The Archive Creator web service for creating secure archives can now be deployed in the SearchInform DLP system. The service allows security specialists to easily adopt an effective practice of password-protected file transfer without using third-party services. This increases employees’ information security awareness and involves them in data protection processes. Also, it prevents corporate files from being compromised when they are transferred outside the company. DLP, meanwhile, monitors the content of archives. If the content is prohibited for distribution, DLP blocks attempts to transfer the archive. 

Any employee in an organization can use Archive Creator web service by simply opening it in a web browser. When the employee uploads a file, the archive is created automatically. Afterwards, the service generates a strong archive password, which can be viewed or copied to the clipboard. This is reliable, convenient, and secure, as users do not have to use third-party resources or create passwords themselves. 

When the web service archives files, it requests a password from the DLP management server. 

There, the password is generated according to pre-set conditions, transferred to Archive Creator, encrypted and saved to the database. Storing passwords allows the DLP system to automatically check the contents of the archives against security policies.

“We implemented this feature within our DLP to address two problems at once. First, it is a step towards People-Centric Security, through which security experts can develop employees' skills of secure data management. Employees are more willing to comply with rules when security specialists help them by providing convenient tools instead of interfering in their work. Secondly, it automates analysis of content of password-protected archives. Information security specialist does not have to manually deal with protected files; the system does everything by itself. Due to this, there will be no security gaps”, comments Sergio Bertoni, Lead Analyst at SearchInform.

ABOUT SEARCHINFORM

SearchInform is an information security and risk management product vendor, as well as an MSS provider. The company's clients are more than 4000 companies in 20+ countries. Today, the team has products and services for comprehensive protection against insider threats at all levels of corporate information systems: FileAuditor (the DCAP class solution); DLP system with extended functionality; Risk Monitor (advanced platform for internal threat mitigation); SIEM system; IS outsourcing service.