1
00:00:00,450 --> 00:00:02,370
Data loss prevention.

2
00:00:02,370 --> 00:00:05,400
Data loss prevention is set up to monitor the data

3
00:00:05,400 --> 00:00:09,360
of a system while it's in use, in transit, or at rest.

4
00:00:09,360 --> 00:00:12,030
It does this in order to detect any attempts

5
00:00:12,030 --> 00:00:13,260
to steal the data.

6
00:00:13,260 --> 00:00:14,760
Let's think about when we had data

7
00:00:14,760 --> 00:00:16,410
stored 20 or 30 years ago,

8
00:00:16,410 --> 00:00:17,502
where did they store most of it?

9
00:00:17,502 --> 00:00:20,040
Well, most businesses stored it,

10
00:00:20,040 --> 00:00:22,440
print it off and in a filing cabinet.

11
00:00:22,440 --> 00:00:24,120
And if someone wanted to get that,

12
00:00:24,120 --> 00:00:26,010
they'd have to break into your offices,

13
00:00:26,010 --> 00:00:27,300
open the filing cabinet

14
00:00:27,300 --> 00:00:28,922
and physically take the files.

15
00:00:28,922 --> 00:00:29,876
This limited the amount

16
00:00:29,876 --> 00:00:32,988
of information that somebody could steal from you

17
00:00:32,988 --> 00:00:35,100
because they really could only steal

18
00:00:35,100 --> 00:00:36,810
what they could carry with them.

19
00:00:36,810 --> 00:00:39,720
Then we started allowing people to work remotely

20
00:00:39,720 --> 00:00:42,330
and a lot of the data was stored on laptops.

21
00:00:42,330 --> 00:00:43,860
If you happen to stop for a lunch

22
00:00:43,860 --> 00:00:45,420
and you left your laptop sitting in your car,

23
00:00:45,420 --> 00:00:46,800
somebody could have broken

24
00:00:46,800 --> 00:00:48,748
into your car and stolen your laptop,

25
00:00:48,748 --> 00:00:51,620
and they now have access to all the data that was on it.

26
00:00:51,620 --> 00:00:54,029
The next evolution in data theft occurred when

27
00:00:54,029 --> 00:00:56,082
we started using external hard drives.

28
00:00:56,082 --> 00:00:59,370
These started being used all throughout our offices.

29
00:00:59,370 --> 00:01:02,130
These hard drives could hold large amounts of data.

30
00:01:02,130 --> 00:01:03,361
We could plug it into the network

31
00:01:03,361 --> 00:01:04,800
through our laptop,

32
00:01:04,800 --> 00:01:07,500
and download a ton of information and data.

33
00:01:07,500 --> 00:01:10,080
Then could walk out of the building with it,

34
00:01:10,080 --> 00:01:12,728
but these were kind of large and easy to detect.

35
00:01:12,728 --> 00:01:16,230
Next, we started seeing thumb drives that hold just as much

36
00:01:16,230 --> 00:01:17,270
as these external hard drives,

37
00:01:17,270 --> 00:01:19,920
carrying billions of documents out the front door

38
00:01:19,920 --> 00:01:21,270
without no one knowing it

39
00:01:21,270 --> 00:01:24,780
because they're so small and fit right into your pocket.

40
00:01:24,780 --> 00:01:26,757
But wait, we don't even need to do that nowadays

41
00:01:26,757 --> 00:01:28,560
because we have things like Dropbox

42
00:01:28,560 --> 00:01:31,410
and Google Drive where we get terabytes

43
00:01:31,410 --> 00:01:34,470
of storage available to you hooked up to the network,

44
00:01:34,470 --> 00:01:37,710
and I could sit there and upload everything your company has

45
00:01:37,710 --> 00:01:39,710
and get access to it anywhere in the world.

46
00:01:39,710 --> 00:01:42,990
This is a huge problem for businesses because our data

47
00:01:42,990 --> 00:01:45,259
and our intellectual property is what the currency

48
00:01:45,259 --> 00:01:47,748
of business is these days.

49
00:01:47,748 --> 00:01:51,621
To protect it, we have to use data loss prevention systems.

50
00:01:51,621 --> 00:01:55,890
These systems come as either software or hardware solutions.

