Questions tagged [dlp]

Data Loss Prevention (DLP) is a computer security term referring to systems that identify, monitor, and protect data in use, in motion and at rest

Filter by
Sorted by
Tagged with
0 votes
1 answer
114 views

Block file and data transfer out of a device

I was reading a documentation that suggests blocking the computer from transferring files to an external device, such as a HD, Camera or Pen Drive, allowing only reading. Is this type of protection ...
user avatar
  • 123
1 vote
0 answers
88 views

How to protect PII data from being sold or exposed by employees

For PII, we capture mostly emails, mobile and name of users who signup on our website. Along with this purchases made by users are also a sensitive data. Protecting this data for users privacy is as ...
user avatar
  • 149
1 vote
0 answers
64 views

What are good mitigations for balancing secure external anonymous sharing from Sharepoint/One with convenience?

What are good mitigation techniques to allow corp users to share files externally with anyone, yet maintain some kind of control? Ie. OneDrive and SharePoint can allow users to share a file with “...
user avatar
  • 195
0 votes
1 answer
122 views

How Were FireEye's Tools Exfiltrated?

What was the mechanism for exfiltrating FireEye's redhat tools in the recent SolarWinds hack? I understand it was via HTTP (small packets to many servers)? Are there any further details? Is this a ...
user avatar
  • 173
1 vote
1 answer
116 views

Is it possible to ensure detection and logging of all attempts to copy data out of a system?

I am cross-posting this question from Serverfault, because I am in doubt where it fits best. Say I have a server set up for processing sensitive data. The few authorised users of the system are ...
user avatar
1 vote
1 answer
132 views

How to detect use of personal NAS devices from corporate machines?

We have an issue where people are taking laptops home and connecting them to their personal home networks in order to backup corporate data to their private NAS devices. From a DLP standpoint we have ...
user avatar
1 vote
2 answers
141 views

How to set up full disk file encryption?

I want to set up my company's laptops in a way that all files created on these laptops can only be read by these laptops. If it is copied to a USB then that file is only readable when plugging that ...
user avatar
-1 votes
1 answer
102 views

Do any API-based CASB use native DLP features in cloud applications?

I think I've understood what CASB are and the differences between proxy/API-based architectures. What is still unclear to me is how exactly API-based CASB function. I know most products use APIs to ...
user avatar
0 votes
1 answer
167 views

“Flow” between computers (Logitech mouse) DLP

From a DLP perspective, does anyone know what DLP controls to block or monitor this Logitech Flow?
user avatar
-1 votes
1 answer
84 views

MAC OS full admin rights and software removal in a corp environment

We have MAC OS for our developers (running with root). We also deploy an DLP endpoint agent. Now what happens, in some cases they just sudo and uninstall the agent because it slows down the machine. ...
user avatar
  • 1,498
1 vote
1 answer
285 views

DLP vs end-to-end messengers

I am interested in how DLP systems work. I have noticed that developers of DLP say that the software can see messenger traffic including end-to-end solutions. I understand MITM, certificate change, ...
user avatar
5 votes
5 answers
2k views

DLP to protect Source code for Startups

My client is a small startup who wants to protect their Source code, have basic network security, USB disable etc. are in place. Wondering what are DLP options suitable for a small startup, mainly ...
user avatar
1 vote
0 answers
78 views

How do Data Leak Prevention (DLP) implemented in Google or Facebook workspace?

I wonder how do Data leak prevention for mitigate insider threat being implemented in mature company/organization, ex. Google, Facebook, Netflix? What tools that are used? How do they have visibility ...
user avatar
  • 11
-1 votes
2 answers
244 views

PGP Data loss prevention for Linux endpoints

If a company allows his employees to use encryption, especially PGP encryption, it will run into trouble. Because AES128 is unbreakable, that means traffic which is routed in the intranet can't be ...
user avatar
3 votes
1 answer
212 views

Why would a goal of DLP solution implementation include "loss of mitigation"?

I'm studying for the CCSP exam and a practice question read: The goals of DLP solution implementation include all of the following, except: A. Policy enforcement B. Elasticity C. Data ...
user avatar
  • 3,286
0 votes
1 answer
127 views

Difference between legitimate file transfer vs data exfiltration of confidential files using FTP

I have FTP logs and some other logs assuming that corporate environment is actively monitored. How would I know that user is using ftp to transfer regular file and not using the same to transfer ...
user avatar
1 vote
2 answers
253 views

How to detect long lived SSH sessioned

I am trying to figure out a way to detect ssh sessions that have been established over a long period of time. I seem to recall that there were ways to detect tcp connections that have been connected ...
user avatar
0 votes
1 answer
390 views

Blocking Email Attachment download from outside company in Office 365

In Office 365, Emails can accessed from anywhere (within or outside of the company). Want to block Email attachment download from outside of the company. Emails should be accessible from outside of ...
user avatar
  • 443
-1 votes
1 answer
83 views

DLP Tool for requirement [closed]

Is there any DLP tool with default policies to comply with south african laws and regulations on PII ?
user avatar
  • 3
0 votes
2 answers
165 views

