RE: password protect encrypted directory

["Robinson, Sonja" <SRobinson () HIPUSA com>]

Check out Credant for encrypting mobile devices such as laptops and pda's.

-----Original Message-----
From: adisegna () siscocorp com [mailto:adisegna () siscocorp com]
Sent: Friday, August 13, 2004 1:06 PM
To: security-basics () securityfocus com
Subject: RE: password protect encrypted directory


NTFS can be used to keep everyone but the administrator out. However, if
stolen the admin password can be hacked easily with a boot disk. In this
case I disable boot up floppy seek in the bios as well as using BIOS
security but there are still ways around it. 

Anyway, to password protect a directory you will have to use a 3rd party
program. There are numerous freeware applications out there.

Thanks

A D
Information Technology Group


-----Original Message-----
From: Dana Rawson [mailto:absolutezero273c () nzoomail com] 
Sent: Thursday, August 12, 2004 12:38 PM
To:     Subject: password protect encrypted directory



G'Day, all.



Hope this isn't too basic of an issue but I wanted to ask for your
direction if possible.



Preface: I have directory which contains sensitive data on a w2k/xp
laptop.  I have the directory and files residing within encrypted. 



Issue: I would like to password protect this directory so even the user
who is logged into this profile is prompted for a password prior to
gaining access to this data.



Desired outcome: By accomplishing this (if possible) I wish to deny
access to this data via remote entry/being hacked, and also protect the
data should the laptop be stolen, or someone walks away from their
computer without locking it (i.e. ctrl-alt-del) leaving it wide open for
someone to sit down and start playing.



Is this something that can be accomplished?  Is there commercial or
opensource software available?



I have found software on the web that states it can password protect a
directory, but with out installing and testing all of them how can I
know if it most secure?  Has anyone tested or reviewed this type of
software?  



Is anyone familiar with this that might make a recommendation?



Thanks again in advance for your time.



Regards,

Dana

------------------------------------------------------------------------
---
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545
off 
any course! All of our class sizes are guaranteed to be 10 students or
less 
to facilitate one-on-one interaction with one of our expert instructors.

Attend a course taught by an expert instructor with years of
in-the-field 
pen testing experience in our state of the art hacking lab. Master the
skills 
of an Ethical Hacker to better assess the security of your organization.

Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the
skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------
CONFIDENTIALITY NOTICE: This e-mail transmission, including any attachments
to it, may contain confidential information or protected health information
subject to privacy regulations such as the Health Insurance Portability and
Accountability Act of 1996 (HIPAA). This transmission is intended only for
the use of the recipient(s) named above. If you are not the intended
recipient, or a person responsible for delivering it to the intended
recipient, you are hereby notified that any disclosure, copying,
distribution or use of any of the information contained in this transmission
is STRICTLY PROHIBITED. If you have received this transmission in error,
please immediately notify me by reply e-mail and destroy the original
transmission in its entirety without saving it in any manner. 

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------