|
Server : Apache/2.4.62 System : FreeBSD fbsdweb2.web.rcn.net 14.1-RELEASE FreeBSD 14.1-RELEASE releng/14.1-n267679-10e31f0946d8 GENERIC amd64 User : www ( 80) PHP Version : 8.3.8 Disable Function : NONE Directory : /domains/ap.belleisle/ |
Upload File : |
<HTML> <HEAD> <TITLE>ENCRYPTION SOFTWARE with forensic software countermeasures</TITLE> <META NAME="description" CONTENT="Cerberus Systems, Inc. develops, manufactures and markets Windows� cryptosystems designed to meet or exceed level 1 of FIPS PUB 140-1 with DOD 5220.22-M disk data recovery countermeasures."> <META NAME="keywords" CONTENT="ANSI X9.17, computer security, cryptosystem, data privacy, DOD 5220.22-M, encryption, file wiping, FIPS 140-1, forensic software, INFOSEC, sanitizing, security leaks, secure deletion, security software, triple-DES, zeroizing, Windows�."> </HEAD> <BODY BGCOLOR="#336666" TEXT="#FFFFFF" LINK="#FFFF99" ALINK="#FF0000" VLINK="#FFFF00"> <BASEFONT SIZE=3 FACE="Arial,Helv,Helvetica"> <TABLE ALIGN=LEFT BORDER=0 CELLSPACING=0 CELLBORDER=0 CELLPADDING=4 WIDTH=636 BGCOLOR="#336666"> <TR><TD> <TABLE CELLSPACING=0 CELLBORDER=0 CELLPADDING=2><TR> <TD><a href="http://www.CerberusSystems.com"><IMG SRC="INFOSEC/images/web_icon.gif" ALT="CERBERUS HOME ICON" WIDTH=72 HEIGHT=72 BORDER=0></a></TD> <TD><FONT SIZE=6><B><i>Cerberus Systems, Inc.</i></B></FONT></TD> </TR></TABLE> </TD></TR> <TR><TD> <TABLE ALIGN=CENTER BORDER=0 CELLSPACING=0 CELLBORDER=0 CELLPADDING=0 WIDTH=576 BGCOLOR="#336666"><TR><TD> <TABLE ALIGN=CENTER BORDER=2 CELLSPACING=0 CELLBORDER=0 CELLPADDING=5 WIDTH=400 BGCOLOR="#006666"> <TR ALIGN=CENTER><TD><FONT SIZE=2 COLOR="#FFFF99"> <i>Software Cryptosystems designed to level 1 of FIPS PUB 140-1<BR> with DOD 5220.22-M countermeasures to forensic data recovery</i> </FONT></TD></TR> </TABLE> <P>"Access control" products obstruct the use of <u><i>your</i></u> copy of Windows� to read data stored on your hard drive. They have no effect on the ability of <i>another</i> PC or laptop to plug into the standard connector on that hard drive and read its contents. Such reading by <i>forensic software</i> can automate "recovery" of sensitive data remnants. <P>Sensitive data recovered from "temporary" files that Windows� has "deleted" can allow <i>side channel attacks</i> to bypass encryption with even the strongest ciphers. <P>Using a program to create encrypted copies of your data to e-mail provides no protection from recovery of the <i>unencrypted</i> copies of that data which Windows� helps other programs to scatter around your hard drive when you edit it or print it. <P>If you must leave a Windows� PC or laptop unattended, it <i>is</i> possible to protect your data cryptographically, but <i>only</i> if you also eliminate all those leaked extra copies; and do so to standards designed to thwart forensic disk data recovery techniques. <P>Since Windows� leaks sensitive data into many kinds of locations on a hard drive, merely "wiping free clusters" is, of course, not sufficient to counter forensic software. Nor is "wiping file slack" that is only applied to file tails, and not the interior spaces into which Word�, Excel� and similar programs can scavenge sensitive plaintext. <P>To counter forensic software attacks, we offer our <a href="INFOSEC/index.htm"><u><b> INFOSEC Products</b></u>. </a> <BLOCKQUOTE><FONT COLOR="#FFFFCC" SIZE=1> <b>NOTE:</b> Our cryptosystems are considered "encryption items" - Category EI in the Commerce Control List, 15 CFR 774, subject to the Export Administration Act, 50 USC 2401. The penalty for their export from the United States without a BXA license, except to Canada is a fine, not to exceed $1,000,000 and/or a prison term, not to exceed 10 years, for each offense. </FONT></BLOCKQUOTE> <P>If you're not sure whether or not you need cryptographic data protection, take a look at <a href="./INFOSEC/consider.htm"><FONT SIZE=2><u><i>ENCRYPT or NOT? - things you should consider</i></u></FONT></a>. We also provide an on-line library of applicable (U.S.) federal cryptographic security standards, and a set of tutorials on the problems of meeting them in the INFOSEC-hostile Windows� environment. <BLOCKQUOTE><FONT COLOR="#FFFFCC" SIZE=1> <b>NOTE:</b> Security-conscious users disable browser javascripting, as well as technologies like <i>Java</i> or <i>ActiveX </i>that allow the running of other people's programs on their computer. So, we've designed this web-site without <i>any</i> active-content features. Browsing this web-site requires no registration and writes no <i>cookies</i> on your hard drive. Most web-pages have a navigation-bar on the left. A link to a page listed on that bar will be highlighted when you view that page. Clicking the Cerberus logo will bring you back to this page. </FONT></BLOCKQUOTE> <P>If you decide to entrust your business to us, rest assured that our customers' names, addresses and e-mail addresses are held confidential and are not sold to others. </TD></TR></TABLE> </TD></TR> </TABLE> </BODY> </HTML>