|
ABSTRACT:
This paper maps the leakage points with regulations and best practices. Protection mechanisms can be simplified by breaking them into five major categories: classic malware protections to prevent system infections, enforceable access controls, encryption, filtering for data sensitive data types being sent out of the organization, and education.
In addition to traditional malware defenses, encryption and access controls play a huge role in protecting sensitive data from insiders no matter where the data rests or how it being acted upon. Equally important is the ability to filter, log, and take action on outbound traffic and downloads, which is commonly referred to as Data Leakage Protection (DLP). The last piece, education, can be enforced by the actions of the control systems themselves.
|
|
Authors
Barbara Filkins
Barbara Filkins has done extensive work in system procurement, vendor selection and vendor negotiations in her career as a systems engineering and infrastructure design consultant. Based in Southern California, she sees security as a process that she calls “policy, process, platforms, pipes, AND people.” Most recently she’s been involved with HIPAA security issues in the health and human services industry with clients ranging from federal agencies (DoD and VA) to municipalities and commercial businesses.
Deb Radcliff
SANS Analyst Program Editor
Deb Radcliff, SANS Analyst Program Editor, is an award-winning writer who has covered information security and online crime since 1994. Her articles are carried regularly in Computerworld, Networkworld, CSO, SC Magazine, The Register, CNN Online, and other leading computing and business magazines. They’re also translated into many different languages, cited in research and law journals, and used verbatim in college textbooks.
|
Information Security Research Library
