The new General Data Protection Regulations (GDPR) in the EU highlight the responsibilities all organisations have to protect customer data. In the EU, penalties for leakage of personal data are increasing a hundredfold and other jurisdictions are likely to follow suit.
The printed document is the oldest source of data leaks, and protection of printed output remains an important issue to this day. The first line of defence is to prevent unwanted copies of a document being printed and PaperCut MF’s find-me printing does that very well. But once printed, a paper document left behind in the cafe or on a train seat is typically anonymous, making it impossible to determine when and by whom it was printed. PaperCut NG and MF also provide innovative solutions to this problem – but more about that later.
At PaperCut, we’ve been tackling print security for a long time. Our original hackers were armies of school and university students looking for a way to get a free print or copy. And you wouldn’t believe the things that a motivated student will try!
Behind the scenes at PaperCut, we have been making changes to better equip ourselves for a security conscious world. Recently we established our own Security Response Team (SRT), which formally brings together our company’s top security talent to raise the bar on how we do security. The responsibilities of the SRT include giving the existing application and all new features a thorough security review. When customers report a potential security issue, the SRT is standing by – ready to investigate and quickly fix any nasty reported vulnerabilities.
In more recent years, PaperCut NG and MF are regularly subjected to customer sponsored penetration tests that pound the software from all angles looking for vulnerabilities. If you do run a penetration test and find something – please report it to us through customer support and they will pass it on to the SRT.
Unfortunately, no amount of pen testing will stop a careless employee leaving a sensitive document behind on the train seat. A purely digital solution won’t work in this case. What we need is a way to strongly influence user behavior.
Perhaps a confidential document policy and user education will do the trick? That could be part of a solution, but in practice, policies are not sufficient on their own. But a clear policy coupled with security features in PaperCut NG and MF make for a very strong combination.
Way back in 2010 (release 10.5), we introduced the ability to add a watermark to every printed page. This watermark may contain the user name and date of printing – or even more powerful – a digital signature. A digital signature can be used to uniquely trace any printed page to the exact entry in the job log for that printed document, giving the time of printing, the printer used and the person who printed the document. This sends a powerful message to users that they remain accountable for every page they print.
Perhaps PaperCut was ahead of its time, because for a number of years watermarking has been considered a minor feature – almost forgotten. But In 2017 its time has come. To celebrate, we’ve made it more powerful by adding full page watermarking. This feature, was for us a cool technical challenge to implement and for you, ensures that the watermark cannot be intentionally clipped off the page. Of course you don’t want the full page watermark on every printed document, so it’s good to know you can automatically turn on and off a watermark using a print script to set the watermark text.
There is plenty more to say in the realm of print security, as there are security questions to answer right from the time a user presses Ctrl-P to toner being laid down on the paper and beyond. To help people answer these questions, we recently put out a whitepaper covering end-to-end print security best practices. If print security is your concern, please check it out here – “Securing your Print System”.
About The Author:
Geoff Smith leads the development and product teams at PaperCut Software. He came to PaperCut four years ago after holding roles as software developer architect and project manager at HP and Agilent Technologies. Geoff is a member of PaperCut’s Leadership Team and has overseen the rapid growth in our development capability. Outside PaperCut, Geoff is a keen dinghy sailor and likes to spend his Saturday afternoons at the helm of a small boat.
Posted in General, print security |
Leave a comment
I’ve heard it said that great technology is a simple solution to a complex problem. That statement sounds compelling, but I think it actually sells technology short. So much of the technology that we use every day and even take for granted is in fact extremely complex and clever – but is successful because it comes with a user interface that we find simple and natural to use. Our smart phones for example, are much richer and more capable than the old generation phones they replace but we actually find them easier to use. But the evolution in user interface that has made this possible has not simplified the underlying technology – quite the opposite.
When it comes to print management, PaperCut NG makes it all appear simple. Installation and configuration is straightforward and intuitive. In minutes you can have a PaperCut NG solution up and running, delivering benefits. But let me tell you, as a newcomer to PaperCut, there is a great deal more to print management than I ever thought possible!
My name is Geoff Smith and I’ve just recently joined the PaperCut team as a senior developer and team leader. I’ve worked for many years in the complex field of Internet Communications and print management is something I’ve always just taken for granted. But after delving into the code behind the tranquil green user interface it is clear that the PaperCut user experience has only been achieved through a sustained and committed effort by some very clever people. The complexities are numerous and the solutions are well thought out and robust. The previous blog on EMF page level color control gives one small example – the painstaking and detailed work that must be done to bring you a feature you may not even notice but which helps make the overall solution run more smoothly and effectively.
I joined PaperCut because they are good at what they do. Each member of the team has something to teach me and it is a privilege to work with them. I’m looking forward to a great future.
Posted in General |