Why should we place data files on a separate partition than the OS?

BROWSE BY TAG Platform Security,   Application and Platform Security,   Securing Productivity Applications,   Enterprise Data Protection,   Database Security Management,   VIEW ALL TAGS

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Platform Security Should developers create libraries of common cryptographic algorithms? How to secure USB ports on Windows machines What is the best database patch management process? What is an encryption collision? What are new and commonly used public-key cryptography algorithms? Should management processes change based on a patch release schedule? Does an EULA make it truly illegal to decompile software? Should businesses delay Windows Vista adoption and just buy Windows 7? Should Windows Mobile updates come from Microsoft? What are the export limitations for AES data encryption? Securing Productivity Applications Quiz: How to build secure applications How to detect software tampering Adobe fixes 29 flaws in Acrobat, Reader Adobe warns of critical update for Reader, Acrobat 9.1.3 Adobe updates ColdFusion, JRun, Flex Serious Adobe Flash flaw being exploited Adobe acknowledges serious Flash zero-day vulnerability Adobe issues security advisory for Flash zero-day flaw When to use the service features of the Metasploit hacking tool How to manage patches for Adobe Database Security Management Content-aware IAM: Uniting user access and data rights Trustwave acquires data loss prevention vendor Vericept How to prevent operating system cloning with AES 256-bit encryption Are there guidelines to create a HIPAA-compliant data center?

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary sheepdip  (SearchSecurity.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

The main benefits of placing data files and the operating system (OS) on separate partitions or physical hard drives relate to speed and convenience, greatly simplifying system repairs and data backups. Cluster sizes, or units of file storage on a hard disk, can also be changed depending on the type of data stored on the partition. The benefits from installing your applications on a different partition are negligible, but it can make sense, mainly for performance, to locate them on a separate hard drive.

Most operating systems allow for the hard disk to be divided into separate data areas, known as partitions, effectively turning it into several smaller logical hard disks. Having more than one partition makes it easier to organize applications and data more efficiently, and knowing where data is makes it easier to protect and back up.

The most common approach is to store the OS and applications on one partition and user data on another. Therefore, if a problem occurs with the OS, the partition where it resides can be completely reformatted and the OS reinstalled without affecting the data partition. Even if this partition becomes corrupted, data on the other partitions can still be accessed, which can be a real time-saver if you have to recover data from a damaged, corrupt or compromised operating system. If, for example, you find a rootkit affecting your OS, you can reformat the OS partition, reinstall the operating system and then check the data partitions for infection using a clean OS.

If you're running a Windows machine, then placing data files or applications onto a separate partition or drive doesn't really help you in the above scenarios because a reinstalled OS has a new registry that has no knowledge of the applications that were previously installed. Also, many applications locate their DLL files in the System32 folder, which is also recreated during an install. So, at the end of the day, you will have to reinstall each application. The advantage of putting applications on a separate drive is performance. The drive head is working solely for your applications, not the OS as well, which can be a real benefit for applications such as SQL Server.

Where possible, I would always look to have two drives rather than partitioning one drive. Once you have installed the OS and applications and have confirmed they are the latest versions and are all working correctly, I would recommend defragmenting the C: partition, creating free space by reducing fragments in file systems. Then use disk-imaging software, such as Norton Ghost products from Symantec Corp., to take a drive image. Do this each time Windows or an application installs new updates. Taking consistent drive images will enable you to recover more quickly from a malware attack or drive failure.