DeviceLock Discovery

In October, 2014 the DeviceLock Discovery software product as the independent functional part of the software package DeviceLock DLP Suite allowing the organizations to control location and level of security of the confidential corporate data stored in IT infrastructure for the purpose of pro-active prevention of their leaks and ensuring compliance to corporate standards of security and to requirements of industry and state regulators was submitted to the Russian market.

By means of automatic data scanning, placed at Windows workstations in and out of corporate network, internal network resources and storage systems, DeviceLock Discovery detects documents and files which contents break policy of safe storage of corporate data and performs with them the different optional preventive and protective actions set in DLP policy. Besides, at detection of the documents stored with violation of policy, DeviceLock Discovery can initiate external procedures of incident management, sending operational disturbing notifications to SIEM systems used in the organization.

DeviceLock Discovery detects text data in files and archives of a set of formats, at the same time uses different methods of the analysis of contents, including keyword-based search and templates of regular expressions (RegExp) with support of morphological analysis of word forms. For simplification of a problem of creation of rules of content filtering the product is delivered with the built-in industrial and geospecific terminological dictionaries predetermined by templates of regular expressions for the most widespread types of confidential information, such as passport numbers, credit cards, vehicles and bank accounts, the address, and many other things. Besides, DeviceLock gives to administrators an opportunity of development of own dictionaries and templates and also modifications of built-in.

The built-in module of optical character recognition (OCR) allows DeviceLock Discovery to check text contents of the graphic files and images which are built in documents and other data objects. Unique feature of DeviceLock Discovery is existence of the built-in module OCR in all components of the DeviceLock DLP Suite complex that considerably increases the overall performance, scope of application and reliability of the solution. Owing to the fact that graphic objects are scanned and checked by the modules OCR which are built in in agents directly on controlled computers load of Discovery Server and communication channels of corporate network significantly decreases.

In case of detection in the scanned documents and files of contents of confidential character DeviceLock Discovery can automatically perform preventive operations on elimination of the revealed violations, such as removal (the file, archive or a container), change of access rights or enciphering and also the disturbing notification of the administrator or the notification of the user on the revealed violation.

The DeviceLock Discovery component can be purchased and be used as an independent product irrespective of other components of the DeviceLock DLP Suite complex and as a part of a full-function DLP system.