Questions tagged [dlp]
Data Loss Prevention (DLP) is a computer security term referring to systems that identify, monitor, and protect data in use, in motion and at rest
40
questions
0
votes
1
answer
114
views
Block file and data transfer out of a device
I was reading a documentation that suggests blocking the computer from transferring files to an external device, such as a HD, Camera or Pen Drive, allowing only reading.
Is this type of protection ...
- 123
1
vote
0
answers
88
views
How to protect PII data from being sold or exposed by employees
For PII, we capture mostly emails, mobile and name of users who signup on our website. Along with this purchases made by users are also a sensitive data. Protecting this data for users privacy is as ...
- 149
1
vote
0
answers
64
views
What are good mitigations for balancing secure external anonymous sharing from Sharepoint/One with convenience?
What are good mitigation techniques to allow corp users to share files externally with anyone, yet maintain some kind of control?
Ie. OneDrive and SharePoint can allow users to share a file with “...
- 195
0
votes
1
answer
122
views
How Were FireEye's Tools Exfiltrated?
What was the mechanism for exfiltrating FireEye's redhat tools in the recent SolarWinds hack? I understand it was via HTTP (small packets to many servers)? Are there any further details?
Is this a ...
- 173
1
vote
1
answer
116
views
Is it possible to ensure detection and logging of all attempts to copy data out of a system?
I am cross-posting this question from Serverfault, because I am in doubt where it fits best.
Say I have a server set up for processing sensitive data. The few authorised users of the system are ...
- 111
1
vote
1
answer
132
views
How to detect use of personal NAS devices from corporate machines?
We have an issue where people are taking laptops home and connecting them to their personal home networks in order to backup corporate data to their private NAS devices. From a DLP standpoint we have ...
1
vote
2
answers
141
views
How to set up full disk file encryption?
I want to set up my company's laptops in a way that all files created on these laptops can only be read by these laptops. If it is copied to a USB then that file is only readable when plugging that ...
- 11
-1
votes
1
answer
102
views
Do any API-based CASB use native DLP features in cloud applications?
I think I've understood what CASB are and the differences between proxy/API-based architectures. What is still unclear to me is how exactly API-based CASB function.
I know most products use APIs to ...
0
votes
1
answer
167
views
“Flow” between computers (Logitech mouse) DLP
From a DLP perspective, does anyone know what DLP controls to block or monitor this Logitech Flow?
- 1
-1
votes
1
answer
84
views
MAC OS full admin rights and software removal in a corp environment
We have MAC OS for our developers (running with root). We also deploy an DLP endpoint agent. Now what happens, in some cases they just sudo and uninstall the agent because it slows down the machine. ...
- 1,498
1
vote
1
answer
285
views
DLP vs end-to-end messengers
I am interested in how DLP systems work. I have noticed that developers of DLP say that the software can see messenger traffic including end-to-end solutions. I understand MITM, certificate change, ...
- 13
5
votes
5
answers
2k
views
DLP to protect Source code for Startups
My client is a small startup who wants to protect their Source code, have basic network security, USB disable etc. are in place.
Wondering what are DLP options suitable for a small startup, mainly ...
- 81
1
vote
0
answers
78
views
How do Data Leak Prevention (DLP) implemented in Google or Facebook workspace?
I wonder how do Data leak prevention for mitigate insider threat being implemented in mature company/organization, ex. Google, Facebook, Netflix?
What tools that are used?
How do they have visibility ...
- 11
-1
votes
2
answers
244
views
PGP Data loss prevention for Linux endpoints
If a company allows his employees to use encryption, especially PGP encryption, it will run into trouble. Because AES128 is unbreakable, that means traffic which is routed in the intranet can't be ...
- 211
3
votes
1
answer
212
views
Why would a goal of DLP solution implementation include "loss of mitigation"?
I'm studying for the CCSP exam and a practice question read:
The goals of DLP solution implementation include all of the following,
except:
A. Policy enforcement
B. Elasticity
C. Data ...
- 3,286
0
votes
1
answer
127
views
Difference between legitimate file transfer vs data exfiltration of confidential files using FTP
I have FTP logs and some other logs assuming that corporate environment is actively monitored. How would I know that user is using ftp to transfer regular file and not using the same to transfer ...
1
vote
2
answers
253
views
How to detect long lived SSH sessioned
I am trying to figure out a way to detect ssh sessions that have been established over a long period of time. I seem to recall that there were ways to detect tcp connections that have been connected ...
- 355
0
votes
1
answer
390
views
Blocking Email Attachment download from outside company in Office 365
In Office 365, Emails can accessed from anywhere (within or outside of the company).
Want to block Email attachment download from outside of the company.
Emails should be accessible from outside of ...
- 443
-1
votes
1
answer
83
views
DLP Tool for requirement [closed]
Is there any DLP tool with default policies to comply with south african laws and regulations on PII ?
- 3
0
votes
2
answers
165
views
DLP and personal information
I think my company installed something in our Navigators. I think it is a DLP (Data Loss Prevention) tool.
