Veritas Information Classifier (VIC)

A shared service for all Veritas Products

Nedeljko Štefančić
Agenda

1 Introducing VIC

2 Architecture

3 Deployment Scenarios

2
Classification What is it good for?
The Veritas Information Classifier (VIC) allows sensitive information to be identified
• Tag sensitive documents (e.g. contains ‘PII’ or regulated by ‘SOX’)
• Tags used to make retention and storage decisions
• Tags are indexed so they are searchable for Compliance (e.g. GDPR) & eDiscovery

60+ HIPAA
Policies Health Insurance Portability
& Accountability Act

150+ 100+
Patterns Policies
3 Copyright © 2017 Veritas Technologies LLC
 Introducing VIC

4 Copyright © 2017 Veritas Technologies LLC

What is Veritas Information Classifier?
Veritas Information Classifier is a service that uses policies to classify documents.

NFS Private Public

Cloud Cloud
CIFS

Traditional Data Center

MICROSERVICE
On-premise or cloud
Veritas Information Classifier

Classification
Rules & Templates

Tags:

Regulated Confidential Personal Priviledged

etc…

5 Copyright © 2018 Veritas LLC

WHAT DOES VIC CONSIST OF?

MICROSERVICE

VIC Policy Manager + APIs VIC Engine

+ APIs

Shared Tenant VIC UI

Policies Policies Assets

6 Copyright © 2018 Veritas LLC

 Key:
VIC DEPLOYMENT SCENARIOS

MICROSERVICE TO RUN ANYWHERE

(engine is always close to the data)

Single Cloud Cloud to Cloud Hybrid Cloud On-Prem Only

EV.cloud & VIC VIC in AWS VIC in AWS

in AWS or Azure

EV.cloud Information Map Agent Data Insight

Data Centre Velocity Enterprise Vault

7 Copyright © 2018 Veritas LLC

 VIC Architecture

8 Copyright © 2017 Veritas Technologies LLC

VIC Architecture – 5 Elements

– Text extraction (e.g. converting office documents to text)

– Text classification (using policies to classify documents and emitting the results as tags)

– Policy management (enabling built-in policies, creating custom policies etc)

– HTTP/REST API
• To access all of the above functionality

– Web application
• To allow users to manage policies and perform test classifications
INTELLIGENT Powerful and Performant ENGINE
Next Generation Classification using common Veritas solution

Proximity Regular
Searching Expressions

Confidence
Key Word
Based
Search Dispositions

Min/Max
Checksum
Count
Validation Dispositions

10 © 2017 Veritas Technologies LLC

VIC Architecture Basics

• VIC is packaged as a single Java JAR file plus some third-party binaries and data files.
• VIC has its own embedded web server (Jetty), so does not require any other web server
infrastructure (e.g. IIS).
• A single VIC instance can support all functionality, or it can be configured to just do text
extraction/classification, or just policy management.
• VIC is given documents/text to process by an application (e.g. EV, DI) - it does not scan file
systems or otherwise seek out documents to classify.
– Exception: The new Analyze feature was added in 2.1.0, which can scan folders dropped into the browser
and produce a report.
 VIC GUI
• ICE offers a web-based interface that
makes creating policies a much easier
experience

• All configuration of policies, including

rules and tags, are all managed within
this new interface

• The new interface even allows

administrators to test the policy out
directly in the interface before it is
enabled

• Policies can be shared between

multiple Enterprise Vault servers in
the same site

12
 VIC Deployment Scenarios

13 Copyright © 2017 Veritas Technologies LLC

 DEPLOYMENT EXAMPLE
Veritas
Classification
EV.cloud

Info-Control SkyWalker Tenant Mgr ERP/billing Classification

Policy Mgmt Discov.archive
VRP-RaaS Velocity IAM Support
Persona Specific Cloud Products Shared Products
Policies & Pers’l.archive • Single Customer deployment
Rules
Consoles:
– DI and/or EV
• Service Mgmt Information Availability Services Insight Services Message
• IT admin Domain Classification Archive – Info-Map/Control
• Compliance Services Connection Services Metadata & Content Engine
• End-user Classification – VRP, Velocity
Engine
Veritas Infrastr. Platform Operational Cloud Admin • Central control/management of
Archive Store
Platform Services Services Services Services rules & templates
• Distribution to classification end-
Veritas Cloud
Identity, points
Metadata & Metadata
Metadata
Content & Content
& Content – On-premise
CW E-Discovery EV – Cloud Shared Service
Rules &
Classification Eng. Classification Eng. Templates • Multiple embedded SDK
Case Data&Index Archive DA/CA instances; feed into InfoFabric
Public Cloud

