Embed Size (px)
Citation preview
Encryption Initiative – UW Madison
McAfee Endpoint Encryption (formerly SafeBoot)
CTIG – March 20, 2009
Introductions
Phil Saunders, LAN ManagerOffice of the Registrar
Division of Enrollment Services
333 East Campus Mall– open house soon!
Why are we here?
Effective Practices for Restricted Data HandlingRisk Reduction Strategy
• Find It: Determine if you store or process restricted data.
Are you at Risk?
OR
ORTHEN
Risk Reduction Strategies Risk Assessment
Why Encryption?
It’s 3 a.m. . . .
Do you know where your notebooks are?
Full Disk Encryption protects lost devices- and you - from data loss and litigation!
Would you trust . . .
this guywithyour files?
File and Folder Encryption protects specific data
How doesit work?
File encryption
Think of file encryption as a secret codeA simple
synchronouscode:A=1B=2C=3D=4Etc
A message:20 – 7 – 9 - 6
Folder encryption
Think of folder encryptionas a safe deposit box
Full Disk Encryption
Think of Full Disk Encryptionas a bank vault
How does itreallywork?
File and folder Encryption• Encrypts individual files
or entire folders• Requires authentication
to decrypt and access the files
Full Disk Encryption
• Replaces the master boot recordwith a special pre-boot environment
• Encrypts the entire hard drive• Preboot Authentication plus OS
authentication• Decrypts as files are used
How to choose between Full Disk and File/Folder?
When to use Full Disk EncryptionFull Disk Encryption protects against
lost devices
When to use file/folder
• Need an additional layer of security
• Need portability• Need to support removable media
What isUW Madison
doing?
Laptop/Desktop Encryption Project
Full disk and file/folder encryption for
PC
Mac
Nice if you can get it
AIG BONU
S
Product Selected
Where are we now?
• Installed on about 400-ish computersAdmissions, Financial Aid, ISIS Central, Registrar’s office, (DEM) & UW Survey
• UW Milwaukee purchasing their own licenses and running their own server
• Ready for more participants!
