'm too close to the problem here and I just looking for a sanity check.
My product blocks files from being stolen by restricting what programs can access what 'type' of the data. (e.g. ...
1
vote
0answers
124 views
DLP for Phone calls [closed]
I would like to know if there is a DLP system that can monitor phone conversation, in order to search for sensitive data leakage by the company users to external users.
We know NSA does that :)
Is ...
0
votes
2answers
3k views
Monitoring file copy on external devices
Transferred a personal folder from an external HDD to a USB using my
work PC. Just used a simple cut paste method between the two drives,
never writing anything to the internal HDD. However, come ...
1
vote
1answer
918 views
What security risks are associated with DLP Systems?
Some high level risks with DLP that I can identify (with the monitoring componant):
1- Abuse of authority: people with access to the system can look into other users private data.
2- Loss of ...
4
votes
2answers
4k views
Does there exist software that will scan a filesystem for possible files containing PHI?
I don't need a list of software (I know shopping questions are off topic), but my google-fu is failing me at this. Basically looking for software that will scan a filesystem looking for files that may ...
3
votes
2answers
785 views
Blocking executables at the firewall in the enterprise
The infrastructure team in our medium enterprise has requested blocking of all executables at the firewall. We have a firewall which is capable of DLP, so therefore this can be set up fairly easily. I'...
3
votes
6answers
6k views
How do I prevent data from leaving my network?
I have a network of about 10 computers and I want to prevent sensitive data and source code leaks. To achieve that, I would like to block all file uploading / attaching.
What are the options ...
6
votes
2answers
4k views
How can I prevent private data from being disclosed outside of my organization?
I'm not looking to secure my internal network.
Our company keeps sensitive customer information. How can I prevent this information from spreading outside of the company?
How do big companies ...
2
votes
3answers
623 views
Where do organizations store their sensitive documents? How do they protect them?
Where do organizations store their sensitive documents?
How do they protect them?
What are the pros and cons for each method? (If there are multiple common ones)
EDIT: I am more referring to ...
1
vote
3answers
891 views
Monitoring and filtering of arbitrary outgoing data
I would like to be able to not just centrally monitor but also filter any organizational data moving out our edge routers, regardless of the sender application and regardless of the protocol/port used ...
10
votes
3answers
1k views
What factors do you use to choose data loss prevention techniques to use, if any?
Had an excellent discussion this evening with ISACA Scotland around data loss prevention. There are technical tools out there from such luminaries as Checkpoint, MacAfee, Cisco, Symantec etc, but all ...
8
votes
6answers
2k views
How can I secure a network share from the insider threat?
We have a network share that contains thousands of files. I am concerned that anyone with access to the internet could copy that information to a CD.
In addition to disabling all removable media, ...
12
votes
3answers
10k views
Prevent acccess to the C drive on Windows systems
Is it possible to prevent regular users from accessing the C drive via Windows Explorer? they should be allowed to execute certain programs. This is to ensure that employees cannot steal or copy out ...
