레이블이 Centralized Document인 게시물을 표시합니다. 모든 게시물 표시
레이블이 Centralized Document인 게시물을 표시합니다. 모든 게시물 표시

2016년 8월 10일 수요일

[ClouDoc] Demonstration of ClouDoc ransomware preemptive blocking


There is a proliferation of ransomware that encrypts files saved on Windows PCs and extorts money from users in return for a decryption key.

Looking at the many types of ransomware you can become infected with and the many ways you can become infected, let’s take a closer look at the differentiated response plan to ransomware provided by ClouDoc.

ClouDoc provides preemptive blocking of ransomware and post-exposure reponse options.

Ransomware infection routes – running ordinary programs, based on web browsers, running DLL extensions. ClouDoc protects user documents safely from all types of ransomware infection.

Follow up response to ransomware.
Even safer when used together with the ClouDoc Backup Appliance.

2015년 2월 22일 일요일

Security & work productivity improvement with Cloud storage based network separation

Security & work productivity improvement with

Cloud storage based network separation



Realization of network separation environment with NetID ‘ClouDoc’…

Enhanced work efficiency by supporting Smartwork

(Written by : Reporter Seon Ae Kim / Photo: Reporter Goo Ryong Kim)
Incheon Metropolitan City Office of Education
















Incheon Metropolitan City Office of Education introduced network separation environment as one of the ways of supporting safe, happy schools. That is to establish safe education environment by protecting student personal information and important information from intellectual cyber attack. Especially Incheon Metropolitan City Office of Education could enhance user convenience and security strengthening effect through white list based internet interruption policy.


Review on logical network separation for student personal information

Incheon Metropolitan City Office of Education needed a method to manage their work systematically and prevent information leakage as outsourced personnel were changing frequently. They had reviewed physical network separation to manage outsourced personnel PC. But they decided to construct logical network separation in need of protection for student personal information and internal information about education and administration stored in PC or the system.



After reviewing physical network separation and SBC-BCB type logical network separation technologies, Incheon Metropolitan City Office of Education concluded that logical network separation was suitable to the environment of the Office of Education. Afterwards, although we reviewed the logical network separation solution from various angles, we could not find a solution suitable to the requirements of the Incheon Office of Education.

Inchon Office of Education wanted network separation environment adopting a Cloud storage concept. They desired to realize the environment to access information safely for work execution at the outside as well as to protect important information from hacking. Necessary was a method to store data in the central storage and to connect with the internet when accessing the data.


Application of white list based internet interruption policy



Incheon Office of Education searched for the system optimized for the Office of Education work with the assembly of Electronic Document Management System (ECM), Document Centralization, and Desk Top Virtualization (VDI). As the Incheon Office of Education had already been equipped with work management system and electronic payment system, they mainly reviewed the products enabling to realize white list based internet contact permission/interruption policy.

As ECM or document centralization products supplied in the country had no internet network separation function, and VDI was to separate internet and work network using a virtual PC, they did not match with their demand to permit internet connection only when necessary. It was likely that a CBC type network separation solution took considerable time to convert to work network and internet network in the actual work environment and caused delay of work productivity.
Incheon Office of Education decided that ‘NetworkLock’ function provided by NetID ‘ClouDoc’ could meet all network separation requirements. NetworkLock is normally away from internet connection and waiting for work network connection. When contacting the internet site permitted by the manager, NetworkLock functions to connect to the internet.


Officer Kyo Kwon Jin made clear that, “NetworkLock function was a core function to help realized optimized network separation environment for Incheon Office of Education, requiring collaboration through internet connection with specific government organizations related. While we maintained almost similar environment to existing work using a ClouDoc NetworkLock function, we could accomplish network separation reformation.”

 

Supports Smartwork environment as well as security

 
Incheon Office of Education substantially obtained the effect of network separation during reorganization after the inauguration of new superintendent of education. As important information was stored in individual staff’s PCs in the existing environment and such information was not managed properly, reorganization would have required considerable time and efforts to rearrange information management system. However, as all important information was stored in the central server under the network separation project, when access policy of authority to approach the relevant information was changed, we could proceed with our work safely and conveniently even in the renewed organization environment.

 
Also, as we did not need to deliver data by email or USB, and the information accessible within authority could be approached whenever and wherever, collaboration with external organizations or work outside of the Office of Education could be done easily. Further, even in case of faulty PCs in use, as we can work at another PC without PC backup, it is also advantageous to ensure work continuity.

 
Officer Kyo Kwon Jin explained that, “AS network separation has proceeded based on Cloud storage, and we could access necessary information whenever and wherever only with our own accounts, we could realize Smartwork environment. As an auditor or school inspector, who goes on frequent business trip to educational institutions, can do his task for himself at a school site, and he can finish his task with reduction in travel time, productivity and job satisfaction have increased.”
 
“Incheon Office of Education killed two rabbits-productivity and security-with the environment optimized network separation.”

 

Why did they proceed with the network separation project?

They needed a method to protect student personal information stored at the Incheon Office of Education. Besides, systematic management and protection method for important administration documents, which should not be released to outside illegally, were required. In the meantime, another necessity was to protect intranet mode from outsourced personnel stationed inside the Office of Education for IT system development, maintenance and repair.
 