DLP and personal information

I think my company installed something in our Navigators. I think it is a DLP (Data Loss Prevention) tool. Does that mean the administrator of the DLP can control our secret information? For example ...
user avatar
  • 107
2 votes
1 answer
2k views

How to detect file uploads from our network? [duplicate]

I'm looking to monitor file uploads to the internet (mainly through web browsers) from our network. Specifically our application source files. What is the best way to do this? I'm aware some DLP ...
user avatar
  • 380
0 votes
1 answer
174 views

Prepare for effects of Data Loss Prevention

My company are preparing to install DLP (Data Loss Prevention) on our machines. I don't know what that means, how it works, what it can block for us, or how they can control our PCs and our ...
user avatar
  • 107
0 votes
4 answers
654 views

Can we use Data Loss Prevention (DLP) to Protect encryption keys? [closed]

I would like to setup DLP in Network taping mode to identify and protect if someone is sending the encryption keys outside to organization. Is it possible to configure such rule in the DLP policy?
user avatar
1 vote
1 answer
200 views

Monitor or prevent? DLP [duplicate]

Scenario: I'm administrating my company's network all alone. I'm the only IT guy around and can not spend too much time with anything special as some people would start freaking out. I have to ...
user avatar
  • 2,354
1 vote
4 answers
234 views

DLP email techniques

I've been asked to implement some external commands to be called by our email server in order to perform some basic check over outgoing messages. I'm doing a research to understand what kind of ...
user avatar
2 votes
2 answers
3k views

Block mobile tethering on android phones from Windows (DLP)

In our small organisation I have tried my best at implementing DLP by: Making sure users access all files from the server Local disks are denied access (forced to work only on network drives) ...
user avatar
  • 121
-3 votes
3 answers
2k views

How do I prevent users to pose the document by taking pictures using a camera? [duplicate]

I have a problem in data leakage prevention: users can copy the documents on SharePoint by take many pictures (using a camera). Please help me to prevent that user's action.
user avatar
2 votes
3 answers
641 views

Is my Data Loss Prevention approach missing something obvious?

I think I'm too close to the problem here and I just looking for a sanity check. My product blocks files from being stolen by restricting what programs can access what 'type' of the data. (e.g. ...
user avatar
  • 133
1 vote
0 answers
188 views

DLP for Phone calls [closed]

I would like to know if there is a DLP system that can monitor phone conversation, in order to search for sensitive data leakage by the company users to external users. We know NSA does that :) Is ...
user avatar
0 votes
2 answers
3k views

Monitoring file copy on external devices

Transferred a personal folder from an external HDD to a USB using my work PC. Just used a simple cut paste method between the two drives, never writing anything to the internal HDD. However, come ...
user avatar
1 vote
1 answer
1k views

What security risks are associated with DLP Systems?

Some high level risks with DLP that I can identify (with the monitoring componant): 1- Abuse of authority: people with access to the system can look into other users private data. 2- Loss of ...
user avatar
  • 707
4 votes
2 answers
5k views

Does there exist software that will scan a filesystem for possible files containing PHI?

I don't need a list of software (I know shopping questions are off topic), but my google-fu is failing me at this. Basically looking for software that will scan a filesystem looking for files that may ...
user avatar
3 votes
2 answers
851 views

Blocking executables at the firewall in the enterprise

The infrastructure team in our medium enterprise has requested blocking of all executables at the firewall. We have a firewall which is capable of DLP, so therefore this can be set up fairly easily. I'...
user avatar
  • 33
3 votes
6 answers
8k views

How do I prevent data from leaving my network?

I have a network of about 10 computers and I want to prevent sensitive data and source code leaks. To achieve that, I would like to block all file uploading / attaching. What are the options ...
user avatar
5 votes
2 answers
5k views

How can I prevent private data from being disclosed outside of my organization?

I'm not looking to secure my internal network. Our company keeps sensitive customer information. How can I prevent this information from spreading outside of the company? How do big companies ...
user avatar
  • 175
2 votes
3 answers
733 views

Where do organizations store their sensitive documents? How do they protect them?

Where do organizations store their sensitive documents? How do they protect them? What are the pros and cons for each method? (If there are multiple common ones) EDIT: I am more referring to ...
user avatar
1 vote
3 answers
1k views

Monitoring and filtering of arbitrary outgoing data

I would like to be able to not just centrally monitor but also filter any organizational data moving out our edge routers, regardless of the sender application and regardless of the protocol/port used ...
user avatar
  • 861
10 votes
3 answers
1k views

What factors do you use to choose data loss prevention techniques to use, if any?

Had an excellent discussion this evening with ISACA Scotland around data loss prevention. There are technical tools out there from such luminaries as Checkpoint, MacAfee, Cisco, Symantec etc, but all ...
user avatar
  • 61.4k
8 votes
6 answers
3k views

How can I secure a network share from the insider threat?

We have a network share that contains thousands of files. I am concerned that anyone with access to the internet could copy that information to a CD. In addition to disabling all removable media, ...
user avatar
  • 387
12 votes
3 answers
10k views

Prevent acccess to the C drive on Windows systems

Is it possible to prevent regular users from accessing the C drive via Windows Explorer? they should be allowed to execute certain programs. This is to ensure that employees cannot steal or copy out ...
user avatar