
Explore the technology, people, and process aspects of data loss prevention and learn how to approach building a successful DLP program in your enterprise.
Examine major data loss incidents, from Yahoo, LinkedIn, Adobe, and eBay breaches to Marriott incidents, and their regulatory, reputational, and financial impacts, guiding strengthened data loss prevention in modern enterprises.
Identify types of sensitive data to protect—personal data, intellectual property, access credentials, business plans, and financial data—and learn how GDP and PDP regulate purpose, consent, and 72-hour breach notification.
Organizations store data in databases, active directory, data warehouses, and file formats like Word, Excel, PDF; transfer channels include email, instant messaging, cloud storage such as Google Drive, and FTP.
Learn data loss prevention detection methods, including hash-based exact matching, rolling hash for partial content, machine learning, and keyword and regex pattern matching, plus predefined identifiers for credit card numbers.
Discover DLP deployment types in the modern enterprise, including endpoint, Casby, and network in-line solutions, plus data discovery and email server deployments with API integrations and reverse proxy controls.
Compare integrated DLP and enterprise DLP, noting cost and coverage. Integrated DLP uses existing security tools for quick setup; enterprise DLP offers centralized policy management and unified reporting.
Position data loss prevention as a business risk, not just a technology issue, and secure senior management commitment to protect sensitive data through an ongoing DLP process.
Define and implement a data security policy that designates data owners and custodians, and defines simple three-label classification (confidential, internal, public) with encryption and access controls.
Lead the DLP project by collecting stakeholder requirements and thoroughly testing solutions to ensure compatible, flexible policies that address data formats, channels, and control behavior.
Form the DLP working group with data owners and custodians to define policies protecting the most sensitive data. The IT security team implements these policies, guided by a governance body.
Examine high level DLP processes, including access governance, data owner roles, policy creation and tuning, triage and escalation, and governance forums to protect sensitive data.
Master the core concepts of regular expressions, go from zero to 100, and learn to write your own regular expressions with confidence.
Regular expressions define patterns to search text, validate formats, extract data, and transform it for easy consumption, while metacharacters reveal their special meanings.
Learn how to use square brackets and the caret in regular expressions to match single characters, ranges (A-Z), include spaces and punctuation, and negate matches.
Explore how to use caret and dollar sign to anchor patterns at line starts and ends, and apply brackets, parentheses, and curly braces to match repeated words in regex.
Master the pipe character in regular expressions to perform alternation, grouping, and pattern matching, illustrated with eat or eight and ts followed by a space or a comma.
Master regex repetition using the plus and star quantifiers. Use curly braces and the pipe symbol for one to three repetitions and alternation, with grouping for zero or more occurrences.
Explore how regular expressions use the dot to match any character and the star to match greedy strings, and how brackets, pipes, and dots define patterns that match lines.
Master a regex walkthrough for DLP in the enterprise, using square brackets and first-character constraints to match Madobe with capital M and small m while excluding Hadoop and CARDO.
Explore a walkthrough of using a regular expression to match a pattern and then compute its complement with a negated character class, using square brackets and a caret.
Explore a regex walkthrough that teaches matching words at the start of sentences using caret anchors, illustrating how to identify patterns in a data loss prevention challenge.
Engage in the new challenge, locate groups, use a character to match full words, and apply the Matak character to target adverbs at the end of the sentence.
Demonstrates two regex methods to match names starting with k or g: a character class in brackets, and grouping with alternation using a pipe.
Explore regex techniques to match adjacent groups and exclude others, using character classes, grouping, and repetition with curly braces, and experiment with alternation to refine matches.
Learn to build regular expressions that match the bird at the start of a sentence and at the end, using carrot, dollar sign, brackets, and the pipe to join logic.
Explore a regex walkthrough using the carrot followed by bird in rounded brackets, with curly braces to repeat two, three, or four times at sentence starts.
Match bird tokens repeated two to four times, starting with a caret and ending at the end of the sentence. Use curly braces and the assignment character.
