U.S. gov't mandates laptop security - The Community's Center for Security


The central voice for Linux and Open Source security news

Welcome!

Sign up!

EnGarde Community

Polls

What is the most important Linux security technology?

	SELinux
	grsecurity
	CIS Benchmark
	Bastille Linux
	iptables
	LIDS

Advisories

Community

Linux Events

Linux User Groups

Link to Us

Security Center

Book Reviews

Security Dictionary

Security Tips

SELinux

White Papers

Featured Blogs

All About Linux

DanWalsh LiveJournal

Securitydistro

Latest Newsletters

Linux Security Week: February 6th, 2012

Linux Advisory Watch: February 3rd, 2012

LinuxSecurity Newsletters

RSS Feeds

Get the LinuxSecurity news you want faster with RSS

U.S. gov't mandates laptop security

User Rating:

How can I rate this item?

Source: Security Focus - Posted by Efren J. Belizario

The Bush Administration is giving federal civilian agencies just 45 days to comply with new recommendations for laptop encryption and two-factor authentication.

The memo follows a wave of high profile data thefts and major security breeches involving remote access or the theft of government laptop computers containing sensitive personal information.

Read this full article at Security Focus

Comments

Full Disc Encryption required

Written by Saqib Ali on 2006-07-09 21:16:59

These might help:
http://www.full-disc-encryption.com/Full_Disc_Encryption.html

There are some agencies in DC looking into full disc encryption. The following are some reasons why full disc encryption is preferable.

1) Encryption of temporary / swap is important as confidential data
maybe revealed from these files in case of HDD theft.

2) Quick Erase functionality as advertised by Seagate's FDE.2 drive
provide immediate data destruction by replacing the AES key on the
ASIC. This can save thousands of dollar the agency spends in proper
destruction of the HDD. Once the encryption key is removed the HDD can be repurposed.
See
http://www.seagate.com/docs/pdf/marketing/po_momentus_5400_fde_bb.pdf

3) user-proof. everything is encrypted if FDE is enabled. This the key. The employee who has sensitive data on his/her laptop should not have to decide which file/folders to encrypts. That decision must be made for them, which is to encrypt everything. No exceptions!!!

4) pre-boot authentication using bio-metric or secure tokens or smart-cards.

5) Hardware based Full Disc Encryption is fast, and creates minimum overhead, so the employee has NO excuse to NOT encrypt data..

Only registered users can write comments.
Please login or register.