Re: Sensitive data detection

[Peter Wan <peter.n.wan () GMAIL COM>]

On 4/20/07, Curt Wilson <curtw () siu edu> wrote:
> Dear Educause security community,
>
> For those that are currently working on a project involving the
> identification of sensitive data across campus, I have some items of
> potential interest. I know that Teneble (Nessus) recently announced a
> module that can check (with host credentials) a host for the presence of
> selected types of sensitive data, but what we have chosen is
> Proventsure's Asarium software. We are in the early stages of testing,
> but it looks to be a tremendously helpful tool for such a large task
> (depending upon the size of your institution).

Thanks Curt.  A freeware package that works in this same area is
the Cornell Spider

http://www.cit.cornell.edu/computer/security/tools/
http://www.cit.cornell.edu/computer/security/tools/spider-cap.html

--
Peter N. Wan (peter.wan () oit gatech edu)     258 Fourth Street, Rich 244
Senior Information Security Engineer        Atlanta, Georgia 30332-0700 USA
OIT, Information Security                   +1 (404) 894-7766 AIM: oitispnw
Georgia Institute of Technology             GT FIRST Team Representative