- Mythbuster busts his own tale
- 10 open source companies to watch
- Sony recalls 73,000 Vaio laptops
- Tool to evade China's Web censorship
- Chrome and Firefox and add-ons
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:App Performance | On Demand Security | Networking Solution | SOA | Value of WDS
CHICAGO -- Platforms that detect when sensitive corporate data is leaked are more effective against people making honest errors than they are against criminals trying to steal the data, says one analyst.
A small percentage of data that leaks from corporate networks (0.5%) is stolen by professionals whose efforts will evade detection by security products touted as data-leakage prevention tools, says Nick Selby, an analyst with 451 Group who spoke at the Security Standard conference Monday.
The products do catch data leaks, 98% of which are linked to an accident or stupidity and 1.5% that are caused by vengeful employees clumsily attempting to steal data, he says. “Data leakage is an antistupidity issue as much as it is a technology issue,” Selby says. “Most data-leakage products can’t discover activity by skilled insiders looking to steal.”
He says the products should be recast as tools that can help eliminate data breaches made in error, rather than those that are done intentionally.
Selby named Reonnex, Vontu, Onigma (bought by McAfee), Tablus (bought by EMC/RSA) and Port Authoritiy (bought by WebSense), among many others. He singled out these vendors because they have been the recipients of venture-capital dollars. He says the total investment in this technology amounts to $250 million. “That’s an awful lot of money,” Selby says, “and vendors, you’re not going to fix [the problem].”

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...
Vulnerability Management For DummiesDownload this concise book "Vulnerability Management for Dummies," to learn about the simple steps...
The ROI and TCO Benefits of Data Deduplication for Data Protection in the EnterpriseThis paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...
PoE Plus: Impact on the PoE MarketThe standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...
Harnessing the power of communications to increase workplace performanceDue to the convergence of IT and telecommunications technologies, the business workplace has been...

We have so many holes punched in our firewalls today that many industry insiders question the value...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comments (2)
of course they don't stop intentional leak/theftBy Mohit on September 11, 2007, 1:47 pmA very simple way to bypass them is to encrypt the data :) I wrote about these tools here: http://securetheworld.blogspot.com/2007/03/methods-for-network-based-devices.html A...
Reply | Read entire comment
RE: Data-leakage prevention tools catch errors, not theftBy Nick Hawley on September 11, 2007, 1:09 pmOf course this is the case. Data leakage prevention tools are Leak, not theft, prevention. The problem from a compliance standpoint, is there is no dfference between...
Reply | Read entire comment
View all comments