Re:Maintaining Digital Certificate Security
by click170 on Monday March 23, 2015 @09:30PM
(#9254398)
You don't check for every record in your database, you create a regex (or multiple regexes) which matches the patterns you don't want leaked. This is how I've seen Data Loss Prevention done in the Sophos UTM.
Yes, if even the simplest obfuscation technique is employed, this system falls flat on its face. (Shh don't tell the regulators)
Re:Maintaining Digital Certificate Security
by kjs3 on Monday March 23, 2015 @10:52PM
(#9254635)
Sophos is a low-end solution. Higher end solutions (e.g. Vontu) do in fact let you detect on individual records or groups of non-regex detectable groups of records using fingerprinting.
Yes, if even the simplest obfuscation technique is employed, this system falls flat on its face. (Shh don't tell the regulators)