VS Exposure-type Ransomware
Suggestion.
Box Shield classification labels should be able to prohibit downloading via Box desktop (BoxDrive) or via linked apps, even if you are the co-owner or owner.
Background Threat.
Currently, the mainstream of ransomware worldwide is not of the encryption type, but of the exposure-type or dual-threat-type.
Version control functions are not effective against exposure-type and dual-threat ransomware.
An effective countermeasure against this type of ransomware is to prohibit the downloading of confidential files that should not be disclosed on the dark web.
Issue to solve.
Box Shield's no-download access policy and access policy restricting linked apps do not target co-owner and owners.
Please change the access policy to cover co-owners and owners so that even if a PC is infected with ransomware and the security product's measures are circumvented, the confidential files will still be protected.
Co-owners can intentionally change their labels, but that is completely irrelevant because what happens when a PC is infected with ransomware is a command-driven download.
Rather, the ideal control is that if you intentionally change the label, you can download, but if you don't, you can't.
