Re: password protect encrypted directory

["Gethin Jones" <gethinj () gethin net>]

Dana,

I tend to use http://www.pgpi.com to securely encrypt data. PGPdisk works 
well for this.
The only drawback is that it must be backed up on a regular basis as I have 
noticed some data being deleted on disk defragmentation.

Best Regards

Gethin

Gethin Jones
IT Security Consultant
MSN gethinj () hotmail com
PGP  8537 0419 75DC EC62 4959  3303 3669 049B F2E9 3C48

----- Original Message ----- 
From: "Dana Rawson" <absolutezero273c () nzoomail com>
To: <security-basics () securityfocus com>
Sent: Thursday, August 12, 2004 5:38 PM
Subject: password protect encrypted directory




G'Day, all.

Hope this isn't too basic of an issue but I wanted to ask for your direction 
if possible.

Preface: I have directory which contains sensitive data on a w2k/xp laptop. 
I have the directory and files residing within encrypted.

Issue: I would like to password protect this directory so even the user who 
is logged into this profile is prompted for a password prior to gaining 
access to this data.

Desired outcome: By accomplishing this (if possible) I wish to deny access 
to this data via remote entry/being hacked, and also protect the data should 
the laptop be stolen, or someone walks away from their computer without 
locking it (i.e. ctrl-alt-del) leaving it wide open for someone to sit down 
and start playing.

Is this something that can be accomplished?  Is there commercial or 
opensource software available?

I have found software on the web that states it can password protect a 
directory, but with out installing and testing all of them how can I know if 
it most secure?  Has anyone tested or reviewed this type of software?

Is anyone familiar with this that might make a recommendation?

Thanks again in advance for your time.

Regards,
Dana

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the 
skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------



---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------