Search

The article examines the effectiveness of the Blowfish and the Pretty Good Privacy (PGP)/GnuPG software in providing security during information transfers. Local area networks are inherently insecure in most corporate, academic, even broadband cable environments, especially with regards to e-mail. Today, there are all sorts of tools to protect information transfers: secure sockets layer (SSL) for Web, secure shells (SSH) for telnet, virtual private networks (VPN) for remote access, and smart cards that provide one-time password for network access. The Blowfish and PGP ciphers can encrypt e-mail or files, but only PGP has the ability to digitally sign information without revealing the pass-phrase. Neither is a solution for everyday messages, but both can competently secure vital and confidential communications. Blowfish is a popular and secure symmetric key cipher. However, it is much more advanced and secure than standard password protection. Technically speaking, Blowfish is a 64-bit block cipher; data encrypts and decrypts in 64-bit chunks. The encryption algorithm is then executed for at least 16 rounds or iterations. Pretty Good Privacy (PGP) is the most popular public key-based encryption scheme, first created by Phil Zimmermann in 1991 as freeware software. PGP and OpenPGP are more useful when a group of users need to communicate, but the learning curve is higher. Both ciphers can encrypt local files for temporary or archival purposes.

The article focuses on the relevance of digital evidence. Those concerned with privacy issues and identity theft are familiar with the concept of dumpster diving. Trash often reveals the dealings of an individual or a corporation. The risks of revealing private information through the trash has led to a boom in the sale of paper shredders. To ensure reliable data storage, the tracks on hard-drive platters are wider than the influence of the heads, with a gap between tracks. Thus, even after wiper software has been applied, there may still be ghosts of the original data, just partially obscured. Thus a tradeoff between the cost to the user and the cost to the investigator is observed. Forensics investigators take care to examine disks in a manner that does not tamper with the evidence. Another approach is to consider file recovery as a fait accompli and ensure the recovered data is not available as evidence. Encryption clearly has a role to play here. An encrypting file system built into the operating system can be helpful, but may provide only a false sense of security-unless one has adequate assurance of its cryptanalytic strength.

This article presents an introduction to various issues related to techniques for safeguarding private data from unauthorized parties, and legal protection of computer programs. Key escrow encryption techniques, used to safeguard private data from unauthorized parties, have been scrutinized under a very public microscope ever since the U.S. government announced its interest in defining how such a system should operate. While industry and government argue the perceived merits and threats of encryption strategies, businesses worldwide continue to evaluate available key escrow systems as a formative means for protecting their information and other valuable assets. Also in this issue, is a report that reconsiders the legal protection of computer programs. Randall Davis, Mitch Kapor, Pamela Samuelson, and Jerry Reichman examine some of the topical notions about the nature of software, the legal protection required, and the methods for providing that protection. Finally, "Viewpoint" featured Gordon Bell's observations on the "small, vanishing" U.S. supercomputing market. Bell, the noted architect of DEC computers and VAX machines, traces the road to the elusive teraflop-speed supercomputer.

This article reports on the adoption of enterprise rights management software by optical-fiber and cabling product manufacturer, Corning Inc. The company's research and development staff uses the software to encrypt critical documents and apply rules that determine not just who has access to the files but also whether they can print, copy or forward them to others. The system also establishes a chain of custody, providing an audit trail of the people who have accessed a certain document. INSETS: ERM Tip Sheet;DRM's Language-Rights Wars.

This article defines the inherent application security risks and demonstrates some methods to implement MS Office security addressing the lapses within the MS Office document structures. The focus is on document security and controlled presentation. Encryption is a partial though effective solution, but only as a point solution even when extended by public key encryption. Encryption of MS Office documents merely hides risks until decryption and encryption also breaks most dispersed workflows that are the stated business goals of Microsoft's platform for delivery of services within a collaborative environment. This article also describes some of the techniques being implemented for MS Office document security at the file level. Although the focus is on document security and controlled presentation, this is not the whole security issue for MS Office, but it is a substantial first step toward what is perhaps the most difficult issue in COTS security control.

