Extra Protection
Hardwiring Disk Encryption for Extra Protection
Industry analysts believe that security is no longer the number one priority. Security has been displaced by topics like business intelligence and performance management. Bear in mind though that all this means is that security remains a concern but just not number one.
Indeed Gartner’s 2008 survey of CIOs point to security as 6th in importance from a technology perspective and not in the top 10 from a business perspective. And yet we continue to read reports about security.
According to the Privacy Rights Clearinghouse (PRC), a nonprofit consumer organization in the US, there have been a total of 230,454,030 records containing sensitive personal information have been involved in security breaches in the US since January 2007.
“With industry reports estimating 700,000 laptops stolen every year and the associated costs reaching $5.4 billion, organizations face a clear and pressing security threat,” said Christopher So, General Manager, Volume Products Division, Fujitsu Hong Kong Limited.
Where should security start? Should it be at the servers that run business-critical applications? Should it be at the device level that houses the behavior of its owner? Should it be on the Web where a vast major of information flows today? Or should it be down to the individual components that make up the technologies we use today to make life simple and complicated at the same time?
There are those who believe that security must be deployed across as wide a spectrum of data entry points as possible. Some vendors have been working to integrate security measures down to the firmware that makeup part of the embedded intelligence in computing devices.
I recently spoke to a security expert who noted that no matter how many times you delete a file on a hard disk or portable memory media like a USB thumb drive, there is software available that can recover the data. The hour-long debate on what constitutes the protection of information boils down to using data encryption technology to keep confidential information private.
Data encryption falls under three broad categories: data-in-transit; data-in-use; and data-at-rest.
Encryption of ‘data-in-transit’ protects information as it moves from node to node across local networks, wireless networks and the internet. There are a number of widely adopted standards for this type of encryption, including SSL (Secure Sockets Layer), TLS (Transport Layer Security), and IPSec (Secure Internet Protocol). Encryption of data-in-transit prevents thieves from intercepting or ‘sniffing’ sensitive data traffic as it travels the network.
‘Data-in-use’ refers to data being accessed or processed by applications or databases. Efforts to secure data-in-use include digital rights management (DRM), content management and content filtering technologies.
‘Data-at-rest’ (‘DAR’) refers to data in computer storage (and excludes data temporarily residing in computer memory). Examples include data stored on a computer hard drive, a database on a networked server, and files copied to a USB drive. The recent stories in Hong Kong about theft of information via USB drives point to the uncontrolled proliferation of USB drives within enterprises.
There are 2 fundamental means of achieving encryption for data-at-rest. The simplest method is to encrypt individual data files and folders. A more comprehensive approach is to encrypt the entire storage media.
“Disk encryption, has emerged as the ‘best practice’ for protecting data-at-rest on endpoint devices – desktops, laptops, and removable storage media. By encrypting data at the sector level, full-disk encryption provides the most comprehensive safeguards in the event of the loss or theft of an endpoint device,” says Adrian Chua, Sales Director Asia Pacific for WinMagic.
Kelvin Lim, regional manager for South Asia at Check Point, notes that with disk encryption, a user will not need to employ file encryption on a file-by-file basis, and still obtain complete data integrity and security.
“Disk encryption renders the information on an entire disk unreadable to unauthorized third parties without the credentials. Disk encryption removes the security decision from the end user, ensuring compliance without any form user interaction or training,” Lim adds.
As employees become more mobile the incidence of notebook theft (and subsequent data loss) has been on the rise. While few organizations agree on the dollars lost associated with these theft.
David M. Smith, associate professor of economics at Pepperdine University in Michigan, believes there are three cost components associated with data loss: cost due to technical services, lost productivity and the value of the lost data. Together, this amounts to US$3,957 per incident. Click here for additional details on his findings.
Hard disk vendors like Seagate and Fujitsu have added encryption into a number of their products. Seagate partnered with encryption specialist WinMagic to provide additional protection for some of its Momentus hard drives.
Fujitsu introduced the world’s first 256 bit advance encryption standard (AES) technology offering secure, highly automatic hardware encryption at the drive level.
The built-in AES automatically encrypts data when writing to the hard drive and decrypts during read process. The Fujitsu FDE implementation also includes an advanced secure erase feature to help reduce risks associated with re-using hard drives.
Security, simplicity and ease of use are what users and IT managers expect of technology today.
For example the Fujitsu MHZ2 CJ drive series creates a simple-to-use and virtually impenetrable data lock down, with no encryption keys remaining on the machine when it is powered off. “The data on the disk drive remains inaccessible without the password, delivering advanced protection for the organization owning the machine, and the critical data for which they are responsible,” said So.
But in case you think that FDE is the answer to all of your encryption needs, there are those who think otherwise.
Chua cautions that full-disk encryption is not suitable for applications. File, folder and container encryption (collectively ‘FFCE’) extend cryptographic safeguards to shared files and folders on departmental servers and other common storage media.
“FFCE offer protection for data files in transit (e.g. e-mail attachments) as well as additional security against internal threats. Issues surrounding the protection of sensitive data or personal identifiable information (PII) are complex,” explains Chua.
In today’s age of community-based hacking and relentless threats coming from every conceivable route, data encryption should be part and parcel of an organization’s overall security policy.
