RE: File Encryption - Laptop

[<Bill_Roswell () oxy com>]

First you want something other than Microsoft's EFS. There are many
programs that can read/modify files encrypted with that.

However, more important you need to think about the crypto key
management. You need to make it as simple as possible for the user, so
they will use it, not try to bypass it and won't either use the same
weak password or write them down. For example it is usually better to
encrypt everything and have them have one crypto key they can remember,
rather than having a crypto folder fro sensitive and confidential
information and a plain text for public documents. Second , you need
some kind of key escrow recovery incase the person forgets their  crypto
key, is terminated or is run over.  Encryption has been around for a
long long time and if you overlook the administration you are in fro
trouble. Some products to look at PGP works good, Zixit is good for
email transmission, PC-Guardian is good for hard drive encryption.



Thanks,



Bill

Security Architect
Oxy Inc. IT-Security
Occidental Petroleum Corporation
Houston, Texas
713-215-7976
 

THIS MESSAGE CONTAINS CONFIDENTIAL INFORMATION AND TRADE SECRETS 
OF OCCIDENTAL.  UNAUTHORIZED USE OR DISCLOSURE IS PROHIBITED.




-----Original Message-----
From: Marcel Janus [mailto:marceljanus () gmx de] 
Sent: Sunday, September 14, 2003 3:08 AM
To: security-basics () securityfocus com
Subject: RE: File Encryption - Laptop


> -----Original Message-----
> From: Ethan Harris [mailto:harris_ethan () hotmail com] 
> Sent: Friday, September 12, 2003 4:53 PM
> To: security-basics () securityfocus com
> Subject: File Encryption - Laptop
>
>
>
>
> Hi all,

Hi,

> I'm fairly new to the secuirty world, but have been recently 
> asked by my company to find a product that will be able 
> encrypt files on a PC (mostly Win98 and Win2k based), 
> especially on laptops.  They want an extra layer of security 
> in case any of these machines get stolen.  Thanks in advance 
> for the input.

Look at Blowfish Advanced CS, it's free and I'm very happy with it.
http://maakus.dyndns.org/software.html

Bye
Marcel


------------------------------------------------------------------------
---
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Captus Networks
Are you prepared for the next Sobig & Blaster?
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
 - Precisely Define and Implement Network Security
 - Automatically Control P2P, IM and Spam Traffic
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------