The article presents information on several companies offering computer security products. Akamai Technologies Inc., which operates a private data network, has security services that are built on top of the software and hardware it uses for its own network. Amazon.Com Inc., which sells cloud-based storage and processing equipment, protects customers' data by maintaining backups and physically preventing unauthorized access to data centers. EMC Corp. owns critical encryption technology RSA algorithm, which is used worldwide to encrypt sensitive information sent over the Internet.

The article evaluates several hardware and software products with simple portable-drive encryption, including Cryptainer PE, Migo Portable Vault and Apricorn Aegis Vault.

This article explores the process of making safe data transmission faster. Many software companies use encryption to protect their programs from tampering or copying, but even those protections can be circumvented by a hacker who is skilled and motivated enough. In a conventional computer, protected software is decoded and stored in memory until the processor calls for it; hackers can tap into decoded instructions as they move from memory to the processor by listening to the channel between the two. Safeguards exist--namely, the XOM (execution-only memory) processor, which keeps information encrypted until it gets the processor--but systems that use them are slow. The bottleneck in most XOM systems is the decryption procedure: encrypted instructions are first fetched from the memory, then decoded, then executed. Jun Yang, an assistant professor of computer science at the University of California, Riverside, and colleagues and the University of Texas at Dallas use a security scheme called a one-time pad that can start decryption without the data. The procedure fetches data and start the decryption in parallel, so that the processor can act on instructions almost as they arrive. In a simulation, the extra time needed for decryption dropped from 20.8 percent of the computation time in XOM processors to a mere 1.3 percent.

Provides information on the anti-virus and computer protection software used by lawyers in the U.S. Programs that can be downloaded free of charge; Use of encryption in e-mail; Benefit of WiFi technology to lawyers.

The article focuses on the use of encryption techniques such as steganography and cryptography. It comments on historical uses of steganography using a tattooed message on a person's scalp, and more modern applications such as watermarks, microdots, and invisible inks. It mentions Fabien A. Petitcolas book "Information Hiding, Techniques for Steganography and Digital Watermarking." It talks about the use of steganography in digital photographs.

The article reports on the acquisition of Utimaco Safeware AG by Sophos PLC in Great Britain. Sophos states that the deal aims to enhance the company's provision of encryption and data loss prevention (DLP) software to its customers which will play essential role in improving its competitiveness against its rivals Symantec Corp. and McAfee Inc. It reveals that the acquisition was carried out following the move of both companies to acquire software security companies that will help boost its presence in the computer security software industry. It states that under the deal, Sophos will be given the opportunity to market Utimaco's Safeguard Enterprise technologies.

The article presents the author's view about the encryption of data while stored on the device to reduce the threat of data loss. According to him, before implementing a security solution to lock removable storage devices, information technology (IT) managers should look on various considerations on how encryption fits into their plans. It is necessary for IT implementers to decide whether to implement encryption in software or hardware. The author said that many USB security solutions will integrate software encryption capabilities to their products and allow customers to fully encrypt off-the shelf USB drives for secured data transports. Information about the endpoint security solutions from SecureWave and Secuware companies is provided.

The article provides information on protecting files on hard drives. The tasks of installing and running encryption software have not always been easy. Files are encrypted only while on the hard drive. The PGP Whole Disk Encryption 9.5 and SecurStar Drive-Crypt Plus Pack can encrypt single files, batches of documents, or the entire hard drive and everything on it. Full disk encryption tools used to have one major drawback, they slowed personal computers considerably. But as processor power has gone up, software makers have optimized their products so effectively.

The article looks at the capabilities of two software that can prevent podslurping: SmartLine's DeviceLock 6 provides additional control over what portable devices can do, and Safend's USB Port Protector can encrypt files copied to a portable drive.

The article reports on the move of computer security companies to add extra services like data-loss insurance and counseling aside from selling software to protect valuable data. T3 US, maker of the T3 Full Security Suite, offers its T3 Travel Smart data encryption package. T3 also insures the system against theft. The new version 6.5 of Zone Labs' ZoneAlarm Pro firewall, on the other hand, will include credit card monitoring, fee-based credit protection services and counseling services for identity theft victims.

