Hello, Our Management wants to carry a daily back up of
our data base home everyday. They want to do it with
rotating (4) usb 160 gig hardrives. No sweat, But I need
to find a way to secure the drive in case it is lost or
stolen. What would be a logical way to lock the data on
the USB HD? I have tried permissions on the folders, but
this did not appear to keep ANY one from seeing tne data!
TIA HAnk B

RE: Security for a Usb Hardrive by USB

USB
Mon Feb 07 08:47:03 CST 2005

Hey Hank
You can use USB drives that comes with Biometrics , where you can add finger
prints of the the authorized personals and even if the drive got lost somehow
, nobody else will be able to access the data.

http://www.findbiometrics.com/viewnews.php?id=1535
Rehan

"Hank B" wrote:

> Hello, Our Management wants to carry a daily back up of
> our data base home everyday. They want to do it with
> rotating (4) usb 160 gig hardrives. No sweat, But I need
> to find a way to secure the drive in case it is lost or
> stolen. What would be a logical way to lock the data on
> the USB HD? I have tried permissions on the folders, but
> this did not appear to keep ANY one from seeing tne data!
> TIA HAnk B
>

Re: Security for a Usb Hardrive by Bigbruva

Bigbruva
Mon Feb 07 10:49:15 CST 2005

Hi Hank

The problem is that the security is set by a computer, so even if you set
the permissions on an NTFS file system on the drive if anyone takes that
drive and is an administrator of there own computer they will be able to
import the drive, take ownership of the files and change the permissions to
access the files. The options you could look at are:

1) Use some hardware based security such as the one Rehan has suggested.
2) Encrypt all files on the disk using EFS.
3) Use the encryption and password protection of a backup utility such as
Backup Exec to protect the backup file itself.

The important thing to remember is that physically security is EVERYTHING if
someone steals the drive and REALLY wants to get the data off it you have to
assume they will.
Even the encryption methods can be cracked over time, however this would not
be cheap or easy (for most) to do so don't get too paranoid ;-)
However ff the data you are backing up contains anything that would be
covered under any government regulations, such as personal account
information, you need to be VERY careful how you handle this.

Good luck and HTH

BB

"Hank B" <anonymous@discussions.microsoft.com> wrote in message
news:12de01c50d20$bc223480$a501280a@phx.gbl...
> Hello, Our Management wants to carry a daily back up of
> our data base home everyday. They want to do it with
> rotating (4) usb 160 gig hardrives. No sweat, But I need
> to find a way to secure the drive in case it is lost or
> stolen. What would be a logical way to lock the data on
> the USB HD? I have tried permissions on the folders, but
> this did not appear to keep ANY one from seeing tne data!
> TIA HAnk B



Re: Security for a Usb Hardrive by Torgeir

Torgeir
Mon Feb 07 12:28:17 CST 2005

Bigbruva wrote:

> Hi Hank
>
> The problem is that the security is set by a computer, so even if you set
> the permissions on an NTFS file system on the drive if anyone takes that
> drive and is an administrator of there own computer they will be able to
> import the drive, take ownership of the files and change the permissions to
> access the files. The options you could look at are:
>
> 1) Use some hardware based security such as the one Rehan has suggested.
> 2) Encrypt all files on the disk using EFS.

If the data is highly sensitive, you should encrypt the data, but I
would not have used Microsoft's builtin EFS, EFS is usually a disaster
just waiting to happen. Some calls EFS the "delayed Recycle Bin" ;-)

Some alternatives if you really want to encrypt the data:

SafeGuard PrivateDisk
http://www.utimaco.com/indexmain.html

(we are using their "SafeGuard Easy" product for local hard disk
encryption on all laptops, and we are very satisfied with the product).

The BestCrypt product found at http://www.jetico.com/ also looks
interesting.

Just be sure to export any encryption keys and safe them on a safe
place (outside your computer).


> 3) Use the encryption and password protection of a backup utility such as
> Backup Exec to protect the backup file itself.
>
> The important thing to remember is that physically security is EVERYTHING if
> someone steals the drive and REALLY wants to get the data off it you have to
> assume they will.
> Even the encryption methods can be cracked over time, however this would not
> be cheap or easy (for most) to do so don't get too paranoid ;-)
> However ff the data you are backing up contains anything that would be
> covered under any government regulations, such as personal account
> information, you need to be VERY careful how you handle this.
>
> Good luck and HTH
>
> BB
>
> "Hank B" <anonymous@discussions.microsoft.com> wrote in message
> news:12de01c50d20$bc223480$a501280a@phx.gbl...
>
>>Hello, Our Management wants to carry a daily back up of
>>our data base home everyday. They want to do it with
>>rotating (4) usb 160 gig hardrives. No sweat, But I need
>>to find a way to secure the drive in case it is lost or
>>stolen. What would be a logical way to lock the data on
>>the USB HD? I have tried permissions on the folders, but
>>this did not appear to keep ANY one from seeing tne data!
>>TIA HAnk B


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Re: Security for a Usb Hardrive by Alexander

Alexander
Mon Feb 07 13:08:33 CST 2005

I use backup utility which came with my Maxtor OneTouch 160Gb external
USB/FireWire hard drive and use encryption option for backup.

