Educause Security Discussion mailing list archives

Re: Encrypted Thumbdrives


From: Mike Hanson <MHanson () CSS EDU>
Date: Fri, 18 Apr 2008 15:43:54 -0500

Charlie,

We only buy fully encrypted drives for the people that request USB
drives. Our current preference is the Kingston Data Traveler Elite.

Given a choice between going the extra step and using the encrypted
side of an USB drive or just using the unencrypted side I think most
people will choose not too. With the 100% encrypted drives it takes that
decision away and errors on the side of security.

Since the price of USB drives is so low I understand that people are
probably buying there own unencrypted USB drives and carrying around
data that they shouldn't on it, but you do what you can. This is where
end user education comes into play.






Mike Hanson
Network Security Manager
The College of St. Scholastica
Duluth, MN 55811

(218)-723-7097
mhanson () css edu


"Bombard, Charles L" <Charles.Bombard () CCV EDU> 4/18/2008 3:18 PM

Have you looked at a particular product? Have one you really like?



I am wondering what other people have found in looking at USB
thumbdrives that have built in encryption and/or have utilized
software
based encryption such as truecrypt that can be included on the drives
un-encrypted area.



I am currently demo'ing a SafeStick Business edition thumbdrive.

I will be looking at a truecrypt solution too.



I thought there had been a discussion about this a while back but I
could not find it in the archives.



Any thoughts/suggestions are appreciated.



-Charlie



==========================================



Charles Bombard, GSEC

LAN/Systems Administrator

Community College of Vermont

119 Pearl Street

Burlington, VT 05401

802.657.4234

bombardc () ccv edu <mailto:bombardc () ccv edu>



PRIVACY & CONFIDENTIALITY NOTICE: This message is for the designated
recipient only and may contain privileged, confidential, or otherwise
private information. If you have received it in error, please notify
the
sender immediately and delete the original. Any other use of an email
received in error is prohibited.



Current thread: