Security Basics mailing list archives

Re: File encryption


From: info () pcsage biz
Date: Tue, 24 Jan 2006 14:19:29 -0500

Hi Marty,

Much of what you're asking for is already available for a few  
different OS. We would be better able provide feedback if we had a  
few clues as to your operating environment.
imho if files are mission critical and/or highly sensitive, they have  
no business being on a laptop in the first place...
they should only be available via a secure file share on a  
centralized and secured server...
it is also possible to lock down laptops for this type of access only...
if we had more information we could provide better help.

Sincerely,

Sean Swayze
info () pcsage biz

On 27-Nov-05, at 11:27 PM, Marty wrote:

Hi,

We want to make sure that if the laptop is stolen and the
encryption is broken that we have an extra layer of
protection. The password can be guessed or acquired from
social engineering (from my point of view), thus the risk.



Marty!

-----Original Message-----
From: Aditya Deshmukh
[mailto:aditya.deshmukh () online gateway strangled net]
Sent: Wednesday, November 23, 2005 10:08 PM
To: 'Mork'; security-basics () securityfocus com
Subject: RE: File encryption

Question on file encryption. We want to add a layer to our
file
security.Our hard disks are encrypted and we would like to
add single
file encryption.

I want to know why you want to add one more layer of file
security. If your Hard disk are already encrypted then with
a strong encryption then you don't need the extra
Encryption.


What is the best product that would silently encrypt and
decrypt
on-the-fly so it's transparent to the users?

I recommend you use PGP disk ecnryption.
It has whole disk enceyption as well as it can create files
that Can act as drives and are assissable using a drive
letters.

Type one password and you can access the files just like on
hard disk Not exactly transpertnt but almost there and very
good product with Exceptional support.



____________________________________________________________
____________
Delivered using the Free Personal Edition of Mailtraq
(www.mailtraq.com)



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Attachment: GWAVA_unknown.dat
Description:

Attachment: Mime.822
Description:

Attachment: GWAVADAT.TXT
Description:

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Current thread: