{"id":41896,"date":"2021-07-22T18:00:04","date_gmt":"2021-07-22T18:00:04","guid":{"rendered":"https:\/\/www.microsoft.com\/security\/blog\/?p=94593"},"modified":"2021-07-22T18:00:04","modified_gmt":"2021-07-22T18:00:04","slug":"how-to-protect-your-cad-data-files-with-mip-and-halocad","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/how-to-protect-your-cad-data-files-with-mip-and-halocad\/","title":{"rendered":"How to protect your CAD data files with MIP and HALOCAD"},"content":{"rendered":"

This blog post is part of the Microsoft Intelligent Security Association guest blog series<\/a>. Learn more about MISA<\/a>.<\/em><\/p>\n

Computer-aided design (CAD) files are used by design professionals in the manufacturing, engineering, architecture, surveying, and construction industries. These highly valuable files contain confidential information and form their core intellectual property (IP).<\/p>\n

Loss of such proprietary information to an outsider or a competitor can have disastrous effects leading to a loss in sales, market share, and reduced profit margins. However, such industries often collaborate with other design partners or vendors or they share their design parts with smaller manufacturers. Product blueprints and designs are regularly exchanged, both within and outside the organization\u2019s network boundaries. In such cases, there is a high possibility of a data leak.<\/p>\n

Data loss or theft can occur in any one of the following ways:<\/p>\n

    \n
  1. Every time you send a file to another person, a copy is usually made and stored online. Once the file leaves the organization there is no guarantee that it is safe unless it is adequately protected.<\/li>\n
  2. Storing and transferring the file to another system.<\/li>\n
  3. A malicious insider may have a copy of the file and the ability to share the information with an outsider, even after leaving the organization.<\/li>\n<\/ol>\n

    Microsoft Information Protection works where perimeter security fails<\/h2>\n

    Organizations may use encryption programs, secure file transfer protocol, and other access control methods to prevent data leaks and data theft. However, once these files leave their original repository it is very difficult to keep track of their usage.<\/p>\n

    To solve this problem, organizations have invested in Microsoft Information Protection (MIP) an intelligent, unified, and extensible solution to protect sensitive data across your enterprise\u2014in Microsoft 365 cloud services, on-premises, third-party software as a service (SaaS) applications, and more. MIP provides a unified set of capabilities to know your data, protect your data, and help prevent data loss across Microsoft 365 apps (such as Word, PowerPoint, Excel, and Outlook) and services (such as Teams, SharePoint, and Exchange).<\/p>\n

    \"Microsoft<\/p>\n

    When you have already invested in an excellent information protection system, it isn\u2019t a prudent decision to go in for another information protection system. But what can be done to solve the above problem?<\/p>\n

    MIP and HALOCAD for secured digital collaboration at a global scale<\/h2>\n

    SECUDE has integrated their HALOCAD solution with Microsoft\u2019s MIP SDK which extends the data protection beyond the organization\u2019s IT perimeter. HALOCAD not only integrates as a MIP SDK add-in into the content authoring environment but also works as an add-on into the content repository and implements information protection policies across supported repositories.<\/p>\n

    \"HALOCAD<\/p>\n

    With over two decades of experience in the data security field, SECUDE has a track record of adding value to the MIP capabilities to SAP environments, especially when exporting sensitive information from SAP environments. HALOCAD helps to seamlessly leverage MIP labeling templates for CAD files and does so simply and cost-effectively. It also applies the label to the content repository where the engineering processes for storing and sharing CAD files are kept.<\/p>\n

    Let us look at a hypothetical scenario on how data collaboration happens between the engineering team and the external third party vendors and suppliers with HALOCAD and MIP:<\/p>\n

    \"HALOCAD<\/p>\n

    In the above scenario, the design files move seamlessly across the supply chain with MIP sensitivity labels applied automatically and user privileges as defined by the organization.<\/p>\n

    Scenario 1 (Designer):<\/h3>\n

    The user is the designer who owns the design files. Based on the user privilege defined, the designer can view, edit, copy, print, and export the files<\/p>\n

    Scenario 2 (Engineer):<\/h3>\n

    The user is an engineer who consumes the design file shared with them by the engineering team. The engineer can view and edit the files. They can make modifications to the original file and share it. They do not have the privilege to copy, print, export, and use the snipping tool to make a copy.<\/p>\n

    Scenario 3 (Partner who has SECUDE solution):<\/h3>\n

    In a typical manufacturing environment, the CAD drawings are shared with a lot of third-party partners and vendors across the supply chain for day-to-day operations. In this scenario, the partner who has purchased the SECUDE solution can only view the CAD files per the set privilege enforcement.<\/p>\n

    Scenario 4 (Unauthorized user):<\/h3>\n

    If an unauthorized user outside of the organization tries to open the CAD drawings, the files are encrypted, and he will not be able to open the file.<\/p>\n

    Benefits of SECUDE\u2019s HALOCAD<\/h2>\n
      \n
    1. HALOCAD extends the security templates provided by MIP to sensitive CAD files throughout the design lifecycle.<\/li>\n
    2. HALOCAD applies sensitivity labels automatically during the check-out process without user engagement.<\/li>\n
    3. HALOCAD preserves the extension of the file, allowing users to not see the difference and the workflow is not disrupted.<\/li>\n
    4. An unauthorized user using an AutoCAD application without the HALOCAD extension tries to open a document, they will not be able to open the file through the extension is *.dwg.<\/li>\n
    5. HALOCAD currently supports the following CAD applications:<\/li>\n<\/ol>\n