Presents an opinion on the security provided by cryptography algorithms. Incorporation of encryption facility to maintain security or privacy or as part of a digital rights management scheme by a huge number of IT elements; Comment on the end-user password assignment system provided by software; Reasons for the use of cryptography.

Offers advice on managing sensitive information communicated through electronic mail (e-mail). Advantage of using e-mail encryption programs; Ways to retrieve deleted e-mails; Importance of e-mail retention to lawsuits; Products and services developed by software makers to help companies comply with e-mail retention policies.

Reports that Senforce Technologies Inc. has introduced Endpoint Security Suite 3.0, a multi-module client security suite capable of providing Wi-Fi connectivity checks and anti-theft logging tools to mobile clients. Claim that it concludes modules for firewalls, connectivity security, endpoint integrity and theft protection; Capability of the theft-protection software to provide a 256-bit Advanced Encryption Standard level of file and data protection.

Announces the launch of the personal computer (PC) security software product Essential Security Suite from Dallas, Texas-based company Essential Security Software in June 2004. Features of the encryption software for use on individual PC; Benefits of the security software for individual and small-business PC users; Information contained in the Web site of the company.

Winzip's latest version of its namesake compression utility improves on its predecessors by providing enhanced encryption support and an end to restrictions on Zip file sizes and contents. Released in February, WinZip 9.0 costs $29 for new users and is free for current license holders. This popular Windows compression utility now offers 128-and 256-bit AES encryption in addition to the standard Zip encryption. In tests using the new encryption schemes, the author found no discernible lag in compression time and only a slight increase in decompression time and file size. Winzip 9.0 includes a Command Line Support add-on that enabled the author to use Winzip directly from the command prompt and from batch files and script languages. The new version supports the 64-bit extended format, which eliminates the caps on Zip file size.

Presents two encryption software from PGP Corp. PGP Universal Server; PGP Universal Satellite.

Notes the plans of Intel to incorporate a random number generator (RNG) for encryption keys. Drawbacks of the use of the time of day as a seed for an RNG; Intel plans to use a seed from thermal noise in its chip sets for an RNG for increased data privacy and security; Time frame.

This article reports on the announcement of Protegrity Corp. that Secure.Data, the software solution of the company for centralized management and auditing of data security policies and data encryption, now supports Oracle 9i and 10g running on Red Hat Enterprise Linux AS 3.0 and 4.0. With this latest version of Secure.Data, Protegrity now offers the market's only end-to-end security solution for Red Hat Enterprise Linux. Protegrity's Defiance TMS, a web application security solution for managing threats and vulnerabilities, also supports Red Hat Enterprise Linux.

The article discusses ways on how U.S. firms are taking steps to prevent encryption dangers. AdaptaSoft Inc. uses the self-encrypting software from Seagate to boost customer protection. On the other hand, CBI Health, a company based in Toronto uses Seagate Momentus drives in their laptops to protect sensitive data of their patients. According to analyst Dave Hill from Mesabi Group, disk encryption ensures that stolen data cannot be accessed and that companies comply with data-breach notification laws.

The article reports that iCarePro is offering web-based software to enable customers to access all their data securely at any time, from any computer or mobile device with internet access. According to the company, iCareWeb allows practitioners to manage all aspects of their practice from any location such as viewing appointments. It requires no installation or system updates and uses 128-bit SSL data encryption which the company said was the same standard of security as used by internet banks.

The article reports on the encryption of public data in Ohio. The state had introduced the system following the robbed of the uncrypted backup tape which contained the personal data of 64, 467 state employees, 19, 388 former employees and 47, 245 Ohio taxpayers in June 2007. The Ohio Department of Administrative said that the encryption software will begin its distribution to school, colleges and government offices early of 2008. It is mentioned that the state had bought the 60,000 licenses for Mcfee Inc.'s Safebooth encryption software with an undisclosed amount.

The article discusses some products and services related to network computing. Track-It 8 Enterprise Edition from Numara Software combines helpdesk and asset management to help large and small business enterprises discover and track assets, manage software licenses and speed problem remediation. Enterprise Edition 11 of SecureZIP encrypts files in the desktop and e-mail attachments and provides greater flexibility to encryption methods. It also enables automatic encryption of attachments in Microsoft Outlook. Logicworks provides managed database service to manage customers their own applications by using a variety of access mechanisms.

