Stealing Back The Data From Cyber-Attackers -Important and growing duty of care with information -The bad guys are not always outside -Security needs to be about everyday-value, not just insurance -Adaptive Redaction enable collaboration with critical information, without ‘stop and block’ of traditional DLP -It’s side effect is to steal the information back from the cyber-attacker

1. Dr. Guy Bunker
CTO,SVP Products
Clearswift
@guybunker
Stealing Back The Data
From Cyber-Attackers

2. Who Is This?
Willie Sutton
“Why do you rob banks?”
“Because that’s where the money is.”

3. Information
¡ Today’s currency
¡ Your crown jewels
¡ Credit cards & bank account
details are only the start
¡ Unlike money, if someone steals
yours, you could end up in jail...

4. Doesn’t Matter How Big Or Small...

5. There Is No Silver Bullet
¡ Prevent the bad stuff from coming in
¡ Detect if there is some bad stuff operating inside & stop it
¡ Prevent the good stuff from going out

6. It’s Not All About The Bad Guys
Source: The Enemy Within, Loudhouse, UK Report 2013
Of threats came from
within the extended
enterprise; employees,
ex-employees, contract
staff & trusted partners
Of respondents were
struggling to keep up
with the changing
security landscape
Of organizations
experienced some form
of data security incident
in the last year

7. Even Legitimate Access Causes Problems
51% of security professionals
say that non-technical
employees with legitimate
access to sensitive data are one
of the biggest threats to their
organisations
48% of security professionals say
third-party contractors with
legitimate access to their
organisations network are one of
the biggest threats to their
organisations
34% of security
professionals say that IT
administrators are one of
the biggest threats to
their organisations
Source: Enterprise Strategy Group, 2013

8. Data Loss Prevention
¡ Simple in theory – risk reduction
¡ But there are challenges
¡ Which stop business...
... and so stops deployment

9. What Do We Really Want?
¡ Communication
¡ Collaboration
¡ Secured information
¡ Remove only the
information that breaks
policy

10. Adaptive Redaction

11. It’s Not As Easy As It Was...
¡ The visible
¡ The invisible
¡ And the active

12. And If You Are A Bad Guy...

13. Summary
¡ Important and growing duty of care with information
¡ The bad guys are not always outside
¡ Security needs to be about everyday-value, not just
insurance
¡ Adaptive Redaction enable collaboration with critical
information, without ‘stop and block’ of traditional DLP
¡ It’s side effect is to steal the information back from the
cyber-attacker

14. Dr. Guy Bunker
@guybunker
guy.bunker@clearswift.com
www.clearswift.com