Secure Data Encryption Practices
Methods to encrypt data in transit and at rest, including encrypting files on USB keys, emails, and cloud storage. Learn about tools like AESCrypt and AxCrypt for file encryption and SSL for email security. Discover how to securely transfer data through email and make Dropbox files safe. Mitigate risks associated with encryption such as key/password loss and collaboration challenges.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
Data Encryption Data In Transit / Data At Rest
Learning Outcomes How to: encrypt data on an USB key encrypt a document email a document safely use the Cloud to transfer data and documents make Dropbox safe and secure (if possible).
File Encryption At Rest may be: Laptop or computer Network Share USB or removable storage Cloud storage Recommend AESCrypt - https://www.aescrypt.com/ and while not quite a feature rich as TrueCrypt was it is really easy to use for single files. Recommend AxCrypt - http://www.axantum.com/AxCrypt/ as it can be used with all of these media types including cloud storage! Recommend Dropbox as it handles encrypted files more efficiently; copying only the changed content of the encrypted file verses the entire encrypted file. Benefits both are relatively easy to use & free Risks - lose the key/password and lose the data Concerns collaboration is difficult resulting in reduced security
Email Encryption In Transit, communication can be secured by: transport use SSL to encrypt application use encrypted email client file encryption send encrypted file Recommend SSL to secure communication transport Benefit easy to setup and use. Webmail option is secure Risk does not secure message from end-to-end or secure device Do not recommend using encrypted email client Benefit end-to-end encryption of message Risk too complicated for average user and requires web of trust
Email Encryption (cont.) Use file encryption to send encrypted message Benefit - if sending confidential information via email is absolutely necessary this is a secure option Risk requires sharing of password with recipient and lose control of access to data ****BEST METHOD > DE-IDENTIFICATION**** If it is absolutely necessary to send research information through email then de-identify the data first by removing any personally identifying information from the data set.
Technical Demonstration File Encryption AESCrypt Documentation - https://www.aescrypt.com/documentation/ AxCrypt Tips - http://www.axantum.com/AxCrypt/Tips.html AxCrypt Documentation - http://www.axantum.com/AxCrypt/etc/AxCrypt-Manual.pdf Office 2010 - http://office.microsoft.com/en-ca/help/password-protect- documents-workbooks-and-presentations-HA010148333.aspx Office 2007 - http://office.microsoft.com/en-ca/word-help/protect-your- document-workbook-or-presentation-with-passwords-permission-and- other-restrictions-HA010354324.aspx
Technical Demonstration (cont.) Email encryption McMaster Univmail SSL transport settings Incoming Server: Server Name: univmail.cis.mcmaster.ca Protocol: IMAP Encryption Type: SSL Port: 993 Outgoing Server: Server Name: univmail.cis.mcmaster.ca Protocol: SMTP Encryption Type: SSL Port: 465 Outgoing server requires authentication. http://www.mcmaster.ca/uts/support/email/email.html Univmail webmail - https://univmail.cis.mcmaster.ca/ Encrypt file and send via email use encryption software or file password option in document
Technical Demonstration (cont.) Cloud Storage Dropbox basics - https://www.dropbox.com/help/category/Basics How to install Dropbox - https://www.dropbox.com/help/243/en Important Note: In order to access an encrypted file on Dropbox the encryption software will need to be on the same system being used to access and to mount the encrypted file. Consider FileLocker - http://www.filelocker.com/ Paid service which offers cloud storage with Collaboration Secure file and folder syncing (end-to-end encryption) Versioning Notifications Mobile accessibility
