You can go to the NIST site for a list for FIPS 120 certified vendors of flash drives who at least meet the minimum standards for protecting sensitive data on portable devices.

Here is information on encryption Validation and Certification requirements:

http://www.safenet-inc.com/products/data-protection/hardware-security-mo
dules/validations-certifications/

Here is the link to certified vendors:

http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2009.htm

http://fips201ep.cio.gov/apl.php

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of Edward
Sent: Monday, January 02, 2012 1:09 PM
To: security-basics (at) lists.securityfocus (dot) com [email concealed]
Subject: Re: USB Flash Drives

Hi,

I would also like to note that there is a portable versions available
for many popular encryption software, such as TrueCrypt. As long as
you are using Windows PCs, you can access your data anywhere, without
any additional software. That said, buying thehardware-encryption
USB's mentioned before may be a better way to go, just thought I'd add
to the options.

Edd

On 2 January 2012 07:20, <Antti.Laatikainen (at) santen (dot) fi [email concealed]> wrote:
> Hi!
>
> One important thing to keep in mind is that many of these
> solutions require admin rights to the computer to work-
> Or if not that, they require some additional software to
> be installed on the computer prior to work.
>
> There are good, strong solutions like Kingston Vault sticks that
> don't need any users right or programs to be installed. They handle
> the encryption using built-in hardware on the stick.
>
> One solution (in AD environment) would be to use the Bitlocker to go.
> It's cheap, gets the job done and you have nice set of features that you
> can configure using GPO's, like  "Deny Write Access to Removable Drives Not
> Protected By BitLocker"
>
> Check out more info:
>
> http://www.windowsnetworking.com/articles_tutorials/using-bitlocker-encr
ypt-removable-media-part1.html
>
>
> Antti Laatikainen
>
>
>
>
>
> -----Original Message-----
> From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On
> Behalf Of fecub
> Sent: 23. joulukuuta 2011 23:27
> To: security-basics (at) lists.securityfocus (dot) com [email concealed]
> Subject: Re: USB Flash Drives
>
> TrueCrypt is a perfect tool for things like this. you can crypt your files and
> hide it in your usb! if you want to open it you need TrueCrypt and your very
> good choosen pass. and it have a fanstastic feature inner and outer volume!
>
> ----- Original message -----
>> Hi Everyone,
>>
>> I am curious how everyone is protecting their USB Flash Drives from
>> getting lost or stolen?   I see a plethora of products out there, but
>> not sure which are the best to go with.   All our USB devices need to
>> be encrypted and password protected.
>>
>> Any suggestions?
>>
>> Thanks,
>>
>> -Charles
>>
>> ------------------------------------------------------------------------

>> Securing Apache Web Server with thawte Digital Certificate
>> In this guide we examine the importance of Apache-SSL and who needs an
>> SSL certificate.   We look at how SSL works, how it benefits your company
>> and how your customers can tell if a site is secure. You will find out
>> how to test, purchase, install and use a thawte Digital Certificate on
>> your Apache web server. Throughout, best practices for set-up are
>> highlighted to help you ensure efficient ongoing management of your
>> encryption keys and digital certificates.
>>
>> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
>> ------------------------------------------------------------------------

>>
>
>
> ------------------------------------------------------------------------

> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
> certificate.  We look at how SSL works, how it benefits your company and how
> your customers can tell if a site is secure. You will find out how to test,
> purchase, install and use a thawte Digital Certificate on your Apache web
> server. Throughout, best practices for set-up are highlighted to help you
> ensure efficient ongoing management of your encryption keys and digital
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
> ------------------------------------------------------------------------

>

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

[ reply ]