Encryption software for usb drives - Study the shadowing - part 2

This feature is in many modern products, such as, Safend from the same company, Sanctuary Device Control company Lumension, Smartline DeviceLock and Zlock company SecurIT. Personal encryption software

The principle of the shadow is quite simple: when writing files to an external storage backing up data, along with additional information (user name, application, date, time) is stored on the hard disk and later transferred to the server. Then, the security officer can go to the database and view the shadow copies of suspicious files.

Portable encryption software

Obviously, the use of this feature has some limitations, since the mass introduction of this function in a large organization with many users can create significant problems.

First, if all users will be copied to removable media a lot of information, it will create an increased load on the network. Second, in order to analyze all this information to a large number of people or any intelligent automated tools, while the task of searching, purchasing, configuration and integration with access control is far from trivial.

In this connection may be more justified selective use of shadow on the computers of individual employees. The principle of selection of these employees may be different, for example, for new employees during the probationary period, for employees, for which there is any suspicion, for each employee one week a year, etc.

So, try to figure out what the shadow copy from a technical point of view, and how it actually works in the case of two products: DeviceLock 6.3 (Build 14161) from the company SmartLine Inc. and Zlock 2.0.1.597 from company SecurIT.