-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Tip ST04-020
Protecting Portable Devices: Data Security
In addition to taking precautions to protect your portable devices, it
is important to add another layer of security by protecting the data
itself.
Why do you need another layer of protection?
Although there are ways to physically protect your laptop, PDA, or
other portable device (see Protecting Portable Devices: Physical
Security for more information), there is no guarantee that it won't be
stolen. After all, as the name suggests, portable devices are designed
to be easily transported. The theft itself is, at the very least,
frustrating, inconvenient, and unnerving, but the exposure of
information on the device could have serious consequences. Also,
remember that any devices that are connected to the internet,
especially if it is a wireless connection, are also susceptible to
network attacks (see Securing Wireless Networks for more information).
What can you do?
* Use passwords correctly - In the process of getting to the
information on your portable device, you probably encounter
multiple prompts for passwords. Take advantage of this security.
Don't choose options that allow your computer to remember
passwords, don't choose passwords that thieves could easily guess,
use different passwords for different programs, and take advantage
of additional authentication methods (see Choosing and Protecting
Passwords and Supplementing Passwords for more information).
* Consider storing important data separately - There are many forms
of storage media, including floppy disks, zip disks, CDs, DVDs,
and removable flash drives (also known as USB drives or thumb
drives). By saving your data on removable media and keeping it in
a different location (e.g., in your suitcase instead of your
laptop bag), you can protect your data even if your laptop is
stolen. You should make sure to secure the location where you keep
your data to prevent easy access.
* Encrypt files - By encrypting files, you ensure that unauthorized
people can't view data even if they can physically access it. You
may also want to consider options for full disk encryption, which
prevents a thief from even starting your laptop without a
passphrase. When you use encryption, it is important to remember
your passwords and passphrases; if you forget or lose them, you
may lose your data.
* Install and maintain anti-virus software - Protect laptops and
PDAs from viruses the same way you protect your desktop computer.
Make sure to keep your virus definitions up to date (see
Understanding Anti-Virus Software for more information).
* Install and maintain a firewall - While always important for
restricting traffic coming into and leaving your computer,
firewalls are especially important if you are traveling and
utilizing different networks. Firewalls can help prevent outsiders
from gaining unwanted access (see Understanding Firewalls for more
information).
* Back up your data - Make sure to back up any data you have on your
computer onto a CD-ROM, DVD-ROM, or network (see Good Security
Habits and Real-World Warnings Keep You Safe Online for more
information). Not only will this ensure that you will still have
access to the information if your device is stolen, but it could
help you identify exactly which information a thief may be able to
access. You may be able to take measures to reduce the amount of
damage that exposure could cause.
_________________________________________________________________
Authors: Mindi McDowell, Matt Lytle
_________________________________________________________________
Produced 2007 by US-CERT, a government organization.
Note: This tip was previously published and is being re-distributed
to increase awareness.
Terms of use
<http://www.us-cert.gov/legal.html>
This document can also be found at
<http://www.us-cert.gov/cas/tips/ST04-020.html>
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRwz+ufRFkHkM87XOAQLyswf8C03wGpqOGz/4iVvoHB208Oibfg3Tv9z3
VclMjDSAz1QWV9FpY5KjOuVEiOrT5siwHw/xItz90U7w7C8X4eGzXrreXkioO2FB
bSn1oRz7UQnXEA1dt64h6sbVzDx0jSi2ekHTKHd3AKwp6FFKJbXrOIkZLXzYJavz
iktTp9YvYEnhh+CnDqp2SvYaXfBOUdeeTVtf9K1zKakm2cvXCdGOyH79p+zYZ0r2
7CZQWxV5lkxAvrMKd10tzsIJtlBk0E3d2+BvdwnKlKvmuWc2CqbC1U5cokoIneIw
51autmaDecQy3Tte2Ek3K46QyibtafHGKzLAZ4IZzved97vc40I/sg==
=sJ3Y
-----END PGP SIGNATURE-----