Regrads,
Alex.

"Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@hydro.com> wrote in message
news:uetFJLUDFHA.328@tk2msftngp13.phx.gbl...
> Bigbruva wrote:
>
>> Hi Hank
>>
>> The problem is that the security is set by a computer, so even if you set
>> the permissions on an NTFS file system on the drive if anyone takes that
>> drive and is an administrator of there own computer they will be able to
>> import the drive, take ownership of the files and change the permissions
>> to access the files. The options you could look at are:
>>
>> 1) Use some hardware based security such as the one Rehan has suggested.
>> 2) Encrypt all files on the disk using EFS.
>
> If the data is highly sensitive, you should encrypt the data, but I
> would not have used Microsoft's builtin EFS, EFS is usually a disaster
> just waiting to happen. Some calls EFS the "delayed Recycle Bin" ;-)
>
> Some alternatives if you really want to encrypt the data:
>
> SafeGuard PrivateDisk
> http://www.utimaco.com/indexmain.html
>
> (we are using their "SafeGuard Easy" product for local hard disk
> encryption on all laptops, and we are very satisfied with the product).
>
> The BestCrypt product found at http://www.jetico.com/ also looks
> interesting.
>
> Just be sure to export any encryption keys and safe them on a safe
> place (outside your computer).
>
>
>> 3) Use the encryption and password protection of a backup utility such as
>> Backup Exec to protect the backup file itself.
>>
>> The important thing to remember is that physically security is EVERYTHING
>> if someone steals the drive and REALLY wants to get the data off it you
>> have to assume they will.
>> Even the encryption methods can be cracked over time, however this would
>> not be cheap or easy (for most) to do so don't get too paranoid ;-)
>> However ff the data you are backing up contains anything that would be
>> covered under any government regulations, such as personal account
>> information, you need to be VERY careful how you handle this.
>>
>> Good luck and HTH
>>
>> BB
>>
>> "Hank B" <anonymous@discussions.microsoft.com> wrote in message
>> news:12de01c50d20$bc223480$a501280a@phx.gbl...
>>
>>>Hello, Our Management wants to carry a daily back up of
>>>our data base home everyday. They want to do it with
>>>rotating (4) usb 160 gig hardrives. No sweat, But I need
>>>to find a way to secure the drive in case it is lost or
>>>stolen. What would be a logical way to lock the data on
>>>the USB HD? I have tried permissions on the folders, but
>>>this did not appear to keep ANY one from seeing tne data!
>>>TIA HAnk B
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx



RE: Security for a Usb Hardrive by PhilAgcaoili

PhilAgcaoili
Sun Feb 13 02:39:01 CST 2005

What kind of database do you have?

Oracle and MySQL can natively encrypt archived databases and restore them.

If you talking about plain files, PGPDisk works well for my company. We
actually use it to secure data DVDs.


"Hank B" wrote:

> Hello, Our Management wants to carry a daily back up of
> our data base home everyday. They want to do it with
> rotating (4) usb 160 gig hardrives. No sweat, But I need
> to find a way to secure the drive in case it is lost or
> stolen. What would be a logical way to lock the data on
> the USB HD? I have tried permissions on the folders, but
> this did not appear to keep ANY one from seeing tne data!
> TIA HAnk B
>

Re: Security for a Usb Hardrive by Alexander

Alexander
Mon Feb 14 09:35:59 CST 2005

Phil,

does PGP Disk allows to mount read-only drives?

Alex.

"Phil Agcaoili" <PhilAgcaoili@discussions.microsoft.com> wrote in message
news:E7BA58E0-3A56-4FC4-9DBE-C108352553E8@microsoft.com...
> What kind of database do you have?
>
> Oracle and MySQL can natively encrypt archived databases and restore them.
>
> If you talking about plain files, PGPDisk works well for my company. We
> actually use it to secure data DVDs.
>
>
> "Hank B" wrote:
>
>> Hello, Our Management wants to carry a daily back up of
>> our data base home everyday. They want to do it with
>> rotating (4) usb 160 gig hardrives. No sweat, But I need
>> to find a way to secure the drive in case it is lost or
>> stolen. What would be a logical way to lock the data on
>> the USB HD? I have tried permissions on the folders, but
>> this did not appear to keep ANY one from seeing tne data!
>> TIA HAnk B
>>



Re: Security for a Usb Hardrive by PhilAgcaoili

PhilAgcaoili
Mon Feb 14 10:13:02 CST 2005

Yes it does.

