The greatest threat to enterprise data security comes from inside threats. Securing the enterprise requires an understanding of the data leak points, environment, people, and processes for managing sensitive information. This white paper explains how network-based and endpoint-based solutions can work together to provide the broadest protection available while ensuring scalability and manageability, and that employee productivity is not impacted.
Network and Endpoint Data Leak Prevention
Trend Micro, Incorporated
Comprehensive Protection Using a Best-of-Breed Approach
A Trend Micro White Paper I December 2008Network and Endpoint Data Leak Prevention: Comprehensive Protection Using a Best-of-Breed Approach
Table of CONTENTs
I. UNDERSTANDING THE DATA LEAK THREAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3
II. Evaluating Data Leak Prevention Solutions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4
III. The Trend Micro Approach . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
IV. datadnaT technology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
V. leakproof client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
VI. leakproof Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
VII. leakproof 3.x Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
VIII. SUMMARY . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
IX. additional resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
2 White Paper | Network and endpoint data leak preventionNetwork and Endpoint Data Leak Prevention: Comprehensive Protection Using a Best-of-Breed Approach
i. Understanding the Data Leak Threat
With the average organization maintaining fewer than 10 percent of its employees at its headquarters location, the distributed enterprise has become the norm where network boundaries are blurred. The "anywhere office" is a present day reality in Corporate America. Putting personnel closer to the business front lines and equipping them with mobile devices has changed how the enterprise operates. Further, critical business process functions are being off-shored at an increasing rate. Employees, contractors, suppliers, and other stakeholders access and handle corporate data from remote locations and on the road, email has become the main method to exchange vital information, and IT manages more devices not under their direct control than ever before. While the structure of today's organization creates new opportunities for efficiency and better customer service, it also creates greater opportunities for data leaks and loss. Enterprises are entering a new era where security must follow the data.
The dramatic increase of publicized and un-publicized security breaches from insiders and employees-usually inadvertent-has caused data leaks to rise up the 'worry' list of IT managers and executive leadership at private and public sector organizations around the world. Key threat vectors are highlighted below.
Beyond customer churn and damage to institutional reputations, data leaks have become a legal and regulatory compliance issue, with, fines, penalties, and liability settlements increasing as regulators and juries lose patience with organizations taking inadequate measures to protect sensitive organizational and stakeholder data. In order to better understand the problem, organizations should consider the following:. Priorities-Prioritize areas of vulnerability. Which key threat vectors are of most concern? USB drives? Mobile workers using web-based email? Databases? What types of data are most valuable? Unstructured files? Source code? Engineering documents? Customer/employee records?
3 White Paper | Network and endpoint data leak preventionNetwork and Endpoint Data Leak Prevention: Comprehensive Protection Using a Best-of-Breed Approach
. Environment-Understand the organization's IT infrastructure and how information is used, with an eye for points of potential data leak vulnerability. Which environments and scenarios Data is Mobilepose the greatest risk? Branch offices? Offshore development sites? Mobile workforces? . LaptopsCustomer service centers? . PDAs. USB Drives. People & Processes-Protection of sensitive information must take into account people, . MP3 Playerspolicies, and procedures for managing... [download for more]
