Nettitude Data Loss Intelligence (DLI)

组织重视他们的数据。安全控制历来都是围绕数据所在的环境实施的，目的是将风险降低到可接受的水平。企业之间协作工具的进步、云服务的使用、我们移动的工作环境的无边界性质以及对第三方的依赖--在数据周围提供这道安全“墙”可能非常困难。现代网络攻击利用现成的高级威胁情报、复杂的恶意软件和鱼叉式网络钓鱼技术，可以在几个步骤中穿透传统防御。但随着我们的数据增加，跟踪这些数据在哪里以及何时离开我们的组织变得更加困难。许多公司面临的首要挑战之一是知道他们需要保护哪些数据，在过去的6-12个月里，安全思想领导力发生了真正的转变，从简单地防止它发生，到知道它何时发生。当你被黑客攻击时，你如何应对，控制问题并恢复？阻止它的发生不再是一个现实的期望。“深度安全”是起点，但如果没有围绕“深度响应”的策略，组织只会在为时已晚之后才知道问题的存在。当前的解决方案试图保护环境，但如果数据泄露，您如何知道它去了哪里？或者是什么时候？Nettitude旨在通过开发数据丢失智能（DLI）原型工具来解决这些问题。这是在现有数据丢失防护（DLP）工具的基础上建立的，它标记了真实的数据，并在数据离开组织后向其所有者提供对这些数据的控制。数据本身在其行程中收集的控制和情报将提供一种独特的方法，以增强基于日志收集和分析的事件响应服务。这种额外的功能将使您能够了解和控制您的数据。

Organisations value their data. Security controls have historically been implemented aroundthe environment in which data resides in order to bring the risk down to an acceptable level.The advancements in collaboration tools between businesses, use of cloud services, theborderless nature of our mobile work environments, and a reliance on 3rd parties - providingthis secure ‘wall’ around your data can be very difficult. Modern cyber-attacks utilisingreadily available advanced threat intelligence, sophisticated malware and spear phishingtechniques can penetrate traditional defences in a few steps.But as our data increases, keeping track of where it is and when it leaves our organisationbecomes harder.One of the first challenges for many companies is knowing what data they need to protect,where it actually resides and who has access to it. In the last 6-12 months there has been a realshift in security thought leadership from simply preventing it from happening, to knowingwhen it does.When you do get hacked, how do you respond, contain the problem and recover? Stopping itfrom happening is no longer a realistic expectation. ‘Security in Depth’ is the starting point,but without a strategy around ‘Response in Depth’ organisations will only know a problemexists after it is too late.Current solutions attempt to secure the environment, but if the data gets out, how do youknow where it has gone? Or when it went?Nettitude aim to address these issues through the development of a Data Loss Intelligence(DLI) prototype tool. This builds significantly on existing Data Loss Prevention (DLP) toolsby tagging real data and providing control over this data to its owners after it has left theirorganisation. The control and intelligence gathered by the data itself on its journey willprovide a unique approach to enhance incident response services based around log datacollection and analysis.This additional capability will allow you to know and control your data.