Data Loss Prevention

 View Only
  • 1.  Metadata Detection

    Posted Jul 28, 2016 04:16 PM
    How effective can a protection be only with metadata detection? Please share your thoughts on this subject. Thanks.


  • 2.  RE: Metadata Detection
    Best Answer

    Posted Jul 29, 2016 06:09 AM

    Hello,

    In my opinion the protection/detection of a file using it's metadata is only a good option/solution if you can guarantee that the metadata cannot be forged or deleted. Even if you use a third party tool to inject metadata to protect documents, this piece of information should be protected against edition (e.g. required password to change advanced properties of a PDF document).

    You should also bear in mind that for some protocols the detection by metadata might not be enough for DLP to trigger the detection / response rules. For instance a document might be printed (even if the response rule is configured to block the action) if the only detection is inserted in the File Properties.

    Just my 2 cents..



  • 3.  RE: Metadata Detection

    Posted Jul 29, 2016 08:55 AM
    Thank you