Box Unlocks a New Level of Security in the Cloud by Adding Intelligent, Automated Classification to Box Shield

Box, Inc. announced the addition of intelligent, automated classification to Box Shield, the company’s advanced security solution for protecting content in the cloud. Leveraging advanced machine learning, Shield can now automatically scan files and classify them based on their content, helping businesses detect and secure sensitive data without getting in the way of work.

“The sudden shift to remote work has surfaced new security challenges for businesses, making it more critical than ever to keep sensitive data from getting into the wrong hands,” said Varun Parmar, Chief Product Officer at Box. “In June alone, Box Shield helped customers protect their content by blocking shared link access to classified files over eight million times and prevented close to a million downloads of classified files. Using advancements in machine learning to automatically apply classification labels as files are uploaded or edited extends Box Shield’s ability to enable secure remote work from anywhere. This allows IT and security teams to configure and enforce policies across the enterprise at a new level of scale that would be impossible to tackle manually.”

Intelligent automated classification in Box Shield

Box Shield, the fastest growing new product in the company’s history, helps prevent data leakage and proactively identifies potential insider threats or compromised accounts. Some of the world’s most security-conscious and highly regulated organizations like NASA and Sierra Oncology are using Box Shield to secure their data in the cloud.

“Data integrity and data security are paramount to life sciences companies. Box Shield has been a powerful solution that helps us protect our information through enforcement of data policies across our organization,” said Mike Engels, Executive Director of Information Services at Sierra Oncology. “Shield’s new automated classification capability will help us become even more efficient in delivering a positive experience for our staff while at the same time helping to maintain data integrity and data security.”

Using advanced machine learning and data leakage prevention capabilities, this new feature scans files in real-time when they’re uploaded, updated, moved, or copied to specified folders, and automatically classifies them based on admin-defined policies. This enables customers to scale data classification and enforce policies across the enterprise, in order to reduce risk and meet compliance standards such as HIPAA, PCI DSS, and GDPR.

With intelligent automated classification in Box Shield, customers will be able to:

• Automatically identify multiple personally identifiable information types within files, including social security numbers, driver’s licenses, International Bank Account Number (IBAN) codes, International Classification of Diseases (ICD-9/ICD-10) codes, and more
• Automatically identify custom terms and phrases within files – for example: “Box Confidential”, “Internal use only”, and “NDA required”
• Easily create policies that apply the appropriate classification label based on desired logic – including and/or conditions and unique counts

Once files are classified appropriately, Shield can help prevent data leakage through a combination of access controls already in use by Shield customers today, such as shared link, external collaboration, and download restrictions. The new feature supports the most common unstructured file types in Box, including documents, spreadsheets, PDF, Box Notes, and more.

“Remote work has accelerated cloud adoption as businesses seek to enable a distributed workforce and serve their customers digitally,” said Lakshmi Hanspal, CISO at Box. “This requires a completely new approach to security and privacy. As more work is done outside office boundaries on both managed and personal devices it is critical to have one source of truth for all of your data in order to meet new regulatory and compliance standards without slowing down business.”

The new automated classification feature comes on the heels of a series of security enhancements Box announced this year. In April, Box added malware detection to Box Shield, which automatically labels files as malicious and restricts downloads and local editing to prevent the spread to more users and devices. A month later, Box announced an improved Device Trust, allowing companies to specify ownership and security requirements on both personal and company-owned devices so users can easily and securely access content in Box. Automated classification augments the existing option for Box customers to classify files via API, through Box’s security partners.

Availability
The new Box Shield automated classification capabilities will begin to be available today and will roll out to eligible customers over the next month.