I use it to secure DVD-R's.

"Alexander Muratov" wrote:

> Phil,
>
> does PGP Disk allows to mount read-only drives?
>
> Alex.
>
> "Phil Agcaoili" <PhilAgcaoili@discussions.microsoft.com> wrote in message
> news:E7BA58E0-3A56-4FC4-9DBE-C108352553E8@microsoft.com...
> > What kind of database do you have?
> >
> > Oracle and MySQL can natively encrypt archived databases and restore them.
> >
> > If you talking about plain files, PGPDisk works well for my company. We
> > actually use it to secure data DVDs.
> >
> >
> > "Hank B" wrote:
> >
> >> Hello, Our Management wants to carry a daily back up of
> >> our data base home everyday. They want to do it with
> >> rotating (4) usb 160 gig hardrives. No sweat, But I need
> >> to find a way to secure the drive in case it is lost or
> >> stolen. What would be a logical way to lock the data on
> >> the USB HD? I have tried permissions on the folders, but
> >> this did not appear to keep ANY one from seeing tne data!
> >> TIA HAnk B
> >>
>
>
>

Re: Security for a Usb Hardrive by Alexander

Alexander
Mon Feb 14 10:25:03 CST 2005

great. thank you for tip. Some time ago thought about securing of some data
DVD, but have a doubts about supporting of such option in PGP.

Regards,
Alex.

"Phil Agcaoili" <PhilAgcaoili@discussions.microsoft.com> wrote in message
news:CF1D5814-4105-47C0-BF2B-1F15AC082C35@microsoft.com...
> Yes it does.
>
> I use it to secure DVD-R's.
>
> "Alexander Muratov" wrote:
>
>> Phil,
>>
>> does PGP Disk allows to mount read-only drives?
>>
>> Alex.
>>
>> "Phil Agcaoili" <PhilAgcaoili@discussions.microsoft.com> wrote in message
>> news:E7BA58E0-3A56-4FC4-9DBE-C108352553E8@microsoft.com...
>> > What kind of database do you have?
>> >
>> > Oracle and MySQL can natively encrypt archived databases and restore
>> > them.
>> >
>> > If you talking about plain files, PGPDisk works well for my company. We
>> > actually use it to secure data DVDs.
>> >
>> >
>> > "Hank B" wrote:
>> >
>> >> Hello, Our Management wants to carry a daily back up of
>> >> our data base home everyday. They want to do it with
>> >> rotating (4) usb 160 gig hardrives. No sweat, But I need
>> >> to find a way to secure the drive in case it is lost or
>> >> stolen. What would be a logical way to lock the data on
>> >> the USB HD? I have tried permissions on the folders, but
>> >> this did not appear to keep ANY one from seeing tne data!
>> >> TIA HAnk B
>> >>
>>
>>
>>



Re: Security for a Usb Hardrive by PhilAgcaoili

PhilAgcaoili
Mon Feb 14 11:17:02 CST 2005

I only did it as a SARBOX 404 mandate for financials.

We scripted the process, so it's not a pain. Just getting the scripts to
work was. 8)

"Alexander Muratov" wrote:

> great. thank you for tip. Some time ago thought about securing of some data
> DVD, but have a doubts about supporting of such option in PGP.
>
> Regards,
> Alex.
>
> "Phil Agcaoili" <PhilAgcaoili@discussions.microsoft.com> wrote in message
> news:CF1D5814-4105-47C0-BF2B-1F15AC082C35@microsoft.com...
> > Yes it does.
> >
> > I use it to secure DVD-R's.
> >
> > "Alexander Muratov" wrote:
> >
> >> Phil,
> >>
> >> does PGP Disk allows to mount read-only drives?
> >>
> >> Alex.
> >>
> >> "Phil Agcaoili" <PhilAgcaoili@discussions.microsoft.com> wrote in message
> >> news:E7BA58E0-3A56-4FC4-9DBE-C108352553E8@microsoft.com...
> >> > What kind of database do you have?
> >> >
> >> > Oracle and MySQL can natively encrypt archived databases and restore
> >> > them.
> >> >
> >> > If you talking about plain files, PGPDisk works well for my company. We
> >> > actually use it to secure data DVDs.
> >> >
> >> >
> >> > "Hank B" wrote:
> >> >
> >> >> Hello, Our Management wants to carry a daily back up of
> >> >> our data base home everyday. They want to do it with
> >> >> rotating (4) usb 160 gig hardrives. No sweat, But I need
> >> >> to find a way to secure the drive in case it is lost or
> >> >> stolen. What would be a logical way to lock the data on
> >> >> the USB HD? I have tried permissions on the folders, but
> >> >> this did not appear to keep ANY one from seeing tne data!
> >> >> TIA HAnk B
> >> >>
> >>
> >>
> >>
>
>
>