How to make up Cloud storage based network separation environment.

 
Important information necessary for work was stored at the secure, safe central storage, and, according to authority access control policy, authorized person only could contact the information to proceed with the work. Basic work had to be done only in work network and normally internet contact was interrupted. When applicable information has to be transmitted to an outside organization, internet contact was possible only to the site where white list based security policy has already been permitted.
 
 

What is the effect of ClouDoc installation?

 
As user inconvenience increases under general network separation environments, field claims tend to congest. As network separation using ClouDoc allowed work process under the environment almost same as the existing work and internet contact was made rapidly, security was reinforced without affecting productivity. As it provides network separation environment based on Cloud storage, it is also effective in realizing Smartwork. As you can access your desired information using any PC anytime and anywhere and also an audit or superintendent of school with a lot of external business can immediately work outside, job satisfaction goes up.
 
 

 

2014년 10월 5일 일요일

How do you feel about Cloudoc after using it in your company?

 How do you feel about Cloudoc after using it in your company?





Selection of a proper solution for the purpose of the introduction of document centralization.




I wrote down opinions on how to select a document centralization solution from other articles in this blog.

Consequently, if a solution can be extended to the whole company from the first, the second, the third, up to the fourth, a customer may feel free to select the solution.


 

Customer who has introduced ClouDoc…


There is no business document in PC of the customer who has introduced ClouDoc. If PC is not workable due to software problems like physical disorder or malicious codes, you just need to replace it with another PC while resolving them.

 

 <Picture> Continuous business only with PC replacement


Who likes Cloudoc most? It is natural that corporate owners or management like it most. Because data dispersed in PC for the past time is accumulated in the center. In modern companies, documents are properties themselves.

   

 
 <Picture> Document centralization solution favored by management

 
  
 
 
If an employee of the company with document centralization left the office with a notebook, what would happen? Are office documents, CAD drawings, or program source codes in the notebook? As you may know, this kind of information leakage can be prevented in the company with ClouDoc.

Note) However, for a person who needs to work at home, a separate, safe function is arranged.



 
 
<Picture> What would happen if an employee in the company under document centralization system left the office with a notebook?





Effects of the introduction of ClouDoc solution




Consequently, 100% documents at maximum in all PCs can be stored in the center in the customer who has introduced ClouDoc. These stored documents are kept safely by several strong protective functions.


Note) The left picture below illustrates an example of the introduction of an fledgling stage of document centralization solution, while the right picture illustrates an example of the introduction of ClouDoc.

 
 
<Picture> ClouDoc document centralization like a solid safe!


Don’t you agree that documents stored and protected in the center can be led to productivity improvement and sales increase of your business?





<Picture>Accumulating documents are like money.

Build a happy company free from cash flow worries with document centralization!
 
 

 
 

How to find the best ‘document centralization solution’ for your company?

How to find the best ‘document centralization solution’ for your company?
 
 

Why Document centralization?
  
 
 Recently customers are looking at document centralization solution rather amicably.
Some customers are still in a nightmare of inconvenient and expensive initial document centralization solution, while some ClouDoc users add the number of users from the first, the second, the third, up to the fourth.
 
 In terms of a solution, document centralization solution tends to largely replace the following two solutions. 
 
  • Replacement of the existing document management (EDMS) : For effective document centralization and utilization, Document centralization is better than existing EDMS.
  • Replacement of the existing drawing security and document security (DRM) : From the point of compatibility and management of CAD drawing application, document centralization is good for efficiency improvement.

 
 
In terms of utilization, there are many customers for the following purposes.
  •  Drawing security
  • Source code security
  • Malicious code prevention
  • Information leakage prevention from Cloud service or P2P
 
 
 
How to select a proper Document centralization solution
 
Functional development of the document centralization solution is awesome. In case of ClouDoc, vendors sometimes visit customers in person and bring good ideas to market in the shortest time.
Currently, document centralization solutions can be largely divided into three schedules.
  •  Schedule 1, Security only : Only a storage prohibition function is loaded. Central document drive uses the network storage like NAS.  
  • Schedule 2, Hooking & Exclusive explorer : Hooking the standard work environment allows the solution to provide separate environment.
  •  Schedule 3, Standard (window file system)type : Offer of a window file system drive allows all work available in standardized methods.
 As Schedule 1 provides a security function only, strictly speaking with no document management function, it will be excluded from this description.
 
What problems in Hooking, Schedule 2?
  •  Applications without Hooking not yet cannot be stored in the center. 
  • Applications with Hooking impossible (graphic tools like 3D CAD applications and Indesign) cannot be stored in the center.
    •  Despite the promotion to support CAD, actually they are stored in C: drive and backed up in the center! Latest version always exists in PC only.
    • - Hooking is impossible for applications, where input/output in file is not done like Outlook but input/output of some blocks are done frequently.
  •  When interlocking with period system and file attachment like groupware, ERP, and so on in the future is necessary, separate development cost is required: high cost structure.
 
