Government Security
Network Security Resources

Jump to content

Photo

Usb Sticks

  • Please log in to reply
3 replies to this topic

#1 Tomkins

Tomkins

    Private

  • Members
  • 4 posts

Posted 02 July 2010 - 07:32 AM

Hello,

I just read a really old post regarding usb sticks and i thought i would raise the subject again. So what are your thoughts on the subject, can anyone recommend any good products, any bad ones?

Thanks



#2 rlastinger

rlastinger

    Sergeant

  • Members
  • 220 posts

Posted 02 July 2010 - 10:22 AM

Hello,

I just read a really old post regarding usb sticks and i thought i would raise the subject again. So what are your thoughts on the subject, can anyone recommend any good products, any bad ones?

Thanks


For encrypting USB drives, I just use TrueCrypt.

#3 Marts McFly

Marts McFly

    Global Moderator

  • Colonel
  • 591 posts

Posted 04 July 2010 - 04:59 AM

Truecrypt is good. But if you are after a hardware solution I would have to recommend IronKey. They come highly regarded.

Also, an alternative which is relatively new is Kanguru USB devices. https://www.kanguru....secure-storage/ They have quite a variety of hardware encrypted devices with some impressive features. Also have a lot of secure management options. I've never used one though but they seem more reliable than a lot of the branded USB sticks (which their companies DON'T specialise in security) which are floating around out there.

At the end of the day it comes down to

1. What are you protecting?
2. How much $ is it worth to you, or how much would it cost you if that data was to become stolen/lost/seized
3. What is the likely hood that someone wants to get that information? High... low?
4. Calculate if it would be worth you buying a more secure hardware encrypted USB drive, or just a standard one and use free encryption (TrueCrypt)by weighing up the numbers in step 2. and 3.

If your data is very valuable to you and must remain secret and secure, for example - you have trade secrets from your new company which will cure baldness. Then spend money on a strong hardware encrypted device.

If you want to encrypt your school work, personal finances, and maybe a few personal photos of you - then use a free software implementation. (Which still is really good if you use it correctly, recently a Banker in Brazil who was wanted by the FBI for fraud, had some 'files' encrypted with a certain implementation of AES on truecrypt, and the FBI spent 12 months trying to crack it, and couldn't get the keys. So it does work if used correctly)
Certified Information Systems Security Professional (CISSP)

T: http://twitter.com/Marts_McFly

B: http://www.backtosecurity.com

#4 Tomkins

Tomkins

    Private

  • Members
  • 4 posts

Posted 05 July 2010 - 02:20 AM

Hello,

This is all true, but true crypt can be a nightmare for basic end users to manage the solution. Iron key are good but very expensive about $80-$120 off the top of my head. We use Safestick by Blockmaster at my place and to be honest they are amazing. X-platform, plug and play, AES 256 and i believe they go up to protected marking (UK government standard). Best of all they are about half the price of an Iron Key! The management software is very good as well; the ability to remotely destroy sticks, backup data audit data transfer remotely and best of all the double up as RSA tokens a real winner for my FD (Massive cost saving).

Oh good luck with your CISSP exams Trajik let me know how you get on.

Craig