DO DATA LOSS PREVENTION SYSTEMS REALLY WORK?

Abstract : The threat of insiders stealing valuable corporate data continues to escalate. The inadvertent exposure of internal data has also become a major problem. Data loss prevention systems are designed to monitor and block attempts at exposing sensitive data to the outside world. They have become very popular, to the point where forensic investigators have to take these systems into account. This chapter describes the first experimental analysis of data loss prevention systems that attempts to ascertain their effectiveness at stopping the unauthorized exposure of sensitive data and the ease with which the systems could be circumvented. Four systems are evaluated (three of them in detail). The results point to considerable weaknesses in terms of general effectiveness and the ease with which the systems could be disabled.
Document type :
Conference papers
Complete list of metadatas

Cited literature [9 references]  Display  Hide  Download

https://hal.inria.fr/hal-01449068
Contributor : Hal Ifip <>
Submitted on : Monday, January 30, 2017 - 9:13:37 AM
Last modification on : Friday, December 1, 2017 - 1:16:44 AM

File

978-3-319-24123-4_20_Chapter.p...
Files produced by the author(s)

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Sara Ghorbanian, Glenn Fryklund, Stefan Axelsson. DO DATA LOSS PREVENTION SYSTEMS REALLY WORK?. 11th IFIP International Conference on Digital Forensics (DF), Jan 2015, Orlando, FL, United States. pp.341-357, ⟨10.1007/978-3-319-24123-4_20⟩. ⟨hal-01449068⟩

Share

Metrics

Record views

267

Files downloads

283