|
|
DLP solution as an organization data protection tool
Drápalíková, Jitka ; Mezera Michal, Bc. MSc (referee) ; Sedlák, Petr (advisor)
The bachelor thesis deals with elaboration of data protection proposal using Data Loss Prevention technology for a particular organization. The theoretical part is focused on data problematics in company’s environment and the DLP technology itself. The work also covers the comparison of DLP products on the market, selection of the product, its scope, proposal of setting and calculation.
|
|
|
Monitoring and Analysis of Users Using DLP System
Pandoščák, Michal ; Hanáček, Petr (referee) ; Drozd, Michal (advisor)
The purpose of this masters thesis is to study issues of monitoring and analysis of users using DLP (Data Loss Prevention) system, the definition of internal and external attacks, the description of the main parts of the DLP system, managing of politic, monitoring user activities and classifying the data content. This paper explains the difference between contextual and content analysis and describes their techniques. It shows the fundamentals of network and endpoint monitoring and describes the process and users activities which may cause a data leakage. Lastly, we have developed endpoint protection agent who serves to the monitoring activities at a terminal station.
|
|
|
Resilient fiber optic infrastructure
Spurný, Vladimír ; Kubánková, Anna (referee) ; Münster, Petr (advisor)
Optical networks are often mistaken for being secure, but there are ways to eavesdrop on the signal in an optical fiber without the user noticing. Cryptography is used to protect data, but quantum computing may threaten current encryption methods in the future. Misuse of active and passive elements affect the security of the optical infrastructure. The monitoring ports of active devices and the physical properties of optical fibre s pose risks for data leakage and eavesdropping. This work focuses on information transmission in optical fibers, data leakage risk analysis, and testbed design for measuring data signal interference. And then verifies the functionality of the workstation on a high-speed coherent transmission system.
|
|
|
Cyber risk modelling using copulas
Spišiak, Michal ; Teplý, Petr (advisor) ; Baruník, Jozef (referee)
Cyber risk or data breach risk can be estimated similarly as other types of operational risk. First we identify problems of cyber risk models in existing literature. A large dataset consisting of 5,713 loss events enables us to apply extreme value theory. We adopt goodness of fit tests adjusted for distribution functions with estimated parameters. These tests are often overlooked in the literature even though they are essential for correct results. We model aggregate losses in three different industries separately and then we combine them using a copula. A t-test reveals that potential one-year global losses due to data breach risk are larger than the GDP of the Czech Republic. Moreover, one-year global cyber risk measured with a 99% CVaR amounts to 2.5% of the global GDP. Unlike others we compare risk measures with other quantities which allows wider audience to understand the magnitude of the cyber risk. An estimate of global data breach risk is a useful indicator not only for insurers, but also for any organization processing sensitive data.
|
|
|
DLP solution as an organization data protection tool
Drápalíková, Jitka ; Mezera Michal, Bc. MSc (referee) ; Sedlák, Petr (advisor)
The bachelor thesis deals with elaboration of data protection proposal using Data Loss Prevention technology for a particular organization. The theoretical part is focused on data problematics in company’s environment and the DLP technology itself. The work also covers the comparison of DLP products on the market, selection of the product, its scope, proposal of setting and calculation.
|
|
|
Assessment of cyber risk in the banking industry
Spišiak, Michal ; Teplý, Petr (advisor) ; Maršál, Aleš (referee)
There has never been more need to discuss cybersecurity related issues. We live in a world where criminals do not have to physically visit a bank to steal money from it, where elections results can be influenced by data breached from personal email accounts, where to win a war a country needs skilled cybersecurity specialists rather than powerful weapons and where patients do not get recommended treatment because a hospital is under a cyberattack. The financial industry as a backbone of any modern economy requires adequate protection against cybercrime. We discuss major cyber threats for financial institutions as well as possible protection methods. After that we introduce Basel II Framework for operational risk assessment and we evaluate data breach risk in an empirical analysis. 1
|
|
|
Monitoring and Analysis of Users Using DLP System
Pandoščák, Michal ; Hanáček, Petr (referee) ; Drozd, Michal (advisor)
The purpose of this masters thesis is to study issues of monitoring and analysis of users using DLP (Data Loss Prevention) system, the definition of internal and external attacks, the description of the main parts of the DLP system, managing of politic, monitoring user activities and classifying the data content. This paper explains the difference between contextual and content analysis and describes their techniques. It shows the fundamentals of network and endpoint monitoring and describes the process and users activities which may cause a data leakage. Lastly, we have developed endpoint protection agent who serves to the monitoring activities at a terminal station.
|
|
|
Data Loss Prevention
Čermák, Tomáš ; Pavlíček, Luboš (advisor) ; Kališ, Martin (referee)
The aim of this thesis is to provide basic information from the field of the data loss prevention. In theoretical part, fundamental principles and options of DLP will be described, including reasons why use this type of protection. Next, in practical part, will be described establishment and testing of selected functions provided by open-source DLP solutions. There are just few comprehensive materials regarding the DLP in Czech language, so this thesis should be used for acquiring basic information for this technology field.
|
guest ::
