Data leakage and data theft both result in data loss. However, with data theft and corporate espionage there is clearly an "intent to commit a crime" by taking information.
In regards to data theft, it takes just one disgruntled employee who has either the desire to harm his or her employer or is motivated by financial gain to present an insider threat to the organization, a threat that can result in costly data loss. Sadly, many see the theft of information as a minor infraction since it is often so easy to do and nothing is really removed or taken. Regardless, the impact on an organization can be severe.
In contrast, corporate espionage is premeditated and planned. A common scenario is that an organization suspects some of its employees of leaking confidential information to its competitor. It is also usually believed that its competitor actually planted spies within the organization in order to target and steal new product plans.
It might sound too "James Bond", but the reality is more alarming than fiction! According to a study by the American Society for Industrial Security (ASIS) and PricewaterhouseCoopers, Fortune 1000 firms lost more than $45 billion in 1999 from the theft of proprietary information - based on FBI numbers, from the mid-nineties, this has double in only five years.
However, even with multiple security measures in place, organizations that do not have a practical way to monitor employee network activity in order to find the internal source of the leaks, or hard evidence of espionage, are almost powerless to address this type of risk.
The problem stems from the fact that for many years, IT security professionals have been concerned with external threats - and rightfully so. But today, the stakes have been raised, largely due to advances in computing and communications. Unfortunately, many organizations are finding themselves proportionally under greater attack from the inside.
Chronicle Solutions has created a network content recorder that is able to easily and intelligently capture, replay and analyze the content in original format, and while this is an extremely easy-to-use and easy-to-learn solution, it is powerful in assisting IT security professionals to efficiently monitor, respond to alerts and discover potential threats and wrong-doing occurring within their network.
Whether the requirements call for the mobility and quick deployment provided by Chronicle’s netReplay® 2500 PORTABLE or the permanent, proactive longer-term benefits found in netReplay® rack-mounted recorders, IT security professionals will be armed with the most effective content monitoring and digital forensic tool available.
Because of netReplay’s out-of-the-box capabilities, it can begin to immediately collect data - just plug it in. netReplay® quickly and efficiently captures all data necessary for formal records retention, security evaluations and digital evidence collection.
While netReplay® has the ability to reassemble data that has already been collected in full packet capture sessions such as Wireshark (Ethereal) or tcpdump, by using netReplay® up front from the onset (on live network connection), IT security staff quickly move from a reactive "capture everything" mode to a much more effective proactive "collect, monitor, research and analyze" approach.
netReplay® has been described as a "One of a kind, Network Content DVR (Digital Video Recorder) that eliminates the digital equivalent to commercials." netReplay’s intelligent deep-packet inspection and content capture effectively cuts out the recording of duplicate data and network content "noise."
netReplay® will increase credibility of results by replaying exactly what, when, and how content was seen and handled by user, thereby demonstrating both proof of user’s content and related actions. In addition, Chronicle’s Forensic Information Fingerprinting Engine (FIFE™) provides evidence of user activity that is both forensically accurate and credible.
netReplay® will increase the effectiveness of a security effort by providing a high-level of precision on the data it is collecting and analyzing as well as the correlation of all events that lead to any data leakage or theft. This is accomplished while also complying with any legal requirements, such as privacy and employee rights and statutory limitations.
netReplay® will greatly improve productivity by reducing the time and complexity of data and event log analysis. Essentially, with netReplay®, IT security investigators now have the means to find the proverbial "needle in a haystack" in hours versus weeks or even months.
netReplay® will increase the efficiency of a network security team by allowing more personnel to be trained to use the tool. netReplay® is an easy-to-learn and easy-to-use data capture and monitoring tool that provides immediate benefits.