Key Terminology Parent topic

  • Acquisition: The process of creating and storing document fingerprints.
  • Data Discovery: An automated scan that locates digital assets on laptops, desktops, and servers.
  • Data identifier: An object that helps identify digital assets and serves as building blocks for templates. They are matched against existing data to determine if it is sensitive data that requires action.
  • DSM: Data-stealing malware.
  • Expression: Structured text elements that define a digital asset. Text is defined by regular expressions.
  • File attribute: File metadata, such as file size and file type.
  • Fingerprint: A DLP-generated document pattern that can survive a moderate content change. DLP generates multiple fingerprints per document, and then analyzes transmitted documents to identify potential data leaks.
  • Keyword list: List of words or phrases that can identify sensitive data sets.
  • LDAP: Lightweight Directory Access Protocol.
  • NCCE: Network Content Correlation Engine. Analyzes network packages for threat-related network traffic.
  • NCCP: Network Content Correlation Pattern. Works with NCCE.
  • Policy: A set of rules that defines the actions DLP should take after identifying digital assets.
  • Remote Crawler: A software module that fetches and generates document fingerprints from document repositories.
  • Template: A condition statement comprised of data identifiers and logical operators (AND, OR, EXCEPT)