Does that mean the administrator of the DLP can control our secret information? For example ...
- 107
2
votes
1
answer
2k
views
How to detect file uploads from our network? [duplicate]
I'm looking to monitor file uploads to the internet (mainly through web browsers) from our network. Specifically our application source files.
What is the best way to do this? I'm aware some DLP ...
- 380
0
votes
1
answer
174
views
Prepare for effects of Data Loss Prevention
My company are preparing to install DLP (Data Loss Prevention) on our machines. I don't know what that means, how it works, what it can block for us, or how they can control our PCs and our ...
- 107
0
votes
4
answers
654
views
Can we use Data Loss Prevention (DLP) to Protect encryption keys? [closed]
I would like to setup DLP in Network taping mode to identify and protect if someone is sending the encryption keys outside to organization. Is it possible to configure such rule in the DLP policy?
1
vote
1
answer
200
views
Monitor or prevent? DLP [duplicate]
Scenario:
I'm administrating my company's network all alone. I'm the only IT guy around and can not spend too much time with anything special as some people would start freaking out.
I have to ...
- 2,354
1
vote
4
answers
234
views
DLP email techniques
I've been asked to implement some external commands to be called by our email server in order to perform some basic check over outgoing messages.
I'm doing a research to understand what kind of ...
- 11
2
votes
2
answers
3k
views
Block mobile tethering on android phones from Windows (DLP)
In our small organisation I have tried my best at implementing DLP by:
Making sure users access all files from the server
Local disks are denied access (forced to work only on network drives)
...
- 121
-3
votes
3
answers
2k
views
How do I prevent users to pose the document by taking pictures using a camera? [duplicate]
I have a problem in data leakage prevention: users can copy the documents on SharePoint by take many pictures (using a camera).
Please help me to prevent that user's action.
- 11
2
votes
3
answers
641
views
Is my Data Loss Prevention approach missing something obvious?
I think I'm too close to the problem here and I just looking for a sanity check.
My product blocks files from being stolen by restricting what programs can access what 'type' of the data. (e.g. ...
- 133
1
vote
0
answers
188
views
DLP for Phone calls [closed]
I would like to know if there is a DLP system that can monitor phone conversation, in order to search for sensitive data leakage by the company users to external users.
We know NSA does that :)
Is ...
- 19
0
votes
2
answers
3k
views
Monitoring file copy on external devices
Transferred a personal folder from an external HDD to a USB using my
work PC. Just used a simple cut paste method between the two drives,
never writing anything to the internal HDD. However, come ...
user41557
1
vote
1
answer
1k
views
What security risks are associated with DLP Systems?
Some high level risks with DLP that I can identify (with the monitoring componant):
1- Abuse of authority: people with access to the system can look into other users private data.
2- Loss of ...
- 707
4
votes
2
answers
5k
views
Does there exist software that will scan a filesystem for possible files containing PHI?
I don't need a list of software (I know shopping questions are off topic), but my google-fu is failing me at this. Basically looking for software that will scan a filesystem looking for files that may ...
- 978
3
votes
2
answers
851
views
Blocking executables at the firewall in the enterprise
The infrastructure team in our medium enterprise has requested blocking of all executables at the firewall. We have a firewall which is capable of DLP, so therefore this can be set up fairly easily. I'...
- 33
3
votes
6
answers
8k
views
How do I prevent data from leaving my network?
I have a network of about 10 computers and I want to prevent sensitive data and source code leaks. To achieve that, I would like to block all file uploading / attaching.
What are the options ...
- 133
5
votes
2
answers
5k
views
How can I prevent private data from being disclosed outside of my organization?
I'm not looking to secure my internal network.
Our company keeps sensitive customer information. How can I prevent this information from spreading outside of the company?
How do big companies ...
- 175
2
votes
3
answers
733
views
Where do organizations store their sensitive documents? How do they protect them?
Where do organizations store their sensitive documents?
How do they protect them?
What are the pros and cons for each method? (If there are multiple common ones)
EDIT: I am more referring to ...
- 123
1
vote
3
answers
1k
views
Monitoring and filtering of arbitrary outgoing data
I would like to be able to not just centrally monitor but also filter any organizational data moving out our edge routers, regardless of the sender application and regardless of the protocol/port used ...
- 861
10
votes
3
answers
1k
views
What factors do you use to choose data loss prevention techniques to use, if any?
Had an excellent discussion this evening with ISACA Scotland around data loss prevention. There are technical tools out there from such luminaries as Checkpoint, MacAfee, Cisco, Symantec etc, but all ...
- 61.4k
8
votes
6
answers
3k
views
How can I secure a network share from the insider threat?
We have a network share that contains thousands of files. I am concerned that anyone with access to the internet could copy that information to a CD.
In addition to disabling all removable media, ...
- 387
12
votes
3
answers
10k
views
Prevent acccess to the C drive on Windows systems
Is it possible to prevent regular users from accessing the C drive via Windows Explorer? they should be allowed to execute certain programs. This is to ensure that employees cannot steal or copy out ...
- 379