Leaks of data occur for two reasons — because of targeted attacks and banal disorganisation. The second occurs more often. As a rule, there is no difference between the cases of ‘accidentally sent sensitive information to the contractor’ and ‘maliciously revealed trade secrets’. A scatterbrain and a malicious staff member use approximately the same pattern of behaviour: they send outside the data that should not get outside the perimeter.
We offer just block any attempt of information leakage while minimising the number of false positives. In certain situations, knowing that nothing was lost, you can calmly sort out what happened and decide whether to be limited to the disciplinary action and computer literacy courses or to fire the employee with cause.
There is a special technical solution called DLP-system. It is a commercial tool of the intelligence services aimed at finding specific information throughout the network traffic. That is, at all points where output of information beyond the protected perimeter is possible, a special security complex is installed.
If one started to print a list of customers, printing is stopped, and the incident is reported to the security officer. If one started to send the database of suppliers by e-mail, sending is stopped, computer of the originator of the e-mail is disconnected from the network, and the incident is reported to the security officer. Suspicious traffic between the web site and customer database may be a result of the hacker attack, it is necessary to raise the alarm, and so on.
DLP-complexes know what is restricted to disclose and how the leak may look. They ensure that anything even approximately similar to those data, even photographs and drawings roughly similar to those data (in some systems) do not spill beyond the perimeter.
After installing such system, you can forget about the problem of malicious employees and continue to worry only about the serious, targeted external attacks because DLP-systems also protect from small and average severity attacks.
Yes, we have a test bench with a deployed DLP-system, and we can simulate a small pilot intrusion, so you can really see how it works.
Yes. We can tell you in person. In short, a top manager began to copy the data, but the system raised the alarm at the very first segment. They managed to cut short the leak and catch him red-handed.
