Data Storage Backups

A couple of weeks ago we discussed the importance of personal data encryption and its use in the SOHO (small office home office) environment. This weeks focus will touch on that subject a bit as we discuss the topic of data redundancy and backup. Working with many small companies who request my consulting service, I notice the puzzled looks on many of my clients faces when I ask the question about redundant storage and the backup of critical data. Most users seem to believe that the life cycle of a hard disk is forever. Well, that observation can be far from true even with the introduction of solid-state storage. The thing to remember about storage devices is not if your device is going to fail but WHEN your device is going to fail.  Having this mind set one can prepare for the worst-case scenario. What are some of the ways that users can backup data?

1.     Cloud Storage ie “Carbonite” and “Dropbox”

2.     Data Duplication – ghosting storage devices

First, we’ll take a look at Cloud Storage, which basically is a server farm of storage space. Using this method the user can upload data from the device of their choice and save it to a location that is different then the one used by the client. Since we’re conscience of the security of our data, how secure is the data once backed up? The answer to that question is not very secure. Companies such as Carbonite state that data pulled for storage is encrypted and transferred through (SSL). (SSL) adds a level of protecting as the data travels across the Internet to its destination.  If you feel secure with the method of encryption the service provided sounds like a win win situation for your data. But what if you want to add a layer of encryption before your precious data is transferred. Well, then one could look towards “Truecrypt” as an additional encryption solution. 

Next, we’ll look toward Data Duplication such as taking a storage device and completely copying its entire contents. To do this many look towards the commercial software “Symantec Norton Ghost” imaging software that replicates the data to a backup device. A free and open source alternative known as “Clonezilla” is the Linux equivalent that works just as good if not better in many ways.  By using such software users can create multiple images of critical data for storage, which give them the ability to return back to a point last backed up if the first backup image is destroyed. The thing to note is that with Data duplication users are responsible for the amount of times they image the initial device to keep the backups current with the original. One important thing to think about is having more then one backup of the same device.  A single point of failure can be created if users only create one image to backup data.

   

Electronic Cleaning For Resale

As your home office grows, so does the amount of technology that one can accumulate. The proper way of discarding of old technology can save users from security risks that could haunt them in the long run. This week’s discussion will focus on ways to clear important data from devices that you plan on getting rid of, donate, or resale.

So lets say you want to buy a new Desktop or Laptop, but you plan on donating the old device to a new non profit organization that helps children learn how to become computer literate. How do you properly clean the system of data so that new users don’t have physical access to authorized data? Novice users don’t know this but just because you have a password on your old system doesn’t mean that new users can’t find ways of bypassing such low level security. It’s also misunderstood that if you do a quick format of the hard disk or storage memory that data can still be retrieved using easily available forensic tool kit software. To solve this propelling question we turn to the solution of low level formatting. Low level formatting is a technique that fills the hard disk full of zeros, which completely and permanently removes data from the device. To understand how this is beneficial to users one needs to know that data written on storage devices are done so with 0’s and 1’s and that writing the devices over with zero’s completely numerous times can strip the data from the device. 

Personal Data Encryption

The physical security of your personal computer can often take precedence when the topic of computer security comes to mind for a novice but what about the security of the data on the device it’s self. This week’s focus will discuss the topic of data encryption and how using free open source software called “Truecrypt” can take easily readable data files and scramble the information for unauthorized users. Encryption as defined in “The Guide to Firewalls and VPN’s” by Whitman, Mattord, Green (2012) describes it as “a process that turns information that is plainly readable (plaintext) into scrambled form (ciphertext) in order to preserve the authenticity, integrity, and privacy of the information…(Whitman, Mattord, Green, 2012).” One might ask themselves “Well, now knowing what encryption does, how would encryption benefit me?”  Let’s take a look at a quick scenario. Say you work for a company that allows telecommuting, which gives employees the benefit of working in a non-central environment. To complete tasks issued by your employer, you begin traveling with electronic devices such as a laptop. At this point lets ask this question “What happens if that device get stolen or is lost at some point in time?” Is the information stored on the device safe from unauthorized viewers? If not you could’ve just cost your organization a major lost to its information assets. To prevent such a loss from happening one could look towards encryption, as a solution for the security needs of the data assets located on the device. Software “Truecrypt” has the ability to, as stated from its introduction section on its website http://www.truecrypt.org/docs/, “[do] on-the-fly encryption…[which] means that data is automatically encrypted right before it is saved and decrypted right after it is loaded…” If you’re interested in beginning the process of protecting data through encryption “Truecrypt“ has a tutorial that can step users through the process located here http://www.truecrypt.org/docs/tutorial

Operating System Updates

Your computer is the center of your home office and requires scheduled maintenance to keep it at an optimal level of performance. Since most system attacks are focused on operating system flaws, today’s discussion will focus on operating system updates specifically how to install and to keep them current.

“Operating Systems manage the hardware and resources of the machine (Ida M. Flynn, Ann Mclver McHoes 2006).” When first built, it’s known that operating systems, as of all software, are in a constant refinement to maintain quality and purpose.  Software vendors and designers, to solve security vulnerabilities, bugs, and add improvements introduce software patches also known as software updates.

Microsoft windows and Mac OSX both included the ability to update system software through:

·      “Windows Update”

·      “Apple App Store”

Updating Windows

·      Click on “Start” then “Control Panel” then “Security Center” icon

·      Select “Automatic Updates”

·      Select Automatic updates and select a time when your computer is normally on.

Updating Mac

·      Click on the “Apple symbol” in your upper left hand corner. 

·      Select “Software update”

·      And you’re done!

Works cited

·      Ida M. Flynn, Ann Mclver McHoes (2006) “Understanding Operating Systems Forth Edition”