The article reports on the significance of using encryption technology and security systems for various computer applications. The federal government has been promoting the use of encryption techniques to information technology (IT) companies. The process is beneficial to IT programmers which aid in the protection of data stored in computers. Several IT companies have developed software application tools that prevents unauthorized access to computer information. They include PGP Corp.'s 9.5.2 and ZoneAlarm 7.0 software applications, plug-ins development connectors from Stream Base Systems Inc., LinkScanner Pro malicious software detection tool from Exploit Prevention Labs Inc., and Zenoss core open-source tool from Zenoss Inc.

The article reports on the study conducted by the researchers at Cornell University in Ithaca, New York, which is aimed at determining the consumption of services of Skype, a computer software that offers voice-over Internet protocol product. According to the study, this software, which encrypts voice and data packets, makes it easy to view sensitive information out of the enterprise. Based on the results, it has been suggested that users must ensure all the productivity tools they need so that they will not turn to Skype. The software was developed by the computer software company Skype Ltd.

The article reports on the plans of the EMC Corp. to incorporate data encryption technology in its disk arrays using software that the storage vendor expects to obtain through its $2.1 billion acquisition of RSA Security Inc. in the U.S. With the addition of encryption tools, the end-users are able to encrypt an entire database or multiple data volumes via their regular storage management tools without having to deploy new software or a separate appliance. Moreover, it allows customers to use the processing power of disk array controllers to speed up encryption and decryption procedures, which reduce the loads on servers and networks. Kelly Carpenter, senior technical managers at Washington University's Genome Sequencing Center, argued that developing encryption functionality into disk arrays would make it easier to encrypt data at the file system level.

The article presents information on biometric devices provider CryptoMetrics. The company provides security devices to private companies and government agencies. Its FingerSURE fingerprint recognition products are being used in protecting data and sensitive information. The components involved in the fingerprint analysis are the reader and the authentication software. There are also two types of fingerprint readers. FingerSURE uses a private key algorithm for encrypting data. Data is then secured on the computer.

This article features the Sovereign Information Integration (SII) technology of IBM Corp.'s Almaden Research Center in San Jose, California. The technology attempts to solve the dilemma of security versus privacy issue in encrypting data. SII enables companies to gain value from their data while complying with privacy policies and legislation. Each party is to encrypt its own data and then send it to the other party to encrypt again. If the encryption methods are commutative, meaning that one gets the same result whichever encryption is applied first, then a name or identification number appearing in both files would have the same double-encrypted value and be recognized as a match.

This article presents information on a new breed of security software, the Host-based Intrusion Prevention System (HIPS). The value of the technology is that it goes beyond the observe-and-guess nature of most network-based intrusion prevention products. To be successful, HIPS products typically require an in-depth understanding of how servers work, and more specifically what sort of operations occur when a wicked person attempts to gain control. HIPS is a great example of a technology that works because it runs on the server and can intimately understand the server and applications' behavior.

This article presents information on a study comparing the randomness in pi to that produced by 30 software random number generators and one chaos-generating physical machine. Physicists, like Ephraim Fischbach of Purdue, conducted the study. After conducting several tests, they have discovered that while sequences of digits from pi are indeed an acceptable source of randomness often an important factor in data encryption and in solving certain physics problems pi's digit string docs not always produce randomness as effectively as manufactured generators do.

Provides information on computer software that are necessary for protecting sensitive data from hackers. Encryption of sensitive data through password-protected Zip files; Use of a universal serial bus drive to prevent someone from decrypting data from a stolen laptop; Information on an encryption based on the trusted platform module promoted by most vendors.

Reports on the growing problems of data theft that highlighted the importance of encryption technology in databases and operating systems. Reasons of Bank Rhode Island for installing encryption software on all of its computers; Examples of encryption software; Advantages and disadvantages of encryption software.

Mentions Encryption Plus for CD-ROMs 3.1, encryption software from PC Guardian that protects data and files stored, published or distributed on CD-ROM. Remote Activation Authentication; Features; Performance; Contact information.