企业机密文件的安全防护现状与未来.ppt

* * * * * 紫色字體：屬於防火牆與防毒 藍色字體：屬於異地備援 紅色字體：攔阻或加密？？ * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * DRM 面臨的困難 Applications Typical File Formats Documents Microsoft Office, Adobe Reader, Notepad, WordPad doc, xls, ppt, pdf, etc. Image Files Adobe Photoshop, Adobe Illustrator, Microsoft Paint, ACDSee, DJVU psd, ai, bmp, tiff, jpg, gif, png CAD Files AutoCAD, CATIA, Pro-E, I-deas, SolidWorks dwg, catpart, catproduct, prt, asm, mf1, mf2, sldprt, sldasm Multimedia Files Windows Media Player avi, mpg, mpeg, mp3, wma, wmv, asf, mid, wav 戰國時代，無法統一世界加解密標準 檔案格式複雜，各家不願意妥協 DRM 面臨困難 資安政策制訂與執行困難 作者決定Policy? 公司決定Policy? 公司高層配合？ 保護再進化 – 全面性防堵!! DLP Data Loss Prevention is a computer security term referring to systems designed to detect and prevent the unauthorized transmission of information from the computer systems of an organization to outsiders. It is also referred to by various vendors as Data Leak Prevention, Information Leak Detection and Prevention (ILDP), Information Leak Prevention(ILP), Content Monitoring and Filtering (CMF) or Extrusion Prevention System by analogy to Intrusion-prevention system. DLP DLP Data at rest includes scanning of storage and other content repositories to identify where sensitive content is located. We call this content discovery. Data in motion sniffing of traffic on the network (passively or inline via proxy) to identify content being sent across communications channels. Data in use endpoint solutions that monitor data as the user interacts with it. For example, they can identify when you attempt to transfer a sensitive document to a USB drive and block it. It also detects things like cut and paste, or use of sensitive data in an unapproved application. DLP Technologies Data Discovery and Protection Keyword matching Content filtering Data Monitoring and Prevention Intrusion detection Content collection/recognition DLP 案例 – Vontu acquired by Symantec DLP 案例 DLP 案例 DLP 案例 DLP 案例 DLP 案例 文件安全防護 – 未來趨勢 內外部分享 儲存 檔案生成 磁碟加密 網路/硬體禁用