Provilla, Inc. has introduced a new approach to enterprise information leak prevention boasting the broadest coverage, highest accuracy and performance in the industry, according to company statements. And the company adds that it is the only solution that stops leaks from mobile and distributed data, any time, anywhere, and in any language.
The first product of its kind to provide true total protection for confidential information, Provilla LeakProof combines efficient endpoint-based enforcement with the company's patented DataDNA fingerprinting to detect and stop leaks of sensitive data at rest, in motion and in use by corporate desktops, branch offices and mobile workers. LeakProof is unique in its ability to intelligently enforce policies on systems online or offline, on corporate or public networks, and on I/O devices such as USB drives, by effectively blocking all exits regardless of attached device, communications channel or network protocol.
Provilla also announced the release of LeakSense, a free, lightweight, software-only version of LeakProof which organizations can download to quickly discover and monitor their data use activity. Based on the same technology as LeakProof, LeakSense provides a perfect way for organizations to gain visibility into the activity on their endpoints and evaluate their security risks.
LeakSense is available for free download at www.provilla-inc.com/prod-downloads .
"Before LeakProof, data loss prevention solutions could not intelligently address the most obvious ways in which data loss can occur, namely USB drives, offline laptops, and users on public networks," said Glen Kosaka, vice president of marketing at Provilla. "LeakProof solves this problem, protecting any data, any time, anywhere through a unique approach that combines sophisticated DataDNA fingerprint matching technology with a robust, highly efficient anti-leak agent on each endpoint that consumes far fewer CPU cycles than a typical anti-virus solution."
Enterprise-grade Provilla LeakProof quickly and unobtrusively prevents data leaks without compromising legitimate communications through superior, content-aware endpoint enforcement of granular security policies, and provides comprehensive forensics and on-demand scanning of all confidential data throughout the organization. The scanning capability is a powerful tool for addressing compliance regulations such as PCI, CA SB-1386, GLBA and Sarbanes Oxley (SOX), enabling enterprises to determine if confidential, unencrypted data exists on laptops and desktops.
Unlike other so-called total protection solutions that only monitor an endpoint's USB drives and other removable media, Provilla LeakProof intelligently blocks the transfer of confidential data through any network or I/O port, including USB, Firewire, PCMCIA, Bluetooth, Wi-Fi, IrDA, serial and parallel ports, including USB thumb drives, flash cards, (S)ATA and EIDE storage, printers, video cameras and other imaging devices.
LeakProof also monitors connections to personal email services, instant messaging systems, web sites, ftp servers and peer-to-peer networks. It protects laptops and PDAs even when they are offline, and works on corporate or public networks. LeakProof recognizes well over 300 file types, including MS Office files, database data, graphics and multimedia files, software and engineering files and archive files.
"With LeakProof's broad data leak coverage, we now have a single solution we can deploy throughout the local organization for all our outbound content compliance needs," said Zhi Zhang, senior IT manager at Sony-Ericsson China. "Because of its accuracy and high performance, users are completely unaware that LeakProof is operating on their computers until they intentionally or unintentionally violate our security policy, at which point LeakProof politely informs them of the issue while preventing the data leak. Now I can sleep at night without worrying about confidential data on all the desktops and laptops of our mobile workforce in China."
As confidential data is increasingly put to use outside of secure central repositories and off the corporate intranet -- in branch offices, at offshore development sites and by mobile professionals with laptops and PDAs -- enterprises are under unprecedented pressure to staunch accidental, intentional and malicious data leaks to protect intellectual property and confidential information, and maintain compliance with an array of government and industry privacy regulations. According to research from IDC, the detection and prevention of outbound content that violates corporate policy and government and industry regulations is creating a new security market segment that will swell to $435 million in 2009, growing at an annual rate exceeding 50 percent.
Provilla DataDNA Technology
Provilla's patented DataDNA(TM) technology provides the industry's highest levels of accuracy and performance for detecting sensitive data, resulting in the fewest false positives. At the core of the technology are sophisticated algorithms which extract the "DNA" of sensitive files, document, records, email messages and other content, and stores them as signatures. The DataDNA technology is robust enough to be able to identify confidential information even after it is heavily edited and saved as a different file, or even when portions are cut and pasted into a new file.
The LeakProof anti-leak Agent is a powerful, non-intrusive monitoring and enforcement agent that detects and prevents information leaks at each endpoint. Due to its extremely small memory footprint and extremely high efficiency, it is the only technology today that is practical to run on laptops and other constrained endpoints.
The anti-leak Agent runs on each endpoint and intercepts any activity with the potential to move data off the endpoint, including attaching content or cutting and pasting it into an email message and sending it. Because it resides on the endpoint and contains its own policy-matching capability and signature database, it provides the unique capability to operate even when offline and no connection to the server is available. It can perform rapid detection of sensitive data using its own signature snapshot to monitor and prevent leakage to local devices, network interfaces and network applications. In addition, the anti-leak Agent can scan data before it is encrypted to determine if encryption is allowed.
