Download - Help Net Security

More documents

Recommendations

Info

The fine folks at Origin Storage shipped us a review copy of their Data Locker security hard drive solution. This was one of the most talked about devices shown in this field at this year's Infosecurity Europe event held in London, so we decided to test it and feature it in this post-summer, "back to work" issue of (IN)SECURE Magazine. Data Locker is a hard drive solution with a unique security twist - it features an LCD display used for PIN based authentication and, besides the hard drive, the enclosure contains a hardware based encryption chip. This device is available in a couple of sizes and sports different types of encryption. The Pro version works with 128 bit AES encryption, while the Enterprise one uses the tougher-to-break 256 bit AES cipher. Depending on your storage needs, each of the flavors is available in 160GB, 320GB and 500GB versions. For the purpose of this article, I have been playing with the 160 GB Enterprise version. Look and feel I was pleasantly surpised when I saw that the Data Locker box doesn't contain a big, puffed up enclosure- its size is approximately 0.5 inches wider, longer and thicker than my iPhone. It's weight is about the double of an iPhone. As you can see from the accompanying product photos we shot, besides the rather impressive size and weight characteristics, the device is an aesthetically pleasing addition for your work environment. It comes with a USB cable (mini to standard), with an additional Y cable that could be of use for some computers and USB hubs for extra energy. From my tests on different Mac and PC computers, one USB connection was just enough. For those that don't have luck with one or even two USB cables, there is a DC input slot that supports power adaptors. The last feature on the back side is something that is often disregarded with this type of smaller hard drives – the on/off switch. Including this switch is a good move - I dislike pulling USB www.insecuremag.com 16
cables out of the computer or devices just to shut them down and plugging them back in to switch them on. Now we are coming to the most interesting part - the LCD touch screen display. When the disc is powered on, the display starts-up and provides a simple menu. The touch screen works well and the keys are quite large so there shouldn't be any usage problems. Just a little heads-up to users of iPhone and similar devices - you will need to press this LCD display a little bit harder than you are used to. Setting up Data Locker Data Locker's main task is providing a secure storage space for your personal files. It demands a secret PIN code and until you successfully authenticate, the disk can't mount and therefore doesn't "exist". The device comes preloaded with a default password of 000000. Accessing the menu is easy - just authenticate by punching in the default PIN and quickly tap the setup button. After you do that, you will get access to a couple of options: Change PIN: When you!re thinking of PINs, you are probably thinking of a sequence of 4 numeric characters. In Data Locker's case, the PIN must be at least 6 characters long and can take up to 18 numbers. Change encrypt key: The drive contains data encrypted with your PIN code and the current encryption key. Changing the encryption key should be done when changing the owner of the disk, if you think formatting and changing the PIN is not enough. Modifying the encryption key instantly renders the current data on drive absolutely unusable. www.insecuremag.com 17
Page 5 and 6: VPN management for Linux networks N
Page 7 and 8: Splunk 4 supercharges IT search Spl
Page 9 and 10: Mobile Guardian Enterprise Edition
Page 12 and 13: Integrating the results from a vuln
Page 14 and 15: continuous scans are expensive, the
Page 18 and 19: Further customization There is an a
Page 21 and 22: When you think about celebrities, y
Page 23 and 24: The ultimate guide to Nmap Besides
Page 25 and 26: information wherever it is or where
Page 27 and 28: to externally hosted services that
Page 29 and 30: Practical Intrusion Analysis By Rya
Page 31 and 32: Information Security Management Met
Page 34 and 35: On a daily basis, online spammers a
Page 36 and 37: arranged in the same manner that ot
Page 38 and 39: Have you ever left the light, radio
Page 40: With some imagination, they create
Page 43 and 44: The work “Above the Clouds,” pu
Page 45 and 46: Second, using cloud services betwee
Page 47 and 48: "My IT department came to me with a
Page 49: As expected, cybercrime is soaring
Page 52 and 53: Authors: Felicia Donovan, Kristyn B
Page 55 and 56: In light of recent wireless breache
Page 57 and 58: Myth #4 - We have upgraded all of o
Page 59 and 60: Recent studies show that securing t
Page 61: Another best practice to protect an
Page 64 and 65: malicious users. Other attacks exis
Page 66 and 67:
Web Application Frameworks An ideal
Page 68:
IT Showcase Asia 2009 6 October-7 O
Page 71 and 72:
model (80 percent) for the creation
Page 73 and 74:
The case for authentication The rea
Page 75 and 76:
In a least privilege computing envi
Page 77 and 78:
seriousness of the security threat
Page 80 and 81:
Today!s IT security professionals e
Page 82 and 83:
sensitive customer data, such as e-
Page 84 and 85:
Whether driven by data security man
Page 86 and 87:
Intelligent routing also includes a
Page 89 and 90:
PE Explorer (www.net-security.org/s
Page 91 and 92:
Policy Policy is an overused word,
Page 93 and 94:
with insiders. With malware, at lea
Page 96 and 97:
This article discusses the impact o
Page 98 and 99:
According to the Californian law, p
Page 100 and 101:
lost or stolen, but also for import
Page 103 and 104:
It!s a common scenario right now, p
Page 105:
3. How quickly can you and your IT
Page 108 and 109:
Manage network security Attacks on
Page 110 and 111:
Endpoint or host security is critic
show all

Download - Help Net Security

Create successful ePaper yourself

Delete template?

Save as template?