DLP systems are becoming more and more prevalent in medium to large enterprises. While these systems can be very effective at preventing data leakage, the operational complexity often limits the full capability of the technology. This talk examines some of the core technologies (not products), operational limitations, and proposes a systematic methodology to test end to end effectiveness of an implementation. Additionally techniques will be discussed that have been used in actual penetration tests to bypass highly restrictive DLP implementation and their components.

Download:
http://archive.org/download/BsidesCleveland2012Bsidescle/4TestingEnterpriseDlpSystemsAdvancedDataExfiltrationTechniques-AlbertSchool.avi

Back to Bsides Cleveland 2012 video list