June 20, 2007 4:00 AM PDT
Perspective: Locking down laptops before it's too late
See all Perspectives
- Related Stories
-
Laptop theft exposes teachers to ID fraud risk
April 9, 2007 -
McAfee makes debut in safeguarding business data
February 5, 2007 -
Hard drive vanishes from VA facility
February 5, 2007 -
Stolen Boeing laptop held ID data on 382,000
December 14, 2006
Within the past year, the Veterans Administration lost a laptop holding information on 26.5 million individuals, the Internal Revenue Service lost or misplaced 500 laptops, and Boeing reported the theft of a laptop with files that contained Social Security numbers for more than 300,000 of its past and present employees.
Unfortunately these incidents are far from unusual.
During 2005, 20 percent of all banks, 18 percent of credit card companies, 13 percent of government organizations and 9 percent of health care companies reported data breaches--and that number is growing.
The real and associated costs of data breaches are staggering: In 2006, corporations that experienced a data breach spent an average of $5 million trying to recover data. Customer relationships suffer, too; among consumers that discovered their data had been lost, 20 percent terminated their relationships with the company, another 40 percent considered terminating their relationships, and 5 percent considered legal action.
Clearly, something must be done before one of these breaches bankrupts a company or threatens national security.
The government has begun to address the issue with recently enacted legislation. Federal laws such as the Gramm-Leach-Bliley Act and the Health Insurance Portability and Accountability Act (HIPAA) make the security of critical digital content--including the secure disposal of electronic files to end the data lifecycle--a fundamental requirement. On a state by state basis, 29 states thus far have enacted data protection legislation and 28 of these laws have provisions calling for the encryption of digital content.
The flaw with current legislation is that it does not specify how to encrypt data--and that's critical. If agencies and companies encrypt their data using software, it's like locking individual car engine components?-time-consuming, expensive and fraught with failure points. By contrast, hard drive full disc encryption is similar to a car key: it protects everything from the engine to the dashboard with a single mechanism and point of entry.
Hard drive full disc encryption is straightforward; it automatically protects every bit of computer data without any human intervention. It makes any data stored on a stolen or lost notebook unreadable and unusable forever. It can also automatically "repurpose" existing laptops or deny access to data when computers reach the end of their useful life. No need to smash a drive with a hammer or use special software to wipe it clean. By simply changing the encryption key on the disc, all stored data is instantaneously rendered unreadable and unusable forever--saving both time and money.
The advantages of hard drive full disc encryption are clear; the dangers of stolen and misplaced laptops are overwhelming. To thoroughly protect sensitive information, government and business organizations must mandate hard drive full disc encryption--especially for mobile workers--to help keep data from falling into the wrong hands. The time to lock laptops down is now.
Biography
Bill Watkins is chief executive of Seagate.
See more CNET content tagged:
HIPAA, digital content, legislation, laptop computer, health
Encryption is not erasing, it's just making it so no one else can easily read the information. Nor can you, if you forget the key.
For erasing, even a hammer /might/ not work, if you don't do a real good job. You have to figure what threat level you want to deal with, for either.
Encryption is great but it provides a false sense of security. What happens when the laptop is stolen while it is running. It is akin to someone leaving the keys in the car.
The best way to keep this data secure is to ensure there are no copies made out side the secured data center.
For someone traveling in sales, not having (needed) data on a laptop would be like trying to empty the ocean with a coffee cup.
I had - and struggled - with full hard disk encryption (PointSec). Why on earth would you need to encrypt the OS? No, encrypt the data stored, with as a secury method as possible.
Why? I had my laptop "crash" more than once. In most cases it was the MBR that got corrupted. On a "non-encrypted" disk this would have been a matter of minutes to fix. In my case, local IT staff (HP Services) were not trusted with tools to work around encryption. Laptop shipped to US HQ where not even there technicians were trusted with keys to bypass encryption. Keys needed to be obtained from overseas, and then it still took them time.
All in all, I was w/o laptop for about 4 days. 4 critical days in a customer relation.
A laptop in the wrong hands is just like a company car in the wrong hands. It can be a very devastating tool, even lethal. In the right hands (a trusted employee), it is a great productivity tool.
Never again FULL hard disk encryption! Encrypt the data and be done with it!
I've been using it for a while on my laptop to secure my source code and email. Very easy to use, no noticable speed issues.
Will it keep my data safe from the Russian intelligence service? Who knows. But it will keep it safe from just about anyone else - particularly your average street urchin who steals laptops.
Used PGP in the past but was not to happy. It needs to be "invisible" and if TrueCrypt works as you say, it might fit the bill.
Open source as well, even better!
What he would like to do is to tell everyone that by adding some additional hardware to the drive, his company can secure hard drives from divulging their secrets.
Ok. Fair enough. Add to the price of the hard drive, increase the latency and read/write times all in the name of "security".
Only problem, no one knows which or how much security is needed.
And does this really lock down the data? What happens if the user of the computer doesn't have a password?
In truth, there is no simple single silver bullet when it comes to data retention and security issues.
- disk drive encryption speed
- by hddguru June 26, 2007 7:24 PM PDT
- Having the encryption technology in the disk drive is much faster than software solutions and is not prone to eavesdropping and keylogging attacks. Passwords are entered during computer BIOS start.
- Like this Reply to this comment
-
(22 Comments)In the HDD solutions I've read about, the 3DES/AES encryption is done in hardware at full disk data rate and adds no measurable access time or latency penalties to performance, so it is transparent to the user.