Educause Security Discussion mailing list archives

Re: Scanner for sensitive information


From: "Watson, Michael" <michael.watson () VITA VIRGINIA GOV>
Date: Mon, 16 Jun 2008 11:53:20 -0400

Does anyone have one that will do online sites?  I'm fairly certain
these could be modified to do so but if someone already has it why
duplicate work!  Thanks in advance!



-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Randy Marchany
Sent: Monday, June 16, 2008 11:36 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Scanner for sensitive information

The 3 best (in no particular order) freeware sensitive number scan tools
are:

1. VA Tech's Find_SSNs available from http://security.vt.edu. Hey, I'm
from VT 
so of course, I'll put ours first :-).
2. Cornell's Spider Tool available from
http://www.cit.cornell.edu/security/too
ls
3. UT-Austin's Sensitive Number Finder Tool (SENF) available from 
https://source.its.utexas.edu/groups/its-iso/projects/senf

Some of the Virginia schools including VT are also using a commercial
tool, 
IdentityFinder from www.identityfinder.com. It is able to check .pst
files and 
PDFs for sensitive info.

        -Randy Marchany
        VA Tech IT Security Office & Lab

Current thread: