Here is a very interesting article from SearchSecurity.com: Link
As I mentioned in a previous posting, I have been sitting on the sidelines while watching the evolving disk encryption market. True, I do believe that hardware base solutions will end-up beating out software based solutions. However, I haven't been sure when this transition would occur or how fast. In 2007, we saw some major expansions in the market with both Seagate and Hitachi jumping into the mix with their own HFDE drives. However, it has been hard to gauge what the adoption rate has been with these drives in supplanting current SFDE solutions.
In other words, 2007 was an interesting year, but not a defining year. For 2008, I sense that we will see an expansion in the number of different solutions that are available (I.E. more drives, devices, and management solutions). After all, the options are very limited right now, making the options to manage these solutions are even more limited. With this in mind, 2009 may be the year of a major market switch. By that year, the number of HFDE solutions should become more universal in conjunction with their associated management offerings.
With all this in mind... What do the SFDE vendors think about the end of their party? Well, in the article that I just referenced, I think there is a statement that clearly states what the direction will be:
"In five years, we probably won't sell encryption software, said Malte Pollman, Utimaco vice president of products, but key and other management services for Intel, Seagate and any other hardware encryption companies."
With more than nine years of experience in IT, Tyson Kopczynski has become a specialist in Active Directory, Group Policy, Windows scripting, Windows Rights Management Services, PKI, and IT security practices. Tyson is the author of the new book Windows PowerShell Unleashed (read a sample chapter and learn about the drawing for a free copy here). Tyson has been a contributing author for such books as Microsoft Internet Security and Acceleration (ISA) Server 2004 Unleashed and Microsoft Windows Server 2003 Unleashed (R2 Edition). He has also written detailed technical papers and guides covering various technologies. As a consultant at Convergent Computing, Tyson has worked with next generation Microsoft technologies since their inception and played a key role in expanding scripting and development practices. Tyson also holds the SANS Security Essentials Certification, Microsoft Certified Systems Engineer Security certification, CompTIA Security+ certification and SANS Certified Incident Handler certification.
Subscrib to Tyson Kopczynski's Hidden Microsoft feed.
Blog archive.
The opinions expressed in this Weblog are those of the writer and may not represent the opinions of Network World.
|
|
Cold reboot attacks
This is especially interesting given the recent press on cold reboot attacks
Thanks Alex
Oddly enough, I was going to blog about this. But, I got lazy… In theory an HFDE solution wouldn’t be subject to this exact attack. However, using this same method, you might be able to attack the solution via other means. I’d have to spend some time thinking about this to come up with some good theories and such, hence the lazy part.
- T
Post new comment