New Bayesian Classifier Engine for MyDLP

Previously, we have developed a Bayesian Classifier Engine with Java because of Turkish NLP (zemberek) dependency. But, this engine was introducing us some difficulties in many areas such as distribution, performance and maintenance.

But, a week ago we have decide to develop a very simple Turkish NLP module for MyDLP. This was a good decision because zemberek was too developed for us :). We weren't using most of its features and for every request we have to push a big binary through a thrift bridge. Also, large memory footprint of Java process was a disadvantage.

And now, we are using bayeserl with our own very simple Turkish NLP module. Moreover, results are more accurate and performance is improved. Based on this, we are planning to develop an oil trading tool that works similar to the automated oil profit trading platform in allowing users to trade oil automatically.

Try it, use it.

Any comments and questions are very welcome.

MyDLP Feature and Help Document Draft

You can reach draft version of MyDLP Feature and Help Documentfrom the link below. We are about to make a release for network part of MyDLP over Ubuntu.

http://downloads.medratech.com/help/help.html

MyDLP Windows Endpoint - First Release

MyDLP Windows Endpoint Data Leak Prevention tool has made its first release in today. This release is a test release for community. Please feel free to make any comments or submit bugs.

This release have a little probability to harm your computer. Because of this try it in your virtual machines.

Applicable platforms:

32 bit:
Windows XP/Vista/7

You can download and use MyDLP EP from this url:
http://github.com/mydlp/mydlp-host-win32/downloads

Usage and howto documents are going to be ready for a few days.

Central management over network features and several major bugfixes will be ready for the next release. However the most important thing is your opinions for us.

MyDLP Network

0.1.0 version of MyDLP have been released. You can access tarball from GitHub page.

Features of the release are listed here.

Also, some basic documentation had been added to wiki.

Comments, critics, recommendations, bug reports, feature requests are all welcome.

MyDLP Win32 Endpoint Features

This features are expected to be released in 2 weeks after final tests(16.07.2010).

Service

Contains a windows service to apply changes in configuration on the fly

Contains a file-system minifilter to scan copy, move or modify operations on removable devices on the fly

Filters all removable device activity against data leak

Filters and logs screen capture activities according to defined applications

Listens removable device attaches and CD/DVD insertion and run scans to detect critical data-at-rest

Sensitive file recognition according to file hash, regular expressions(UTF-8), predefined expressions (SSN, Credit Card Number, IBAN, TRId), encrypted archives

Filetypes: MS Office 2003, MS Office 2007, OpenOffice, PDF, PS, RTF

Filetype filtering for online scanning: Photoshop (PSD), Paintshop Pro (PSP), Autocad (DWG)

Screen capture filtering according to applications: Photoshop, Autocad, MS Office, OpenOffice, CorelDraw

GUI

System tray for easy management

Add or remove file md5

Add or remove UTF-8 regliar expression values

Predefined expressions (SSN, Credit Card, IBAN, TRId), minimum number definitions management

Local directory scan to detect data-at-rest

Local disk scan to detect data-at-rest

Add or remove excluded dirs for local scans

Define auto data-at-rest scan for removable devices on plug in

Define auto data-at-rest scan for CD/DVD on insertion

View logs for data-at-rest scans

Management of removable device on-line scanning (copy, move and modification) options for USB disks

Choose forbidden file-types for on-line scanning

View logs for removable device on-line scanning

Adjust screen capture filtering

Manage other options

English and Turkish language support

What is MyDLP?

MyDLP is an easy-to-use network based data leak prevention tool. It is under heavy development and you can see MyDLP's sources over http://github.com/mydlp. Project is licensed under GPLv3. Erlang/OTP is being used in development of MyDLP for concurrency, easy deployment and management.

MyDLP's main aims are:

- Manage Information Flow
- Detect leak

- Block leak

- Trusted logging

- Support for logging with trusted 3rd parties

- Formatted log for easy evaluation

- Performance and Scalability

- With Erlang/OTP concurrency is not a problem

- Support for many protocols

- HTTP, SMTP, POP3, IMAP, FTP, MSNMS, Jabber, SFTP, SSH, Telnet, etc...

- HTTP support is under development now

- SSL support for these protocols where applicable

- Support for specialized protocol implementation

First release for MyDLP will be released until 30 June 2010. Wait for it. We are coming and bringing a new aspect for data leak prevention!!!