3 ms·
Clearly someone in their infosec department just got fired. In the financial industry (I work in tech for finance), the "DLP" aka Data Loss Protection segment i
by SEJeff 12y ago
Clearly someone in their infosec department just got fired. In the financial industry (I work in tech for finance), the "DLP" aka Data Loss Protection segment is very busy.
A few ideas:
https://www.verdasys.com/solutions/eip.html https://www.verdasys.com/solutions/eip.html
http://www.symantec.com/data-loss-prevention http://www.symantec.com/data-loss-prevention
http://interguardsoftware.com/sp_dlp_lnd_v6.html http://interguardsoftware.com/sp_dlp_lnd_v6.html
http://technet.microsoft.com/en-us/library/jj150527(v=exchg.150).aspx http://technet.microsoft.com/en-us/library/jj150527(v=exchg....
DLP software is what keeps sensitive software inside the confines of where it is supposed to stay. Funnily enough, DLP software like exactly the stuff in those links is what was not installed in the base Edward Snowden was at in Hawaii because it used too much bandwith.
The Federal Reserve uses Verdasys to prevent digital copies of the plates that print money from making it out (I know a guy who works in their tech department). It is scary to work at a place where they don't always trust even their administrators who have root/Administrator privs.
- greatquux 12y agoIs such a setup able to figure out if I base64 or uuencode a file and include it as text inside of a plain text e-mail? I would think there'd always be a way around this somehow.
- SEJeff 12y agoYes. The software we use will actually log when you perform any sort of read on files matching certain strings (ie sensitive source codes). One of our infosec guys encoded some sensitive source code and played it through the speaker to his phone and reconstructed it. The DLP software detected that and it was in a dashboard buried amongst other things.