[Cialug] Home DLP, Anyone?

[jim kraai]

This email contains fever-induced, half-baked thoughts. Proceed with
caution.

http://it.slashdot.org/story/14/05/06/1343210/anti-virus-is-dead-but-still-makes-money-says-symantec(uh,
I guess I'm obligated to say, "Slashdot sux" or something like that)

The piece says "Meanwhile, other security firms including FireEye, RedSocks
and Imperva are casting doubt on AV, suggesting a focus on data loss
prevention might be better."

I used to work at a DLP company.

I came to view DLP is an interesting, but terribly ineffective thing.
Rather, it's effective against terribly naive agents/hackers.

What's the general consensus here on using DLP as a way to secure home and
small business networks?

Here's a weird way of looking at it long term:
1. Passive:  Door locks and windows are passive security. One time cost
plus infrequent replacement.
2. Active:  Home firewall/DLP/whatever that actively burns Watt/hrs
constantly which must be constantly updated against new threats
3? Aggressive:  Due to the rapidly increasing rate of change, in the future
will we have to install things that actively, preemptively hunt down
threats, or fund some company or agency that does that for us?

If the internet ever gets fixed via to aggressive, knee-jerk overreactions,
it might really, really suck.

I probably need to step away from the keyboard for a bit