Data Insight Velocity /

NFS
Classification Eng. other on-prem Private
deployment Cloud
CIFS Insight
Classification Eng.
File Access

Traditional Data Center

14 Copyright © 2018 Veritas LLC

 DATA INSIGHT 6.0 - Target Content with Classification

Veritas Information Classifier Machine Learning Prioritization Target Users via reports for
near real-time classification
• Same Engine/Policies as
Enterprise Vault

Department Citizenship
D

Job Title

15 Copyright © 2017 Veritas Technologies LLC

INTELLIGENT Enterprise Vault Classification USE CASES
Classification of all content sources drives retention, supervision and discovery
Communications Enterprise Vault Use Cases
Archive / Discard Item
Comply with industry regulations
Find PII and sensitive data
Define Record Type
Files
Set Retention Category
Tag for End-user Search
Veritas
Information Tag for FOIA/Congressional req.
Classifier Tag for eDiscovery
Social Media
Drive Supervisory Review
After Archiving:
OCR & Indexing of Images • Re-Classification of existing
archived content
• Gated Deletion (Test before expire)
16 © 2017 Veritas Technologies LLC
EDP 9.0 CLASSIFICATION DURING PROCESSING

WHAT
• Option to Classify data using VIC 2.0 as it is processed into a
case
• Apply pre-defined policy to identify matching data
• Ability to filter for inclusion or exclusion based on policy
match

WHY
• Allows Subject Access Reviewer to quickly identify
documents with PII
• Expedites Subject Access Request review reducing cost and
turn around times
• Expedite case analysis

17 Copyright © 2017 Veritas Technologies LLC

 VIC Adoption in MCDMP and Veritas Products
Integrations in 2017

Data Insight Enterprise Vault eDiscovery Platform Cloud Storage CloudPoint

June 2017
• Visualize Data with classification tags
• Pass classification to Enterprise Vault
• Post processing activity based on
classification
• PII Detection (GDPR)
August 2017
• Classification drives retention
• Re-classify content
• Tag for eDiscovery searches
• Drives compliance review
• PII detection in the archive
December 2017
• Classify during case processing
• VIC drives bulk redaction
• PII Detection (GDPR)
• Filter based on EV/DI tags when
ingesting from EV (Currently Available)
December 2017 December 2017
• Tag & Visualize data in Veritas • Associate snapshot policy
Cloud Storage (aka Object Store) based on classification
• Search tags via metadata index • Detect PCI/PII in snapshots

Planned for 2018

EV.cloud MCDMP / Info Map Access VRP NetBackup Backup Exec

H1 2018 June 2018 TBD TBD TBD
• Classification drives retention • Associate backup policy based
• Visualize Data with classification tags • Classification-based storage • Classification-based workload
• Re-Classify content movement and data movement on classification
• Inherit and display tags from other • Classify after backup to pre-
• Tag for eDiscovery searches • Report/Visualize Data with • Report/Visualize Data with
Veritas products
• Drives compliance review classification tags classification tags populate tags for InfoMap
• PII Detection (GDPR) • Detect PCI/PII in backup images
• PII detection in the archive
• EV.c backend storage savings

18 Copyright © 2017 Veritas Technologies LLC

Risk Analyzer

• https://riskanalyzer.apps.veritas.com/#!/admin/analyze

19 Copyright © 2017 Veritas Technologies LLC

Q&A
 Thank you!

Copyright © 2017 Veritas Corporation. All rights reserved. Veritas and the Veritas Logo are trademarks or registered trademarks of Veritas
Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.
This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document,
either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.