Home > Ask the Security Experts > Network Security Questions & Answers > How to prevent operating system cloning with AES 256-bit encryption
Ask The Security Expert: Questions & Answers
EMAIL THIS

How to prevent operating system cloning with AES 256-bit encryption

Mike Chapple, featured expert EXPERT RESPONSE FROM: Mike Chapple, featured expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 07 July 2009
Do you know of a mechanism to prevent a binary image from being read on an embedded piece of hardware and copied onto another piece of hardware and run, thus cloning the system?


BROWSE BY TAG
Network Security,   Enterprise Data Protection,   Disk Encryption and File Encryption,   Database Security Management,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Network Security
How to set up a split-tunnel VPN in Windows Vista
What is the difference between static and dynamic network validation?
Port scan attack prevention best practices
Securing the intranet with remote access VPN security
How to prevent network sniffing and eavesdropping
How to implement virtual firewalls in a complex network infrastructure
How to manage network bandwidth with distributed ISP bandwidth
How to edit group policy objects to give a user local admin rights
How to securely connect a LAN POS to a remote point-of-sale device
How to select a set of network security audit guidelines

Disk Encryption and File Encryption
Health Net healthcare data breach affects1.5 million
Heartland CIO is critical of First Data's credit card tokenization plan
Heartland CIO on end-to-end encryption, credit card tokenization
Should developers create libraries of common cryptographic algorithms?
What is an encryption collision?
Heartland CIO on PCI, E3 project
Visa probes tokens, encryption for PCI card data protection
Voltage, RSA spar over tokenization, data protection
Truth, lies and fiction about encryption
What are new and commonly used public-key cryptography algorithms?

Database Security Management
Content-aware IAM: Uniting user access and data rights
Trustwave acquires data loss prevention vendor Vericept
Why should we place data files on a separate partition than the OS?
Are there guidelines to create a HIPAA-compliant data center?

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
Advanced Encryption Standard  (SearchSecurity.com)
data key  (SearchSecurity.com)
Encrypting File System  (SearchSecurity.com)
encryption  (SearchSecurity.com)
Escrowed Encryption Standard  (SearchSecurity.com)
network encryption  (SearchSecurity.com)
output feedback  (SearchSecurity.com)
Quiz: Cryptography  (SearchSecurity.com)
Rijndael  (SearchSecurity.com)
Twofish  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


The best way to prevent operating system cloning (and any other form of data theft) is through the use of encryption. You didn't specify what type of device you're referring to, so you'll have to consult the manufacturer for specifics on how to implement it. Generally speaking, you'll need to purchase an encryption package and, depending upon the size of your implementation, may also wish to consider using a key escrow service to ensure key recovery in the event of a device failure.

For this particular scenario, you'll need to think about the best way to handle the data encryption keys. If you're worried about the physical security of the device, you won't want to store the key on the device, as it would be stolen at the same time. One successful technique I've seen involves storing encryption keys for hardware devices (especially secure telephones) on a removable device that the user keeps on his or her person. When the user wishes to activate the hardware device, he or she inserts the removable device, providing the encryption key.

For more information:




Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Find Security Solutions for Your Business
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts