{
  "timestamp": "2025-02-05T23:32:23.058039",
  "model": "deepseek/deepseek-r1-distill-llama-70b",
  "request": {
    "messages": [
      {
        "role": "system",
        "content": "You are a security advisor providing end-user guidance on data security and protection.\n            Focus on practical, easy-to-follow security recommendations."
      },
      {
        "role": "user",
        "content": "\n            Provide clear security guidance based on:\n            \n            Content to reference:\n            Search Free Trial Get Demo Box  Security Best Practices for External Sharing on Content Collaboration Platforms January 18, 2018 The Security Best Practices for External Sharing on Content Collaboration Platforms blog series examines the state of security for external sharing on the leading Content Collaboration Platforms CCP. Each week well review a different platform and make security best practice recommendations. Background Box is a California-based public company that was founded in 2005 by Aaron Levie while a student at the University of Southern California. Unlike some of its competitors, most notably Dropbox, Box began life focused on the enterprise, with the result that many of its security controls are built around the concept of a Box administrator. Boxs stated goal is to be the central repository for all enterprise content. As of early 2018, Box has more than 41 million users, across 80,000 businesses, including approximately 60 of the Fortune 500. External Sharing Security Issues Like most growing cloud companies, Box has had a few security issues. One of the more troubling ones was in early 2017 when a researcher discovered a vulnerability connected to Boxs Shared Links feature. This feature generates a URL each time an external user is invited by a managed user to collaborate. The URL can be used by anyone to access the shared file or folder. In some cases it was found that these URLs were indexed by Google and other search engines. By default the links were generated with editor-level permission granting the ability to view, download, upload, edit and rename the shared files. Blue Chip companies like Dell and Ford were found to have files exposed. The issue was quickly addressed by Box but this vulnerability underscores how collaborating beyond the walled garden of your enterprise CCP can be risky. Resolving this vulnerability will continue to be a challenge since enterprises will never have the same level of control over external users as they do over their own managed users. Four External Sharing and Collaboration Security Best Practices 1  Know your user types  Our first recommendation, identify your user base and make sure that users are appropriately categorized. In general, high-frequency, deeply collaborative partners should be managed users since they require more control and oversight, while ephemeral users at partners can be external users, but dont forget to set time outs on shared files. Train your users to migrate completely to the better security of managed users if they deem it necessary. Converting 90 of a team to multi-factor authentication, but leaving one as a recipient of an open link, is a common way to degrade your security. 2  Use collaborator settings wisely A collaborator is an individual who has been invited into a folder. External collaborators are individuals who have a Box account but are not under the control of your enterprise Box administrator. While your Box administrator does not have direct control over these types of users there are certain security practices that should be followed. These include controlling a collaborators access level. Not every collaborator should have full editing permission, many times view-only is more than sufficient. Another best practice is to set a default expiration date for all external collaboration. This way your enterprise can be assured that these relationships are finite and not left open-ended. Finally, its a good idea to make Restrict external collaboration the default for all your new managed users see below. This setting forces your users to think about who they should be collaborating with and to seek permission from their Box administrator before this type of sharing can be enabled. 3  Turn off or limit the Shared Links Feature Shared Links as mentioned earlier allow a user to quickly share content with individuals  both inside and outside of the enterprise. The external user does not need to have a Box account and Box does not keep a record of where these links are sent. As such Shared Links are probably the feature most open to abuse when it comes to external collaboration. As with Collaborators there are a range of steps your Box administrator can take to protect your enterprises content. These steps include enabling view-only access, adding a password andor an expiration date. The most effective step, however is to consider restricting sharing completely. We have learned that once a large number of shared links are in the wild it is hard to pull back the dangerous ones and keep open the good ones, since reporting is so limited. This and other settings are available in the Content  Sharing tab of the Box Admin Console see below. 4  Consider managing the identities of your external users. The Collaborative User approach is a very convenient and free option, but the security is left up to the recipient of the data, because it is their Box account not yours, and that does not always sit well with truly strict security organizations who want complete control of the security policies for their files. Also, some corporations prefer not to buy managed user licenses for non-employees. Resilient Access for Box was built to satisfy this need. Resilient provisions users for the sending entity which allows the sender to maintain full control over who and how each external user sees their data. All of the functionality of the Box experience is maintained for the recipient, but now the security and reporting requirements are easy to customize to meet strict as good as internal policies. See the short two minute video below for more detail on how Resilient can extend an enterprises security control to external users. Play video Other posts in the Security Best Practices for External Sharing blogseries Introduction Box  Security Best Practices Try it for Free Instant Data Classification Cyren URL Category Chacker Prev Introduction  Security Best Practices for External Sharing on Content Collaboration Platforms Blockchain  More than coin Next Company Partners Resources Investor Relations Products Freeware Demo Solutions Contact Us Privacy Management Service by Data443\n            \n            Your guidance should include:\n            1. Easy-to-follow security best practices\n            2. Data protection recommendations\n            3. Safe usage guidelines\n            4. Common security risks and prevention\n            5. Privacy protection measures\n            6. When to seek additional security support\n            "
      }
    ],
    "model": "deepseek/deepseek-r1-distill-llama-70b"
  },
  "response": {
    "content": "**Security Guide for External Sharing on Box**\n\n---\n\n**1. Security Best Practices**\n\n- **Categorize Users**: Differentiate between managed (internal) and external users. Managed users should be under enterprise control for better oversight.\n- **Train Users**: Educate users on secure sharing practices, ensuring they understand the implications of different settings and permissions.\n- **Collaborator Settings**: Limit external collaborators to view-only access where possible and set expiration dates for their access.\n- **Shared Links**: Use Shared Links cautiously, opting for view-only, adding passwords, and setting expiration dates.\n\n---\n\n**2. Data Protection Recommendations**\n\n- **Encryption**: Ensure data is encrypted both in transit and at rest.\n- **Access Controls**: Enforce MFA for an additional security layer and regularly review permissions to remove unnecessary access.\n\n---\n\n**3. Safe Usage Guidelines**\n\n- **AvoidShared Links**: Use Shared Links only when necessary and prefer direct collaboration for sensitive data.\n- **Time Limits**: Set expiration dates for shared links and external access to minimize exposure risks.\n- **Educate on Phishing**: Teach users to recognize phishing attempts when receiving shared links.\n\n---\n\n**4. Common Risks and Prevention**\n\n- **Over-Sharing**: Implement time limits and encryption to mitigate risks of shared links.\n- **Unsecured Links**: Use encrypted links and MFA to prevent unauthorized access.\n\n---\n\n**5. Privacy Measures**\n\n- **Anonymize Data**: Remove identifiable information from shared files to protect privacy.\n- **Monitor Activity**: Regularly audit logs to detect unusual activity and address potential breaches promptly.\n\n---\n\n**6. When to Seek Support**\n\n- **Sensitive Data**: Consult IT before sharing sensitive data to ensure proper security measures.\n- **Incidents**: Report suspected security incidents immediately for investigation and containment.\n\n---\n\nThis guide provides a structured approach to enhancing security and privacy when using Box for external sharing, ensuring your data remains protected with clear, actionable steps.",
    "usage": {
      "prompt_tokens": 1236,
      "completion_tokens": 839,
      "total_tokens": 2075
    },
    "model": "deepseek/deepseek-r1-distill-llama-70b"
  }
}