File
attributes are specific properties of a file. Use two file attributes when defining
data
identifiers: file type and file size. For example, a software development company
may
want to limit the sharing of the company's software installation package to the R&D
department, whose members are responsible for the development and testing of the
software. In this case, the
IMSVA administrator can
create a policy that blocks the transmission of executable files that are 10 to 40
MB in
size to all departments except R&D.
Trend Micro recommends combining file attributes with other
DLP data identifiers for a more targeted detection of sensitive files because file
attributes, by themselves, are poor identifiers of sensitive files. Continuing the
preceding example, third-party software installation packages shared by other
departments will most likely be blocked.
