Video Screencast Help
Scheduled Maintenance: Symantec Connect is scheduled to be down Saturday, April 19 from 10am to 2pm Pacific Standard Time (GMT: 5pm to 9pm) for server migration and upgrades.
Please accept our apologies in advance for any inconvenience this might cause.

EV Indexes

Created: 02 Dec 2012 | 1 comment

Hello,

Does anyone know how EV Altavista indexes are organized within the system, I'm trying to understand if there are any potential threats when someone gets access to the disks that host index volumes and thereby use some logic to read or retrieve confidentail information partially (whatever is available within the index). Are there any methods to protect the index data apart from NTFS permissions..

Thank you,

Comments 1 CommentJump to latest comment

JesusWept3's picture

There are dev tools out there that can query the indexes, the kind of information you'd see is things like subjects, senders, recipients etc, but its largely just very small chunks of data that couldnt be used to piece together an email just from the keywords and things that are stored.

Presumably if someone has access to the EV indexes, they'd have access to the Vault Stores that contain the DVS/DVSSP files etc which with some effort can be opened, or even more so they might have access to the VAC and just give themselves permissions to peoples archives or use an EVPM script etc

But as far as the indexes are concerned, pretty low risk really.
When you are searching it first hits the EV Indexes, but when you see previews in like search.asp or archive explorer etc, its actually retrieving the body of the converted content from the stored email itself, not the indexes