Trend Micro LeakProof: Leveraging Data Leak Prevention Technology to Secure Corporate Assets

T TTrend Micro LeakProof
Trend Micro, Incorporated
Leveraging Data Leak Prevention Technology to Secure Corporate Assets
A Trend Micro White Paper I December 2008Trend Micro LeakProof: Leveraging Data Leak Prevention Technology to Secure Corporate Assets
Table of CONTENTs
I. Executive Summary: Addressing the Insider Threat . . . . . . . . . . . . . . . . . . . . . . 3
II. The High Cost of Data Leaks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
III. Conventional DLP Solutions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
IV. Trend Micro LeakProof DLP Solution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
V. LeakProof 3.x Features  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
vi. summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
2 White Paper | Leveraging Data Leak Prevention Technology to Secure Corporate AssetsTrend Micro LeakProof: Leveraging Data Leak Prevention Technology to Secure Corporate Assets
I. Executive Summary: Addressing the Insider Threat
According to the Ponemon Institute, 78 percent of data breaches come from authorized insiders of an organization. Loss of proprietary ask yourself these questionsinformation and intellectual property can trigger fines, litigation, 1. Do you worry about your intellectual brand damage, and bad press. Enterprises have deployed protective property leaking out such as contracts, measures-such as VPNs, firewalls, and network monitors-to provide schematics, source code, or diagrams?audit trails and prevent unauthorized external access to proprietary 2. How do you prevent your customer or information. However, these solutions don't address the rising threat employee information such as IDs, from internal users. Because they have access to data assets, insiders credit cards, account names/numbers are a major channel for information leaks, whether through deliberate from leaking?policy breaches or accidental data loss (such as losing a mobile device 3. Have you had a recent breach of containing personal records). sensitive information? How did it leak? Through what channel-e-mail, USB?To protect sensitive data, enterprises need an effective data leak 4. Have you evaluated any products prevention (DLP) solution that monitors potential information leaks at the to protect your data, such as encryption, point of use. However, the explosion of messaging systems, wireless digital rights management, DLP, email networking, and USB storage devices has made the protection of critical filtering? If so, what, when, where, enterprise data difficult. As a result, enterprises are experiencing an who, why?increase in the loss or theft of data assets by employees or contractors 5. Do you have any regulatory compliance who accidentally or maliciously leak data. initiatives where protection of sensitive information and/or education of In today's virtual enterprise, it's rarely practical or cost-effective to search employees is critical?employees for iPods or other USB devices. A more comprehensive, effective system for preventing data leaks is required at every port, on every endpoint in the enterprise, and on any network whether corporate, public, or WAN.
Since most breaches are accidental, companies have an opportunity to better protect enterprise data by educating employees on the proper handling of information. Data leak prevention technology should not only monitor and prevent leaks, but help to educate and raise awareness of employees about companies' policies and procedures for handling sensitive data. Plus, meeting compliance regulations such as SB-1386, GLBA, EU DPD, Sarbanes-Oxley, and HIPAA requires intelligent content filtering solutions that enforce security policies.
3 White Paper | Leveraging Data Leak Prevention Technology to Secure Corporate AssetsTrend Micro LeakProof: Leveraging Data Leak Prevention Technology to Secure Corporate Assets
ii. The High Cost of Data Leaks
Never before has the threat to corporate data Customer Pain Pointsassets been so great-and so costly. According to Executive ConcernsAttrition.o... [download for more]