March 16, 2007

In search of a laptop that plays it safe

New tamper-resistant laptop blends data security features from ASI, Seagate, and Wave Systems

I travel rather often, but I am not a BlackBerry person. When on the road, I need the same tools and computing power that I use at the office, and only a laptop can provide that. Those handhelds just won't cut it for me.

[ MarioApicella's column is now a blog! Get the latest storage news from the Storage Adviser blog. ]

Do I have encryption on my laptop? I do not, but I should -- and you should too. Call me paranoid, but in my view, no laptop should travel unless there is some reliable data encryption mechanism in place.

Why is it then that my laptop and many others, of which we read in the news when they are lost or stolen, still carry data in clear? I can't answer for other people, but for me, it's because until now I haven't found an encryption system that works to my satisfaction.

My idea of a safe laptop is one that easily enforces full disk encryption and offers a safe two-stage authentication system with a key-ring gizmo to insert, plus a code to type. Or perhaps a fingerprint reader, which is a head-turner and doesn't add anything to my key ring.

My ideal encryption system would also allow centralized management of encryption keys, a must-have for corporate deployment.

Am I asking for the moon? Not quite. According to what I learned last week during a briefing with ASI Computer Technology, Seagate, and Wave Systems, the ASI C8015 laptop should make my encryption dream come true and will become available as soon as April. I didn't get any firm pricing information during that briefing (too many variables), but from what I'm told, a secure laptop such as this one should not cost an arm and a leg. Good to know.

The C8015 will mount the Momentus 5400 FDE.2, a Full Disk Encryption hard drive that Seagate has been trumpeting since 2005. As a quick recap, the Momentus FDE mounts a chip that does automatic AES (Advanced Encryption Standard) encryption of its data content, and its firmware stops the laptop at boot time until the user provides proper authentication credentials. Distinct access levels allow different capabilities; typically, users are able to unlock the drive only, while administrators can reassign the drive to a different person or add more users. The Momentus FDE will be available in 80GB, 120GB, and 160GB capacities, all with a SATA interface.

Obviously, encryption makes the disk content reasonably safe from disclosure, but another perhaps less-intuitive benefit is that erasing all the data content becomes as easy and quick as destroying the encryption key. It's a snap compared to alternatives, such as the long and tedious overwriting of each track on the drive, often repeated several times to be on the safe side.

The third ingredient is Wave Systems' Embassy Trust Suite, a package of applications that brings the security hardware mounted on the laptop under a common management umbrella. Embassy Trust Suite has more features than I have space to list, including the ability to manage multiple users and the use of administrative passwords to access the drive.

Close

On Twitter now

Security

Powered by Twitter

On Twitter now

White Paper

D2D Virtual Tape Library Replication Primer

This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.

Download now »

White Paper

An Alternative to Virtualization for Datacenter Cost Savings

Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.

Download now »

White Paper

Why Your Firewall, VPN, and IEEE 802.11i Aren't Enough to Protect Your Network

The emergence of WLANs has created a new breed of security threats to enterprise networks.

Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation

Download now »

White Paper

Bringing the Edge to the Data Center

Effectively address data protection challenges, implementing solutions that help store and protect business–critical data while cutting costs and improving efficiency and reliability.

Download now »

Sign up to receive Security Resource Alerts

Subscribe to the Security Central Newsletter

Stay informed of the latest security threats and fixes.

White paper

Log Management: How to Develop the Right Strategy for Business and Compliance

This white paper provides guidance on how to develop a strategic approach to managing and monitoring logs, a key function required for compliance with many regulatory mandates and a critical defense against security threats.

Download now! »

White paper

The Essential Series: Security Information Management

Learn about the processes and technologies that support security information management (SIM) operations, as well as the business case for SIM. The series examines different options for implementing SIM and gives you evaluation criteria for selecting the best option for your organization.

Download now! »

White paper

Aberdeen: Choosing and Consuming Managed Security Services

Learn the strategies, actions, and capabilities that Best-in-Class organizations employ and technologies they choose to obtain superior performance against various security performance metrics. This report provides guidelines for identifying which security solutions to consume as a MSS and defines best practices for choosing and managing MSSPs.

Download now! »
©1994-2009 Infoworld, Inc.