Develop a regex approach to locate countries enclosed in curly brackets, escaping braces and using dot star to match lines, as part of the data loss prevention challenge walkthrough.
Walk through a data loss prevention challenge that uses regex to match lines enclosed in curly brackets and single codes, employing escaping and backslash skip to ensure correct matches.
Demonstrate regex techniques to match countries in single or double codes, using escapes, grouping, and a pipe; extend to curly braces with a dot for complete line matches.
Walkthrough of constructing a regex to match country codes in single or double formats and square brackets, using grouping and alternation to apply to lines for data loss prevention.
Write a regular expression to match email addresses using character classes, plus signs, and escaping dots, covering the local part, at symbol, domain, and hyphen variants.
Write a regular expression to match Bitcoin addresses, capturing 34-character patterns that start with 1, using brackets for a-z, A-Z, and 0-9, repeated 33 times.
Create a regular expression to match urls, starting with an optional s after the prefix, then colon and two forward slashes. Use a character class and plus for url characters.
Extract the user agent value from json-like key-value data by building a regex that matches the user agent key and captures the quoted value up to the country key.
Walks through extracting postal code values from XML files with a regex, matching the opening and closing tags and capturing 1-15 characters of digits, capitals, hyphen, or space.
Celebrate completing the data loss prevention journey by understanding how technology, people, and process aspects of DLP work together for success, and share feedback to help others.
Claim a thank you bonus with discount codes for all existing courses. Visit github.com/resul-nasser/udemy to view current codes, open the link, and apply the coupon at checkout.
Welcome to the Data Loss Prevention (DLP) in the Enterprise Course! The course comprehensively covers the main concepts in Data Loss Prevention and explains the factors required for modern organizations to successfully implement a Data Loss Prevention Program.
Topics Covered:
Data Loss Incidents
Types of Sensitive Data
Data Formats and Transfer Channels
Sensitive Data Detection Methods
DLP Deployment Types
DLP Solution Types
Data Loss is a Business Risk
DLP is primarily a Process
Data Security Policy
DLP Selection Process
DLP Organization Structure (People Structure)
DLP High Level Processes
Additionally, this course explains the basic concepts of regular expressions and how they could be used for pattern matching to match almost any kind of textual data.
The Regex sessions are structured as below:
Basic Concepts - Metacharacters and their usage.
Challenges and Walkthrough - Practical Challenges for you to attempt your skills at Regular Expressions. Detailed walk through of solution. Examples include different kinds of data in table delimited format, json and xml.
By the end of the course, you would be confident to create your own regular expressions!
Happy Learning and All the Best!
-----
Topic Background: What is DLP?
Data loss prevention (DLP), is defined as technologies which perform both content inspection and contextual analysis of data sent via messaging applications such as email and instant messaging, in motion over the network, in use on a managed endpoint device, and at rest in on-premises file servers or in cloud applications and cloud storage. These solutions execute responses based on policy and rules defined to address the risk of inadvertent or accidental leaks or exposure of sensitive data outside authorized channels.
DLP technologies are broadly divided into two categories – Enterprise DLP and Integrated DLP. While Enterprise DLP solutions are comprehensive and packaged in agent software for desktops and servers, physical and virtual appliances for monitoring networks and email traffic, or soft appliances for data discovery, Integrated DLP is limited to secure web gateways, secure email gateways, email encryption products, enterprise content management platforms, data classification tools, data discovery tools, and cloud access security brokers.
What are Regular Expressions?
Regular Expression, or regex or regexp in short, is extremely and amazingly powerful in searching and manipulating text strings, particularly in processing text files. One line of regex can easily replace several dozen lines of programming codes.
Regex is supported in all the scripting languages (such as Perl, Python, PHP, and JavaScript); as well as general purpose programming languages such as Java; and even word processors such as Word for searching texts. Getting started with regex may not be easy due to its geeky syntax, but it is certainly worth the investment of your time.
Regular expression synax varies slightly between languages but for the most part the details are the same. Some regex implementations support slightly different variations on how they process as well as what certain special character sequences mean.