HomeEncryption technologyWhite Papers

Security and Encryption White Papers

Data Leakage

Data protection programs at most organizations are concerned with protecting sensitive data from external malicious attacks, relying on technical controls that include perimeter security, network/wireless surveillance and monitoring, application and point security management, and user awareness and education. But what about inadvertent data leaks that aren’t so sensational, for example unencrypted information on a lost or stolen laptop/ USB or other device? Like the steady drip from a leaking faucet, everyday data leaks are making headlines more often than the nefarious attack scenarios around which organizations plan most, if not all, of their data leakage prevention methods. Sponsored by SANS and Trend Micro.

• Read "Data Leakage Landscape: Where Data Leaks and How Next Generation Tools Apply" (registration required)

Encryption and Key Management

To support the broader deployment of encryption for the protection of sensitive data and to deal with the management of encryption keys over their lifecycle, Best-in-Class organizations are beginning to look towards centralized key management and automated key distribution solutions to deliver higher scalability, lower operational costs, reduce risk, establish consistent security policies, and sustain regulatory compliance. Sponsored by the Aberdeen Group.

• Read "Encryption and Key Management" (registration required)

Protecting Data at the Endpoints: Combating Lost / Stolen Laptops, Thumb-Sucking, Pod-Slurping, and Other Threats to Your Sensitive Data

Broader adoption of encryption at endpoint devices (such as laptops, PDAs, smart phones, and USB devices) helps Best-in-Class organizations to allow data to flow more freely to where it is needed, while protecting and managing the data to meet security and compliance requirements. Sponsored by the Aberdeen Group.

• Read "Protecting the Endpoints:Combating Threats to Sensitive Data" (registration required)

Regulations and Standards: Where Encryption Applies

Most of today’s standards and compliance regulations are concerned largely with the protection of private data at rest, during transactions, and while it traverses network connections. Some of these regulations make specific recommendations or require particular technologies for compliance. For all of them, however, encryption can be employed to satisfy the protection requirements. This white paper describes the types of data under regulation and describe basic best practices for implementing appropriate encryption technologies.

• Read "Regulations and Standards: Where Encryption Applies" (registration required)

Encryption Procurement: Setting a Standard

How can an organization balance its encryption needs against the cost and complexity of an enterprise solution? The complexity, stemming from an expanded mobile workforce, greater exposure of essential systems to adverse and catastrophic events, and increasing regulatory compliance, demands an approach to information security that protects the confidentiality, integrity, and availability of data both in motion and at rest. Data encryption is a key element in modern enterprise security strategies to protect data. One approach is a competitive bid process designed to select the best solution for the organization. Key to this process is a well-constructed request for proposal (RFP) that requires vendors to match their solutions, products, and services against well-defined enterprise goals, objectives, requirements, and best practices.

• Read "Encryption Procurement: Setting a Standard" (registration required)

Secure Key Storage and Processing: A Vital Part of IT Security Strategy

Protection of data assets has risen to critical importance as global networking and ecommerce open businesses and organizations to both the benefits and risks of device types, connection protocols and electronic transactions, performed across borders The potential risks of increased transaction activity have been largely controlled and minimized through the use of encryption and electronic signatures, but the encryption and signing process itself creates another potential layer of vulnerability. The private key information that drives the algorithms for encoding, decoding, signing and verifying data pose a largely overlooked security risk that many organizations acknowledge only after data loss or theft occurs.

• Read "Secure Key Storage and Processing" (registration required)

Closing the Gaps in Enterprise Data Security: A Model for 360º Protection

This paper examines the primary data threats that currently cause concern to Chief Security Officers (CSOs) and IT management within enterprises and recommends best practice techniques to minimize and overcome risks to data security. These best practices have been successfully implemented and deployed in organizations worldwide as components of a holistic data security strategy.

• Read "Closing the Gaps in Enterprise Data Security" (registration required)

Countering Misconceptions about Data Encryption

Despite the advances in encryption techniques and vastly improved computer capabilities, however, many of the fallacies and outdated understanding about encryption persist. Sometimes these myths are even being perpetuated in popular technology publications where some authors and editorial staff fail to do their research thoroughly. This paper examines the common myths that exist about data encryption and discusses the most recent techniques and changes in computing environments that have elevated encryption as a data security tool and enabled practical everyday use of this valuable technology.

• Read "Countering Misconceptions about Data Encryption" (registration required)

Improving Regulatory Compliance with Encryption

As enterprises address the challenges presented by regional regulatory mandates, encryption serves an additional purpose: helping achieve high levels of data privacy. Data privacy is an essential component in complying with regulations worldwide.

• Read "Improving Regulatory Compliance with Encryption"

Data Encryption: The Foundation of Enterprise Security

A successful organization is only as strong as its intellectual property. From proprietary product information to employee information, sensitive data must be protected from unauthorized access to ensure corporate integrity and confidentiality. In light of burgeoning legislative initiatives, data protection is no longer a corporate choice; it’s the law. The consequences of compromising sensitive data—from financial losses to competitive threats—can cripple an organization. Data encryption is the most effective solution for safeguarding sensitive electronic data.

• Read "Data Encryption: The Foundation of Enterprise Security"

Adapting to the Changing Landscape of Security

This white paper discusses the changing landscape of security and suggests areas where businesses should re-examine their processes. The paper concludes with a series of questions that provide guidelines for evaluating competing security solutions.

• Read "Adapting to the Changing Landscape of Security"

Embedded Security: Trusted Platform Module Technology Comes of Age

This paper examines the benefits that TPM chips bring to security-conscious businesses, and the ways in which this technology can elevate trusted computing to higher levels, enhancing security while simplifying usability. It also traces the history of the Trusted Computing Group and explores the ways in which standards-based security mechanisms are becoming more deeply integrated into hardware, operating systems, and networking protocols.

• Read "Embedded Security: Trusted Platform Module Technology Comes of Age"

Product White Papers

SafeGuard Easy

This white paper describes the features and functions of SafeGuard Easy which, with more than 2.2 million licenses sold, is the most widely sold application for hard-disk encryption and access protection worldwide.

• Read the SafeGuard Easy White Paper

SafeGuard LAN Crypt

Today, at almost every PC workstation in most organizations, access is available to proprietary or confidential data in file form. In modern IT environments complete control over the use and distribution of confidential data seems impossible.

• Read the SafeGuard LAN Crypt White Paper (pdf)

SafeGuard Advanced Security

The IT infrastructures of today are often a complex network of machines and related software. Maintaining a consistently high level of security and trust in the integrity of these machines can prove a difficult task.

• Read the SafeGuard Advanced Security White Paper (pdf)

SafeGuard PrivateDisk

This white paper describes the basic functions of “Virtual Disks“ and the integration of modern encryption procedures used by Utimaco Safeware in SafeGuard PrivateDisk.

• Read the SafeGuard PrivateDisk White Paper (pdf)

SafeGuard PDA

As Personal Digital Assistants (PDAs) become more powerful and merge with wireless technology, new products are necessary to ensure security of both these devices and the enterprise networks they access.

• Read the SafeGuard PDA White Paper (pdf)

SafeGuard MailGateway

Within enterprise IT security, protecting e-mail traffic presents a specialized set of challenges. SafeGuard MailGateway software from Utimaco Safeware solves them all handily.

• Read the SafeGuard MailGateway White Paper (pdf)