When a company transitions to online file storage, it inadvertently incurs a security trade-off. This shift necessitates a change in organizational policy from safeguarding data at all costs to detecting and potentially preventing data breaches. We observe this shift in practice through the active promotion of document sharing by many online file services. In many instances, with a simple click of a mouse, a document can be easily shared with the entire organization by its owner. However, this approach ultimately contains several hidden flaws.
One of the primary causes of data breaches is human error. Today, 90% of data breaches are attributed to some form of human error, with 60% resulting from accidental sharing. Therefore, placing the document owner in control of sharing creates a significant cybersecurity vulnerability. In contrast, WebDesk Files employs a different approach. Document owners have the ability to share files, but the IT team retains control over rights and permissions. Essentially, if a document owner shares a file with someone who does not have natural access to it, the recipient\u2019s access will be denied. This approach ensures that confidential information cannot be accidentally shared with unauthorized parties.
Furthermore, we must consider the threat of mass downloads. Even if this occurs as part of legitimate system use, these mass download events pose a significant threat to cybersecurity. For instance, a human resources professional may find it convenient to download employee personal information (PII) to their personal laptop. This breach of privacy creates a massive vulnerability that has been exploited repeatedly. A laptop left unattended in a coffee shop for a brief bathroom break, ransomware data exfiltration, and these are all reliable opportunities for a massive data breach. WebDesk files prevents this behavior through download rate limiting. If any system user attempts to download more than a specified number of files, their account is locked. This both encourages correct use of data by legitimate system users and performs damage control from compromised accounts.\u00a0
Finally, many systems lack inherent tripwire systems. Once a malicious actor gains access, they typically prioritize accessing sensitive files such as password files, Social Security Numbers (SSNs), tax documents, and legal records. Since this is not a mass data exfiltration attempt, and compromised accounts are often used, anomaly detection systems are ineffective during this reconnaissance phase. WebDesk Files, however, incorporates the tripwire feature, which allows the placement of seemingly attractive files within the file system. When one of these files is accessed, the account is locked, and a potential data breach is prevented. This provides companies with the ultimate power to prevent data breaches before they occur.
WebDesk Files, a proviced in our on-premise file sharing solution, is included at no additional cost with our WebDesk suite. Additionally, you retain complete control of your data at all times, in your data center, under your control on your servers. At 907 Technology, we believe that cloud file sharing has a place, and we use it for many of our business operations. However, we understand that cloud file sharing is not the solution to every business need. Therefore, we developed WebDesk. Try it out for yourself today or schedule a demo.<\/p>\n","protected":false},"excerpt":{"rendered":"
When a company transitions to online file storage, it inadvertently incurs a security trade-off. This shift necessitates a change in organizational policy from safeguarding data at all costs to detecting and potentially preventing data breaches. We observe this shift in practice through the active promotion of document sharing by many online file services. In many […]<\/p>\n","protected":false},"author":1,"featured_media":574,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":["post-570","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-webdesk-files"],"blocksy_meta":[],"_links":{"self":[{"href":"https:\/\/907technology.com\/index.php\/wp-json\/wp\/v2\/posts\/570","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/907technology.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/907technology.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/907technology.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/907technology.com\/index.php\/wp-json\/wp\/v2\/comments?post=570"}],"version-history":[{"count":3,"href":"https:\/\/907technology.com\/index.php\/wp-json\/wp\/v2\/posts\/570\/revisions"}],"predecessor-version":[{"id":573,"href":"https:\/\/907technology.com\/index.php\/wp-json\/wp\/v2\/posts\/570\/revisions\/573"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/907technology.com\/index.php\/wp-json\/wp\/v2\/media\/574"}],"wp:attachment":[{"href":"https:\/\/907technology.com\/index.php\/wp-json\/wp\/v2\/media?parent=570"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/907technology.com\/index.php\/wp-json\/wp\/v2\/categories?post=570"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/907technology.com\/index.php\/wp-json\/wp\/v2\/tags?post=570"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}