 
Finally, how about Schedule 3? Window file system, the standard type of Schedule 3, is the best type in compatibility for customers. However, Schedule 3 also requires harsh verification before product selection.
 
  • Aren’t a lot of troubles happening in the existing customers?
    • Blue screen: No response/ Document disappears/ Input/output errors often occur in some applications/ …
  • How many persons can be accommodated in a server?
  • Is there any temporary file left in the local disk of PC?
  • Doesn’t it cause a lot of load on the network of the company?
  •  In case of the customer with many users, does it support an extendable architecture using L4 device or the like?
  •  Does it directly support input/output of CAD drawings to and from the center?
    •  In case of some products, CAD application can be stored only in the local disk at all times.
  •  What are the names of customers with over 1,000 users using Window explorer file system among existing references?
 <Picture> How to select a proper Document centralization solution
 
Interlocking with the other system

 
Let’s see again the interlocking with the other system mentioned in the above for a while.
In case of ClouDoc, document can be attached to the other system without separate development. To the contrary, attached document of the other system can be stored in the ClouDoc.
However, in case of document centralization system of a hooking type, separate development is necessary to attach a document to the other system. Will it be no wonder to spend additional cost for the development?
<Picture> Interlocking with the other system
 
 
 


 
  

2014년 9월 2일 화요일

ClouDoc frees your network from copy & move of large amount of data!

ClouDoc frees your network from copy & move of large amount of data!


  

Document Copy and Move at Microsoft Windows FileServer


In general users of Windows FileServer utilizes one of the following methods for connection to Window Explorer. 
  
 The above methods are commonly used for Windows FileServer. In this case, if a file or folder is copied or moved, all applicable files come down to PC and up again to the server, requiring network much.

 

Document Copy and Move at ClouDoc
 

To limit such use of network, ClouDoc offers Copy or Move methods in the server. User or administrator may need to copy or move files in at least some MBs or as many as some TBs, In this case this function will not allow the company network to be loaded at all.
 

  
<Picture> Network traffic state during document copy and move in the server

 

 

What kind of method do you want?

  
  
Except for the above functions, ClouDoc includes the following diverse functions, which is not provided by the existing file server.
 
  
  • Folders in the private document box or team document box in the server are shared by other persons or teams 
  • Files in the private document box or team document box in the server are shared by link mail or link itself, and the usage is limited by code, period, or time.
  • Search function on documents in the server is provided in connection with a special search engine.
  •  Automatic version management function is provided for documents stored in the server.
 
Besides, ClouDoc will provide intelligent document management function additionally instead of providing a simple file server.











 

2014년 9월 1일 월요일

Only ClouDoc can centralize CAD drawings!


Only ClouDoc can centralize CAD drawings!

 

1. Change of drawing security market


In the meantime, CAD drawing security market has mainly consisted of encryption solution. However, meaningful change is recently sensed with manufacturing customers as the center. You may understand from the following table why drawing security is pursued through document centralization.
 
  

 
<Table> Comparison of drawing encryption method and drawing centralization method
 
 
 

2.What solution can really centralize drawings?
 
  

Document centralization solution providers are struggling for document centralization. However, document centralization requires strong fundamental technology. Almost all solutions with no fundamental technology are promoted to store drawings at the center, while actually storing at PC.

 
ClouDoc as a centralization solution is uniquely equipped with the technology enabling drawings to be stored at the center, not at PC. If you look at the following picture, you can see that solutions other than ClouDoc allow PC to store drawings actually, and the server to hold backup files only.
 
 

<Picture> Only ClouDoc can centralize CAD drawings.

  
 
3. Prospect of drawing centralization in the future
 


The most important environment elements prerequisite for document centralization are network and storage. If these two elements offer fast and sufficient performances and capacities, file input/output speed in document centralized environment would be second only to input/output speed from PC to local disk.

The following changes are sensed in storage environment.
  •  Advent of high performance storage based on the flash disk
  •  Advent of high performance storage based on RAM.

 

The following changes are sensed in network environment.
 
 
   
Accordingly it is expected that document centralization environment at each company will be further accelerated!
 
 
 

2014년 8월 27일 수요일

ClouDoc for Document centralization and drawing security / Perfect information protection from mobile and internet services!

ClouDoc provides perfect information protection from mobile and internet services!



Sudden change of IT environment


It is not too much to say that the biggest changes in the recent IT environment are summarized as mobile and cloud. Corporate owner and management may not know well this environment mostly, thus occasionally having vague fears against this new environment.
 

ClouDoc rapidly responding to environment change


ClouDoc makes constant efforts to respond to such environment change.
Environment change will appear in your employees’ PC in the shape as shown in the following picture.



In summary, ClouDoc service is controlled by NetworkLock, a module against various DiskLock policy settings or malicious codes. Various smart phones are controlled by ClouDoc function.
  




 <Picture> Information leakage prevention from mobile and internet services.

 

 

Safe environment against information leakage



This control mode keeps customer’s IT environment safely from information leakage.



ClouDoc is a solution to make the most of documents stored in the center based on information leakage prevention environment. Companies that make the most of the centralized documents will get ahead of the coming unlimited competitiveness era.