RE: File Encryption - Laptop

Bill_Roswell_at_oxy.com
Date: 09/15/03

  • Next message: Thomas F. Szabo: "RE: Stop browsing the web through GP?" 
    Date: Mon, 15 Sep 2003 16:05:52 -0500
To: <marceljanus@gmx.de>, <security-basics@securityfocus.com>

    First you want something other than Microsoft's EFS. There are many
    programs that can read/modify files encrypted with that.

    However, more important you need to think about the crypto key
    management. You need to make it as simple as possible for the user, so
    they will use it, not try to bypass it and won't either use the same
    weak password or write them down. For example it is usually better to
    encrypt everything and have them have one crypto key they can remember,
    rather than having a crypto folder fro sensitive and confidential
    information and a plain text for public documents. Second , you need
    some kind of key escrow recovery incase the person forgets their crypto
    key, is terminated or is run over. Encryption has been around for a
    long long time and if you overlook the administration you are in fro
    trouble. Some products to look at PGP works good, Zixit is good for
    email transmission, PC-Guardian is good for hard drive encryption.

    Thanks,

    Bill

    Security Architect
    Oxy Inc. IT-Security
    Occidental Petroleum Corporation
    Houston, Texas
    713-215-7976
     

    THIS MESSAGE CONTAINS CONFIDENTIAL INFORMATION AND TRADE SECRETS
    OF OCCIDENTAL. UNAUTHORIZED USE OR DISCLOSURE IS PROHIBITED.

    -----Original Message-----
    From: Marcel Janus [mailto:marceljanus@gmx.de]
    Sent: Sunday, September 14, 2003 3:08 AM
    To: security-basics@securityfocus.com
    Subject: RE: File Encryption - Laptop

    > -----Original Message-----
    > From: Ethan Harris [mailto:harris_ethan@hotmail.com]
    > Sent: Friday, September 12, 2003 4:53 PM
    > To: security-basics@securityfocus.com
    > Subject: File Encryption - Laptop
    >
    >
    >
    >
    > Hi all,
    >

    Hi,

    >
    >
    > I'm fairly new to the secuirty world, but have been recently
    > asked by my company to find a product that will be able
    > encrypt files on a PC (mostly Win98 and Win2k based),
    > especially on laptops. They want an extra layer of security
    > in case any of these machines get stolen. Thanks in advance
    > for the input.

    Look at Blowfish Advanced CS, it's free and I'm very happy with it.
    http://maakus.dyndns.org/software.html

    Bye
    Marcel

    ------------------------------------------------------------------------ 

    ---
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
------------------------------------------------------------------------
----
---------------------------------------------------------------------------
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------
  • Next message: Thomas F. Szabo: "RE: Stop browsing the web through GP?"

    Relevant Pages

    • Re: encrypted filesystems
      ... |> Encryption is for keeping data secret. ... The original descryption was a network security configuration being tampered ... layer or the block device layer to ensure data integrity, ...
      (comp.os.linux.development.system)
    • RE: Few interesting topics in Network Security please.
      ... Or you can do a project on encryption. ... Few interesting topics in Network Security please. ... It is always a good idea to discuss different protocols at the OSI layer ... and show packet dumps of the communications on the wire. ...
      (Security-Basics)
    • AW: File Encryption - Laptop
      ... EFS only encrypts specific files and folders. ... more complicated (search this group for my posts with title Secure Boot ... Betreff: Re: File Encryption - Laptop ... Captus Networks ...
      (Security-Basics)
    • RE: File Encryption - Laptop
      ... and/or open source alternative) check out GnuPG (Gnu Privacy Guard) which is ... Subject: File Encryption - Laptop ... Captus Networks ... FIND OUT NOW - FREE Vulnerability Assessment Toolkit ...
      (Security-Basics)
    • Re: [patch 0/5] Support for sanitization flag in low-level page allocator
      ... their crypto key disappeared after a restore. ... swap combined with a hard disk password and thus a crypted and locked ... uswsusp does have internal encryption, ...
      (Linux-Kernel)
    • Quantcast