Sunday, February 6, 2011

Secure Your Endpoint Data

IT security teams are having a challenging time these days as it is getting more and more difficult to keep on top of new malware threats and keep your company’s endpoint data secure. Anti-virus is having problems keeping up with today’s strains of malware which are growing immensely and keep coming up with new and improved versions. Examples you have seen in the headlines this year alone would be the Stuxnet worm, multiple botnets, Operation Auroa and many, many more. There are hundreds of malicious anti-malware programs and fake security applications designed to keep your workstations hostage.

Besides the legitimate Anti-virus programs, there are some things you can still do to keep your data protected. Below are a few things that will definitely get you well on your way.

Application Control

Application control or application whitelisting is a simple concept. You only allow approved applications to run on a system and block everything else. Some of the unique advantages of that is eliminating the need to continually scan for malware and the update process as well as built-in protection from zero-day attacks. The latest systems are highly customizable allowing the IT staff to specify end user privileges to specific applications.

Full-disk encryption
Basically, full-disk encryption (FDE) encrypt all of the data-including the operating system and system files-on a hard drive to block unauthorized endpoint access. Although gives IT professionals a convenient way to control all of the workstations on a network, not all FDE systems encrypt data when it is being shared between devices, stored on external drives, or being transferred via e-mail.

Data loss protection
Data loss protection (DLP) solutions secure endpoint data, whether in use on an individual PC, being transmitted externally over a network, or housed in storage. The techniques to do so vary from scanning content to monitor communications to contextual security analysis to encryption of stored data. When it comes down to it what it does is allow administrators to identify risks and lock down sensitive data before it can leak outside the organization.


SafeCentral’s WebProtection
SafeCentral’s WebProtection™ is a one-time install, light-weight data loss prevention (DLP) application that operates under the assumption that the user’s machine is already infected with malware ensuring that endpoint data is secure. WebProtection™ interprets and intercepts over 5,000 discrete Windows commands (from write to disk, to save in RAM and beyond) and effectively blocks all potentially dangerous activities except those processes needed for the transaction. Unlike other tools, WebProtection™ goes down deep into the DNA of the Windows operating system and is able to control all processes during a secured transaction.

With these tools available to you your company can feel better about the security of its endpoint data and free up valuable IT staff time for other tasks.

No comments:

Post a Comment