4 ms·
"they should have extremely tight security about transferring 50TB of their crown jewels" Does anyone monitor amounts of data transferred? Honest question, I d
by roel_v 10y ago
"they should have extremely tight security about transferring 50TB of their crown jewels"
Does anyone monitor amounts of data transferred? Honest question, I don't know of any ACL levels that say 'after x MB, deny access' (or send alerts or whatever). You monitor/restrict directories or servers, i.e. pieces of information, whether they're 5KB or 5TB (I mean, that's what I've seen, I'm not in opsec/admin myself). Still you'd need to make several trips to take out that much data; although you can fit 6GB on a $35 LTO tape...
- shakna 10y agoWhen I worked with law enforcement, in Australia, the onsite admin got an alert every time a device was plugged into a secure-access machine. It also alerted if in the last hour more than 80gb was moved around. I would have thought that the NSA would have similar policies...
- anigbrowl 10y agoQuis custodiet ipsos custodes?
- tjalfi 10y agoThis is a common (if not universal) practice for large law firms. My employer has software that enforces ethical requirements and triggers alerts when people open, export, or email too many documents.
- EwanToo 10y agoSome of the high-end SIEM (security information and event management) systems do this, they'll alert if a machine that previously transferred low volumes of data from a database, such as a PC connecting to a database to query a few records, suddently transfers significantly more data.
- jdc0589 10y agoI don't know why I'm asking, cause we won't be able to afford it...but which can do this? This has come up a couple times recently.
- deleted 10y ago[deleted]