IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

Guardium - Data Exfiltration

  • 1.  Guardium - Data Exfiltration

    Posted Wed August 12, 2020 09:48 PM

    Hi,

    I have seen this question before since 2015, but I am searching if this has been implemented and achievement in Guardium, meaning if Guardium is able to detect data exfiltration (referred to as data extrusion, data exportation, or data theft) and how to to prevent it.

    I would appreciate if you could you point me towards a reference?

    Thanks



    #Guardium
    #Support
    #SupportMigration


  • 2.  RE: Guardium - Data Exfiltration

    Posted Tue April 26, 2022 12:51 PM

    Yes. The "basic data security policy" provided by IBM has an Access based rule with criteria- "Record values = 2, Trigger once per session = true, Reset interval = 1, Severity = Info, Records affected threshold = 5000 / session". This can be copied and customized by the end user.



    #Guardium
    #Support
    #SupportMigration