51
00:01:55,890 --> 00:01:57,960
The first data loss prevention system we're going to talk

52
00:01:57,960 --> 00:02:01,170
about is an endpoint DLP system.

53
00:02:01,170 --> 00:02:03,240
An endpoint system is usually a piece of software

54
00:02:03,240 --> 00:02:06,300
that is installed on a workstation or a laptop.

55
00:02:06,300 --> 00:02:08,091
It's going to monitor the data that's in use

56
00:02:08,091 --> 00:02:09,780
on the computer.

57
00:02:09,780 --> 00:02:11,910
If someone tries to do a file transfer,

58
00:02:11,910 --> 00:02:13,770
it'll either stop the file transfer

59
00:02:13,770 --> 00:02:15,960
or alert the admin of the occurrence

60
00:02:15,960 --> 00:02:17,995
based on certain rules and policies,

61
00:02:17,995 --> 00:02:21,420
very much like an IDS or IPS would,

62
00:02:21,420 --> 00:02:23,130
but focused on data.

63
00:02:23,130 --> 00:02:27,339
DLPs can be set to detection mode or prevention mode.

64
00:02:27,339 --> 00:02:30,690
The next one we have is a network DLP system.

65
00:02:30,690 --> 00:02:33,018
This is a piece of software hardware that is a solution

66
00:02:33,018 --> 00:02:35,550
placed at the perimeter of your network.

67
00:02:35,550 --> 00:02:38,790
A sole function in life is to check all of the data going

68
00:02:38,790 --> 00:02:42,030
into and out of your network with a special focus

69
00:02:42,030 --> 00:02:44,010
on things going out of the network.

70
00:02:44,010 --> 00:02:45,961
They want to detect data in transit

71
00:02:45,961 --> 00:02:48,598
that shouldn't be leaving the building.

72
00:02:48,598 --> 00:02:51,963
The third type we have is called storage DLP.

73
00:02:53,414 --> 00:02:54,930
This is a software that is installed on a server

74
00:02:54,930 --> 00:02:56,160
in the data centers

75
00:02:56,160 --> 00:02:57,838
and inspects the data while it's addressed

76
00:02:57,838 --> 00:02:59,160
on the server.

77
00:02:59,160 --> 00:02:59,993
This is usually

78
00:02:59,993 --> 00:03:01,952
because they've encrypted it or watermarked it,

79
00:03:01,952 --> 00:03:05,670
and we want to make sure that nobody is accessing the data

80
00:03:05,670 --> 00:03:07,770
at times that they shouldn't be.

81
00:03:07,770 --> 00:03:10,320
For example, if someone starts downloading large amounts

82
00:03:10,320 --> 00:03:12,030
of data at two in the morning,

83
00:03:12,030 --> 00:03:13,650
that's probably against your policy

84
00:03:13,650 --> 00:03:15,235
and the DLP could catch it.

85
00:03:15,235 --> 00:03:19,290
The fourth type of DLP is a cloud-based DLP system.

86
00:03:19,290 --> 00:03:20,640
These systems are usually offered

87
00:03:20,640 --> 00:03:22,767
as a software as a service solution,

88
00:03:22,767 --> 00:03:26,079
and that's a part of your cloud service and storage needs.

89
00:03:26,079 --> 00:03:28,920
They're going to protect your data when it's stored inside

90
00:03:28,920 --> 00:03:30,570
of those cloud services.

91
00:03:30,570 --> 00:03:32,727
For example, our company uses Google Drive

92
00:03:32,727 --> 00:03:34,800
and we have data loss prevention

93
00:03:34,800 --> 00:03:37,650
as part of a cloud service offered by Google.

94
00:03:37,650 --> 00:03:38,483
So in summary,

95
00:03:38,483 --> 00:03:41,850
these data loss prevention solutions are made to be accurate

96
00:03:41,850 --> 00:03:44,227
in a way that they stop data from leaving your network.

97
00:03:44,227 --> 00:03:47,790
They're going to go through and look at data at rest,

98
00:03:47,790 --> 00:03:50,380
data in use, and data in transit to ensure

99
00:03:50,380 --> 00:03:52,470
that it's following the policies you've

100
00:03:52,470 --> 00:03:54,480
set up as a security admin

101
00:03:54,480 --> 00:03:57,753
so you could protect the assets of your company.