Security for legal computers-don't know where else to put this

I need to pick someone's brain. I'm studying for an online Associate's degree in Paralegal studies. One of my classes is Legal Technology. Our latest task is finding the latest security hardware and software to keep the computers of our hypothetical office's stuff secure.

I've found tons of stuff online, but as you know, many programs can be adware and worse. Is there an end-all security program that would protect sensitive legal client information in the case of theft of a laptop, etc? Ethics is of utmost importance in any company or program used.

Thanks,
T

 

Guess I should have mentioned the software I did find so it wouldn't look like I was trying to get you guys to do my homework for me.

I've found encryption software for both computers and email, antivirus/antispyware, tracking software, hardware like laptop safes, cables, etc. master passwords, password safes, etc. I can give names, too, but you guys already know all that stuff. I was just wondering if there was something out there that wouldn't take up so much memory, but does the same thing as the rest of these.

 

Once the thieves have physical access to the drives, nothing will protect the info. At least this is what I am told. So the best thing to do is to make sure the thieves can't get to the laptop.

And there's no "all-in-one" solution, the programs that claim to be tend to be low-quality. It's more of a matter of using many different programs and finding what works for you. It's not so hard once you get used to it.

Here's one thing: When deleting info, just don't drag it to the recycle bin and empty it -- it's still physically there, but the OS doesn't have the reference, so any decent program can grab it. Use one of those programs which overwrite it. I don't have a recommendation, but the MG site should have some.

If you're disposing of a hard drive, the best way to ensure the data is non-recoverable is to physically destroy it. Barring that, a low-level format (zeroing it out) should work, although I've heard DBAN is good for that.

Most of it is common sense. good luck with your studies.

 

I really appreciate your response. I was hoping I had covered all the bases, but you mentioned a couple of things I never thought of, like the recycle bin. I know there are ways to remote access the computers and wipe the files, but they don't seem to be a lot better than the recycle bin to me. On my laptop, I have encrypted my files and have a program to encrypt email. I also lock my computer, and have an encrypted password that I change every week.
I set a master password so my kids can't even access the internet unless I do it for them. They downloaded garbage and crashed my last computer.

I think, between you and me, we've covered all the bases. I hope my paper is not TMI!

Thanks for the encouragement. I waited til my kids were grown to get my degree-its my turn now. I've decided I want to be a paralegal when I grow up-I'll only be 54 next week!

 

Technically, all computers can be cracked once there's physical access. But you'd want to frustrate the crackers first. Seems like you're doing just fine (changing the password, etc.)

 

http://smileys.smileycentral.com/cat/4/4_17_206.gif

Very well done, eresat, you're never too old. If there's one thing I regret it's not pursuing a career when I left school. I couldn't wait to leave. Wish I'd done my A levels at least.... Welcome to the MG forums. :wave

 

Don't forget to check out MG Must have Free downloads at
http://www.majorgeeks.com/page.php?id=20

Lots of great Freeware stuff there, covering all aspects of PC use and Security. :-D

Bazza

 

The only way to protect from a network incursion is to keep the computer disconnected from the network. Assume any security is easily broken, if not useless against a dedicated attacker with knowledge and resources.

If you really want to secure the laptop, and have to have it connected to a network, you're better off keeping all data on a seperate Hard Drive which is only attached to the computer when it's not attached to the network. For additional security, use an alternative file system. Run the computer Windows, but leave Linux on and use it's file system to store files. Windows won't open it, and Linux has unusual security.

Hardware wise, you need a computer that wipes that drive after the second attempt to access it. Multiple sequential wipes each time it's started work better. It'll keep writing over with 0's until the drive is dead.

 

Those are great ideas! A separate Hard Drive is the best idea I've heard-one that could be locked up at the end of the day would be the best idea. All the other security ideas I've gotten from everyone here are great, too! Thanks to the research I've done and the information from all of you, my paper will be great! I've got TrueCrypt on my personal laptop, and set a master password on Firefox. Hopefully I'll have enough security for the hypothetical firm!

 

The first place I looked for security programming was here at MG. The problem with that is that for some of the available programs, I need to know a lot more about computers than I currently know. It took some serious researching to understand that what was available here is exactly what I was looking for!

 

Thank you, everyone! Right now, I'm trying to figure out how to give credit to all of you for your input, in legal Bluebook citation format. Actually, that's the toughest part of all these classes! You're going to be famous!