Re: Data leakage
Saby yaar, what percentage of computers do you see infected with viruses/trojans/worms and what percentage of those are without AV software?
Plus the fact that rootkits are becoming more and more prevalent in the world these days. Those are easy to come by and not difficult to implement.
Re: Data leakage
oh yeah root kit analysis is not everyone’s cup of tea. And Security companies are struggling to cope up with that threat.
and dont get me started on the percentage of computers without AV softwares. They are our rozi roti 
Re: Data leakage
Printing the file or simply reading it is also counted as leakage, no?
Re: Data leakage
^ of course it does. but simply reading may not be leakage because reproducing it may well be an issue. Printing channel, Definitely!
Re: Data leakage
Considered as Data theft?
On a serious note: Wireless connection back doors.
Restored attachments:
Re: Data leakage
abey yaar laptop chori kar lo buss… i.e. the physical hardware… lowest layer of penetration in IT security.
Re: Data leakage
bhai jaan laptop chori kerna mushkil hai na. I am not a spy 
lol aaho. Good one.
Re: Data leakage
So people, the reason I opened this thread that I was working on this data loss prevention project and wanted to ensure that there is no data leakage channel left for possible sensitive data theft.
So these are the channels identified
Internet Explorer
Google Chrome
Mozilla Firefox
Opera
Skype
Yahoo Messenger
MSN Messenger
File Transfer Protocol
Outlook SMTP
POP3 Servers (Gmail, yahoo, hotmail)
Removable Storage Media (USB drives)
Bluetooth
CD/DVD Drives
Printing Devices
Print Screen
Clipboard
Protection in compression (zip, tar, tgz, etc) and encryption
Project will be signed off in a day or two. Quite an experience!
Re: Data leakage
^ Saby, for Data Loss Prevention, this is one of my favorite papers: Data Loss Prevention | CSRC . It has a few good guiding principles for DLP such as prioritizing data loss categories and data loss modes, on the basis of which you can select the desired solution capabilities.
Is your company/project looking at Content-Aware DLP? It’s quite the buzz these days in the IT security sector.
Yes lc. This is am industry leading dlp solution and quite a good one. It’s content awareness is resource intensive but an effective one nonetheless.
This implementation was challenging and fun because client wanted protection on all communication channels. Hence quite comprehensive. Some clients choose to leave some channels and block some.
