Implementation of Two Layered DLP Strategies
Muhammad Arsalan Paracha, Muhammad Sheeraz, Yuanyuan Chai, Saad Ahmad, Zubair Nasir Khan, Shah Hussain, Aftab-Ul-Haq, Muhammad Hanif Durad · 2022
Data Loss Prevention or DLP system, is a cybersecurity system that identifies and stops data breaches. Organizations use it for internal security and regulatory compliance since it prevents sensitive data from being extracted. As organizations explore strategies to decrease the danger of sensitive data leaking outside the firm, data loss prevention solutions are becoming more popular. A DLP solution is built on a set of core technologies that enable its engine to properly detect the sensitive data and protect that data from possible insider breaches which businesses must safeguard and take remedial action to avert accidents. This paper gives a comprehensive overview of different DLP solutions and their effectiveness followed by our own indigenous and standalone DLP system design and implementation. It begins by providing a solution to the aforementioned difficulties with universal serial bus (USB) memory devices. Then, at the application level, it displays an email filter to avoid the erroneous transmission of e-mail containing sensitive information and finally its integration with a SIEM solution.