Digital/Media Library Protection system

[dgingeri]

So, my company has begun looking for methods for better protecting media from our customers while it is in our possession.  I thought that this might be a good starting place to find out information on this.  What are good options for securing digital media, such as video clips, while it is being processed, for example transcoding and adding captions?  

[Amazonsucks]

Securing it from being hacked or from data loss? 

[dgingeri]

Hacking, data theft, and/or an employee walking out with a flash drive with unreleased content.  For example, we need to make sure an employee doesn't walk out with video files of next year's Shark Week specials or the transcripts to a Citibank financials meeting that won't be released for the next week.  (Neither actually apply to us. They're hypothetical scenarios.)

[Amazonsucks]

13 hours ago, dgingeri said:

Hacking, data theft, and/or an employee walking out with a flash drive with unreleased content.  For example, we need to make sure an employee doesn't walk out with video files of next year's Shark Week specials or the transcripts to a Citibank financials meeting that won't be released for the next week.  (Neither actually apply to us. They're hypothetical scenarios.)

You have multiple workstations and servers on the premises, which people use to edit the content?

 

That would require data loss prevention, identity access management software to track who has accessed what data and when, a comprehensive endpoint security solution(like Bromium or FireEye maybe? Malwarebytes does business endpoint security now as well) as well as something like what  LTT uses for on site surveillance. No ones walking out with something with that watching.

Heres a blog on the general type of software youd need to pick out. https://blog.varonis.com/the-differences-between-dlp-iam-siem-and-varonis-solutions/

 

Malwarebytes SIEM integration page. https://www.malwarebytes.com/integrations/

 

And their business endpoint security. https://www.malwarebytes.com/business/endpointsecurity/

 

 

[Sir Asvald]

14 hours ago, dgingeri said:

Hacking, data theft, and/or an employee walking out with a flash drive with unreleased content.  For example, we need to make sure an employee doesn't walk out with video files of next year's Shark Week specials or the transcripts to a Citibank financials meeting that won't be released for the next week.  (Neither actually apply to us. They're hypothetical scenarios.)

Don't allow users to connect any type of USBs unless they are used within the company. As for users who use work laptop, do the same, disable USB ports. While I was working for a company, they were using https://www.ivanti.com

 

Software that locks USBs. Although this needs a server for it to work.

[dgingeri]

Well, we don't have the money for all that. 

We have 12 people that handle "offline content", no more than 3 at a time with 24/7 availability.  Most of what we deal with is live broadcasts.  We're planning on making it so there are only 4 total workstations (one extra for redundancy, since currently we have them go down frequently with software issues that take multiple days to fix) that are able to connect to what our customers upload to us and the systems that process those files.  However, we want to be able to expand on it. 

We have set up GPOs that restrict the use of USB devices to keep data from walking away easily.  We plan to set up an isolated VLAN for this use, and probably put one port on a DC onto that vlan for DNS and authentication as well as a WSUS server.  That VLAN will, of course, not have access to the internet.  (We have a host of other security issues that we're working on solving due to past admins' decisions.)  The big thing my boss is asking for is digital library protection software, specific to digital media libraries, like TV, movies, and music, that would keep track of everything in the library system, who checks it out for processing, All the files associated with specific projects, and every time they are copied.