topic Data Leak Protection, searching for passwords. in Automation/API Discussions

Data Leak Protection, searching for passwords.

Lee_Duque — Thu, 09 Oct 2014 17:11:30 GMT

Does anyone use data filtering for passwords discovery? Basically i want to know and stop if possible when someone logs into their external email service like Google Email and upload say a passwords.txt file full of usernames and passwords OR inputs in the body of the email usernames and passwords and sends it out. I also use Websense which is more mature in the DLP area and has built in password discovery RegeX formulas and such which works fairly well. I wanted to see if PANs have something similar or if someone has this setup and would like to share any RegEx formulas for password discovery?

Re: Data Leak Protection, searching for passwords.

pulukas — Sat, 11 Oct 2014 11:25:30 GMT

As you have seen there are no built in features for this. But if you are able to see the regex formulas from other sources these can be added to the DLP filter.

With web based email remember that most of these will be an ssl connection so you would need to decrypt the traffic in order to do the inspection.

Re: Data Leak Protection, searching for passwords.

Retired Member — Wed, 22 Oct 2014 16:12:30 GMT

you can use decrypt mirror for ssl traffic but you have to use another dlp solution.