About the Author
Current I am the content director and web strategist for Questex Asia Ltd. I also have 6 years of Marketing and Communications experience with Hitachi Data Systems in Asia. Other prior stints include senior industry analyst for Dataquest (a Gartner Group brand) and account director at Euan Barty Associates – a PR firm in Hong Kong.
EXTRA PROTECTION AGAINST H1N1
|
|
Top Ten Full Protection Boxing Headgear Small Med. extra Karate martial arts mma $37.99 |
|
|
Boxing Head Guard Kick Boxing Protection Helmet Head Gear Black Extra Large $28.99 |
|
|
BLACK BOXING HEAD GUARD KICK BOXING HEADGEAR PROTECTION EXTRA LARGE $27.99 |
|
|
BLACK BOXING HEAD GUARD KICK BOXING HEADGEAR PROTECTION EXTRA LARGE $27.99 |
|
|
BOXING HEAD GUARD KICK BOXING PROTECTION HEADGEAR BLACK $27.99 |
|
|
RED BOXING HEAD GUARD KICK BOXING PROTECTION EXTRA LARGE $26.99 |
|
|
PINK BOXING HEAD GUARD HEADGEAR LADIES KICKBOXING PROTECTION EXTRA LARGE $26.99 |
|
|
PINK BOXING HEAD GUARD HEADGEAR LADIES KICKBOXING PROTECTION EXTRA LARGE $26.99 |
|
|
RED BOXING HEAD GUARD KICK BOXING PROTECTION EXTRA LARGE $26.99 |
|
|
BOXING HEAD GUARD KICK BOXING PROTECTION HEADGEAR LADIES PINK $26.99 |
|
|
BOXING HEAD GUARD KICK BOXING PROTECTION HEADGEAR RED $26.99 |
|
|
MRX Boxing Head Guard Kick Boxing Protection Helmet Head Gear Black $24.99 |
|
|
Boxing Head Guard Kick Boxing Protection Helmet Head Gear Red Extra Large $24.99 |
|
|
MRX Boxing Head Guard Kick Boxing Protection Helmet Head Gear Red $24.99 |
|
|
PINK MUAY THAI BOXING INNER GLOVES FIST PROTECTIVE HAND WRAPS EXTRA LARGE $6.99 |
|
|
BLACK MUAY THAI BOXING INNER GLOVES FIST PROTECTIVE HAND WRAPS EXTRA LARGE $6.99 |
|
|
WHITE MUAY THAI BOXING INNER GLOVES FIST PROTECTIVE HAND WRAPS EXTRA LARGE $6.99 |
|
|
American Weigh Black Blade Digital Pocket Scale, 1000 by 0.1 G $8.99 Product FeaturesHandy digital pocket scale includes a retractable backlit display, making the most of space-saving efficiencyWeighs up to 1000 grams in 0.1 gram increments; easy to use with a 3-key operationComes bundled with 2 sizes of expansion trays, including extra-largeIncluded carrying pouch holds everything, so taking it on the go is easyCovered by a 10-year warranty; powered by 2 AAA batte… |
|
|
Ove’ Glove Hot Surface Handler, 1 Glove (Pack of 2) $23.00 Five-fingered flexi-grip. For left or right hand. Withstands extreme heat up to 480 degrees F. The Ove Glove is perfect for the kitchen, barbeque and handling hot surfaces around the house. The Ove Glove exterior layer is made of DuPont Nomex and Kevlar. Interior layer of soft doubleknit cotton. Machine washable. The thermal properties of The Ove Glove outer layer, which is made of Nomex and Kevla… |
|
|
Microplane 34007 Kitchen Cut-Protection Glove $12.81 Accident protection for the prudent. The Microplane Cut Resistant Glove allows for safer food preparation with its uniquely constructed, machine washable, light weight and comfortable design. Made from man-made fibers, the “”one size fits most”" glove molds quickly to fit either hand. We recommend that you use this glove for all your food preparation requiring sharp tools. Keep in mind that you st… |
|
|
Brown Sugar [Copy Protected CD] $6.30 All products are BRAND NEW and factory sealed. Fast shipping and 100% Satisfaction Guaranteed…. |
|
|
Nylon DM 5-CD Player Sports Pack $25.99 The CD Sports Pack from Case Logic is an essential on-the-go accessory for active music fans. An elastic strap holds your portable CD player firmly in place in the rear pocket of this adjustable waist pack. CDs can be packed into the front section, which holds two discs in jewel cases (three if you squish), or eight discs in ProSleeves that can be purchases directly from Case Logic (order form en… |
|
|
On The Can: Collector’s Tin (3 CD Box Set) On The Can features 3 Larry the Cable Guy CDs together in a deluxe tin box! Track listing: Disc 1 – The Right To Bare Arms 1. Git-R-Done! 2. Midgets And Gay Bars 3. WWJD 4. Las Vegas 5. Hank Williams Jr. High School 6. Hooters And Hooters Airlines 7. Dodge Truck, Retards And Stinkbait 8. NASCAR 9. The Right To Bare Arms! 10. Family In Sanford 11. Faith Healers And Weight Problems 12. Romance And … |