%0 Conference Proceedings %T DO DATA LOSS PREVENTION SYSTEMS REALLY WORK? %+ Coresec Systems [Malmo] %+ Blekinge Institute of Technology [Karlskrona] (BTH) %A Ghorbanian, Sara %A Fryklund, Glenn %A Axelsson, Stefan %Z Part 6: FORENSIC TOOLS %< avec comité de lecture %( IFIP Advances in Information and Communication Technology %B 11th IFIP International Conference on Digital Forensics (DF) %C Orlando, FL, United States %Y Gilbert Peterson %Y Sujeet Shenoi %3 Advances in Digital Forensics XI %V AICT-462 %P 341-357 %8 2015-01-26 %D 2015 %R 10.1007/978-3-319-24123-4_20 %K Data leakage prevention systems %K evaluation %K forensic implications %Z Computer Science [cs]Conference papers %X The threat of insiders stealing valuable corporate data continues to escalate. The inadvertent exposure of internal data has also become a major problem. Data loss prevention systems are designed to monitor and block attempts at exposing sensitive data to the outside world. They have become very popular, to the point where forensic investigators have to take these systems into account. This chapter describes the first experimental analysis of data loss prevention systems that attempts to ascertain their effectiveness at stopping the unauthorized exposure of sensitive data and the ease with which the systems could be circumvented. Four systems are evaluated (three of them in detail). The results point to considerable weaknesses in terms of general effectiveness and the ease with which the systems could be disabled. %G English %Z TC 11 %Z WG 11.9 %2 https://inria.hal.science/hal-01449068/document %2 https://inria.hal.science/hal-01449068/file/978-3-319-24123-4_20_Chapter.pdf %L hal-01449068 %U https://inria.hal.science/hal-01449068 %~ IFIP-LNCS %~ IFIP %~ IFIP-AICT %~ IFIP-TC %~ IFIP-WG %~ IFIP-TC11 %~ IFIP-DF %~ IFIP-WG11-9 %~ IFIP-AICT-462