in

This Blog

Syndication

Tags

News

AlertBoot offers a cloud-based full disk encryption and mobile device security service for companies of any size who want a scalable and easy-to-deploy solution. Centrally managed through a web based console, AlertBoot offers mobile device management, mobile antivirus, remote wipe & lock, device auditing, USB drive and hard disk encryption managed services.

Archives

AlertBoot Endpoint Security

AlertBoot offers a cloud-based full disk encryption and mobile device security service for companies of any size who want a scalable and easy-to-deploy solution. Centrally managed through a web based console, AlertBoot offers mobile device management, mobile antivirus, remote wipe & lock, device auditing, USB drive and hard disk encryption managed services.

Full Disk Encryption Can’t Help You If You Don’t Have it. Paying Attention Also Helps

A computer was stolen from the General Internal Medicine of Lancaster offices, a medical practice in East Hempfield Township, Pennsylvania.  The computer, a laptop, contained names, addresses, telephone numbers, and Social Security numbers of many—not all—patients.

 

The laptop computer was being used as something of a file database.  According to the practice manager, they were in the process of scanning paperwork, required for insurance purposes, and storing the image in the laptop.  The paperwork would eventually be burned.  Ultimately, the digital records would go on disks.

 

The laptop was stolen when an employee briefly left the scanning area.  When the employee returned, the laptop was missing.  No word on whether there was laptop encryption on the stolen computer.

 

Could full disk encryption have helped in this case?  Not in preventing theft, of course, but ensuring that the theft doesn’t result in a data breach?  Perhaps.  The story that I’ve read implies the computer was stolen while scanning was in progress.  If this is the case, the laptop was turned on.  Now, if a thief stole a laptop in that state, there is not much that full disk encryption can do for this medical practice, unless the thief turns off the laptop at some point, especially before he decides to copy data.

 

Full disk encryption is like a strong box for digital information.  The moment you open this strong box (that is, provide the passwords for decrypting the protected information), the contents remain vulnerable until you decide to close the strong box (turn off your computer).  So, assuming that the thief stole the laptop while it was turned on, he’s essentially stolen a strong box with its door unlocked.  There is no protection in that case.

 

However, this does not mean that computers that are up and running are impossible to secure.  You can also use a different type of encryption, commonly called file encryption to secure data.  This differs from hard drive encryption in that the file themselves are encrypted.  So, if we can compare full disk encryption to a strong box, file encryption would be like top secret documents written in special a special language.

 

And, you don’t have to choose one over the other.  Many encryption products offer both.  AlertBoot, for example, features both laptop encryption and file encryption.  Using both, one can dramatically minimize the risks of leaking sensitive information.  Of course, it would be best if a person who’s in the process of scanning documents don’t leave those documents unattended.

 
<Previous Next>

Was There Full Disk Encryption Or Not? IT Director’s Statement Confusing

Full Disk Encryption Has One Thing Over File Encryption: Bank of Ireland Update

Comments

mobile computing » For Laptops, Encryption Isn’t Everything - But It’s a Fine Start said:

Pingback from  mobile computing  &raquo; For Laptops, Encryption Isn&#8217;t Everything - But It&#8217;s a Fine Start

January 4, 2009 12:51 AM
 

About sang_lee

Sang Lee is a Senior Account Manager and Security Analyst with AlertBoot, Inc., the leading provider of managed endpoint security services, based in Las Vegas, NV. Mr. Lee helps with the deployment and ongoing support of the AlertBoot disk encryption managed service. Prior to working at AlertBoot, Mr. Lee served in the South Korean Navy. He holds both a B.S. and an M.S. from Tufts University in Medford, Massachusetts, U.S.A.