14 Replies - 1431 Views - Last Post: 12 November 2008 - 06:22 PM

#1 pbuck  Icon User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 18
  • Joined: 17-May 08

Keep data safe with remote employees

Post icon  Posted 30 October 2008 - 05:12 PM

So you want to let your workers work anywhere, but you want to keep your systems secure. What are the best ways to make sure off-site workers are keeping your data safe?
Is This A Good Question/Topic? 0
  • +

Replies To: Keep data safe with remote employees

#2 Winstinology  Icon User is offline

  • I'm pretty good with a laser mouse..
  • member icon

Reputation: 7
  • View blog
  • Posts: 958
  • Joined: 08-May 08

Re: Keep data safe with remote employees

Posted 30 October 2008 - 05:35 PM

RFIDs :D

RFIDs :D
Was This Post Helpful? 0
  • +
  • -

#3 kakumar  Icon User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 14
  • Joined: 27-May 08

Re: Keep data safe with remote employees

Posted 30 October 2008 - 08:51 PM

View PostWinstinology, on 30 Oct, 2008 - 05:35 PM, said:

RFIDs :D

RFIDs :D


Doesn't that require investment in the RFID's and then the cost of time and hassle to deploy these RFIDs?

What example are there out there of RFID's for 2 factor authentication for VPN?
Was This Post Helpful? 0
  • +
  • -

#4 no2pencil  Icon User is offline

  • Admiral Fancy Pants
  • member icon

Reputation: 5413
  • View blog
  • Posts: 27,429
  • Joined: 10-May 07

Re: Keep data safe with remote employees

Posted 30 October 2008 - 08:59 PM

View Postkakumar, on 30 Oct, 2008 - 11:51 PM, said:

Doesn't that require investment in the RFID's and then the cost of time and hassle to deploy these RFIDs?

...you know, because time & hassle is of course the largest factors in safety.

You either need the safety or you don't.
Was This Post Helpful? 0
  • +
  • -

#5 josiahb  Icon User is offline

  • D.I.C Regular
  • member icon

Reputation: 2
  • View blog
  • Posts: 378
  • Joined: 05-March 08

Re: Keep data safe with remote employees

Posted 31 October 2008 - 04:51 AM

View Postno2pencil, on 30 Oct, 2008 - 08:59 PM, said:

You either need the safety or you don't.


couldn't have put it better myself.
Was This Post Helpful? 0
  • +
  • -

#6 skyhawk133  Icon User is offline

  • Head DIC Head
  • member icon

Reputation: 1877
  • View blog
  • Posts: 20,284
  • Joined: 17-March 01

Re: Keep data safe with remote employees

Posted 31 October 2008 - 07:08 AM

If you're talking about VPN's and using 2-factor authentication to secure VPN's and the laptops themselves, I would suggest Smart Cards.
Was This Post Helpful? 0
  • +
  • -

#7 RedSonja  Icon User is offline

  • D.I.C Head
  • member icon

Reputation: 10
  • View blog
  • Posts: 172
  • Joined: 04-September 08

Re: Keep data safe with remote employees

Posted 31 October 2008 - 07:26 AM

This one is very relevant to me, since this is what I do.

Our secrets are serious. We are not allowed to access the home nets from outside. There is no access to anything whatsoever from outside, except mail for some people. If you want to read your e-mails from outside you have to fill in lots of forms and stuff, it's easier to wait till you get back. Then you can only do it via one of our laptops, which is coded to death, you forget the code, you can't read your mail. When I travel I just take a coded laptop with a snapshot of my current project, but I don't bother with the mail. When I get back the laptop gets cleaned. We don't have the little cards, but I often see people from other companies using them. If we use datastaicks for travel we are supposed to code them, but I don't suppose anyone ever does.

We have all signed long documents promising not to take secrets out with us. We did have a spy, he sold stuff to the DDR, he was caught and spent some years in prison.

Because it would be dead easy to take stuff out, no-one ever checks our bags, I could dump the lot on my portable hard drive and take it out of the gate. In the end they just have to trust us.
Was This Post Helpful? 0
  • +
  • -

#8 darrenb  Icon User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 5
  • Joined: 07-August 08

Re: Keep data safe with remote employees

Posted 10 November 2008 - 05:23 PM

Is RFIDs Radio Frequency Identifiers? I'm not sure I have a clear idea about how that would work. We've been using a Phone-based solution to add strong authentication to our ssl vpn. It is an excellent solution for us.
Was This Post Helpful? 0
  • +
  • -

#9 pbuck  Icon User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 18
  • Joined: 17-May 08

Re: Keep data safe with remote employees

Posted 10 November 2008 - 05:27 PM

I'm trying to envision what "phone-based" means. Is it complicated?
Was This Post Helpful? 0
  • +
  • -

#10 darrenb  Icon User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 5
  • Joined: 07-August 08

Re: Keep data safe with remote employees

Posted 10 November 2008 - 05:30 PM

Not at all. From a user point of view, enter username and password as always. Before getting access, the system places an outbound call to the user's wireless or wireline phone. User answers the call and presses "#". That's it.
Was This Post Helpful? 0
  • +
  • -

#11 PsychoCoder  Icon User is offline

  • Google.Sucks.Init(true);
  • member icon

Reputation: 1642
  • View blog
  • Posts: 19,853
  • Joined: 26-July 07

Re: Keep data safe with remote employees

Posted 10 November 2008 - 05:32 PM

@pbuck:

PhoneFactor is one of the leading TwoFactor Authentication systems, read there and you will see how that system works :)
Was This Post Helpful? 0
  • +
  • -

#12 pbuck  Icon User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 18
  • Joined: 17-May 08

Re: Keep data safe with remote employees

Posted 10 November 2008 - 05:33 PM

What if you don't have your phone with you?
Was This Post Helpful? 0
  • +
  • -

#13 PsychoCoder  Icon User is offline

  • Google.Sucks.Init(true);
  • member icon

Reputation: 1642
  • View blog
  • Posts: 19,853
  • Joined: 26-July 07

Re: Keep data safe with remote employees

Posted 10 November 2008 - 05:34 PM

Then you don't get in, it's that simple
Was This Post Helpful? 0
  • +
  • -

#14 darrenb  Icon User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 5
  • Joined: 07-August 08

Re: Keep data safe with remote employees

Posted 10 November 2008 - 05:37 PM

Agreed, psychocoder, I was going to mention PhoneFactor. To pbuck's original point, you could use a solution like PhoneFactor to enhance the security of your vpn by layering on strong authentication.
Was This Post Helpful? 0
  • +
  • -

#15 kakumar  Icon User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 14
  • Joined: 27-May 08

Re: Keep data safe with remote employees

Posted 12 November 2008 - 06:22 PM

View Postno2pencil, on 30 Oct, 2008 - 07:59 PM, said:

View Postkakumar, on 30 Oct, 2008 - 11:51 PM, said:

Doesn't that require investment in the RFID's and then the cost of time and hassle to deploy these RFIDs?

...you know, because time & hassle is of course the largest factors in safety.

You either need the safety or you don't.



Yes time and hassle is a factor, multi-billion dollar markets revolve around the issue your flipantly discount in your black and white assertion.

Thanks for the phoneFactor link, it fills all three silos - safety, time and hassle-free.

B)
Was This Post Helpful? 0
  • +
  • -

Page 1 of 1