ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Detect sensitive data in an image file with DLP

book

Article ID: 160504

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent Data Loss Prevention Network Monitor Data Loss Prevention Network Prevent for Email Data Loss Prevention Network Protect Data Loss Prevention Endpoint Discover Data Loss Prevention

Issue/Introduction

Can Data Loss Prevention (DLP) detect sensitive data in an image file?

For example, a user sends an email with a picture of a Driver's License, SSN card, or Credit Card attached. Is DLP able to detect the picture is an image of sensitive data?

Resolution

This type of detection is based on a technology called Optical Character Recognition (OCR) and was added to DLP version 15.0. A separate license is needed to use OCR with Symantec DLP. The following KB lists the system requirements for using OCR. Additional information is also available in the chapter entitled "Detecting Content using
OCR - Sensitive Image Recognition" in the DLP Administration Guides published from 15.0 onward:

https://techdocs.broadcom.com/content/dam/broadcom/techdocs/symantec-security-software/information-security/data-loss-prevention/generated-pdfs/Symantec_DLP_15.7_Admin_Guide.pdf

 

In DLP 14.5, an OCR-related option called "Form Recognition" was introduced.

"Form Recognition" is covered in chapters entitled "Detecting content using Form Recognition", in guides published from 14.5 onward. In 15.0 and later, it's also referred to as a form of "Sensitive Image Recognition".

Form Recognition provides the ability to detect forms that contain sensitive information, such as tax forms, medical forms, insurance forms, and so on.

Form Recognition detects form images in a variety of image formats, including the following:

  •  PDF (version 1.2 and later only)
  •  PDF that use AcroForms format
  •  JPEG (.jpg, .jpeg)
  •  PNG
  •  TIFF (single page or multi-page, .tif or .tiff)
  •  Bitmap (.bmp, .dib)

 

Additional information: About sizing and performance for Form Recognition in Symantec Data Loss Prevention - Form Recognition sizing and performance.