Overview
Laptop computers have become a prime target of thieves. These thieves are not only targeting these devices for the value of the device itself, but also for the sensitive data contained therein. IU's Office of Risk Management reports that several University-owned laptops have been stolen over the last couple of years. This document will describe methods you can use to protect your laptop device against physical and data theft.
Physical Protection
Physical laptop protection primarily consists of attaching a locking security cable to the Universal Security Slot (USS) on your laptop. The security cable is wrapped around an immovable object and connected to the laptop to provide excellent physical security protection. For those laptops that do not have a USS (approximately 80% of laptops have a USS slot), there are adhesive connectors that mount directly to your laptop casing which provides a way to attach the security cable. These security cables can use either keyed or combination locks to secure them to your laptop. If there isn't a large immovable object accessible to wrap the security cable around, anchoring devices are available that enable you to attach the cable to cubical walls and other stationary objects. There are also systems available that, when attached to your laptop, sound an alarm if the laptop is moved. These types of devices are useful for those times when you'll be traveling with your laptop and have to put it down (e.g. while sitting in the airport awaiting your flight).
Computer Tracking
Computer tracking tries to help recover stolen laptops by having the computer periodically report its location to a secure server on the internet. When it has been stolen, the user contacts the software company who then marks the computer as stolen so that it will report its location more frequently. They then determine the location of the laptop and work with law enforcement officials to recover it.
For additional information on how the use of such software at Indiana University will lower your laptop deductible (in the event the laptop is stolen), click here.
Data Protection
Data protection can be broken down into three distinct categories: operating system security, sensitive data storage practices, and data encryption. Operating system security covers the normal operating system (and services) security best practices. Consult the ITSO Security Guides for best practice settings for your operating system.
The data on your laptop might be more valuable to the thief than the device itself. Therefore, it's always best to use good judgment when storing sensitive information on your machine. You should:
- keep the amount of institutional data stored on your machine to a minimum
- not use any option that "remembers" your password - these options are strictly for convenience (so you do not have to reenter your password the next time you connect) and should not be used, especially on laptops
- use data encryption tools to protect those sets of data that you must have stored on your laptop
An example of why laptop security is important
On March 11, 2005, a person walked into the University of California-Berkeley’s Graduate Division offices and walked off with a laptop. The computer contained the full name, Social Security number, and date of birth of almost 100,000 individuals who had applied to or attended the graduate school between 1976 and 2004. See this CNN article for more details: Thief steals UC-Berkeley laptop.
Related Information
Additional Information
- Laptop Security: Be Deliberate (Windows IT Security)
- More about Disk Encryption Systems and Device Cable Locks (Windows IT Security)
- Locking Down the Laptop
- US-CERT Protecting Portable Devices: Physical Security
- US-CERT Protecting Portable Devices: Data Security
Vendors
- Absolute Software
- Kensington
- Lexent Technologies
- PGP Corporation
- PC Guardian
- Reflex Magnetics
- Targus
Table of Security Cables
Device Vendor Lock Type Comments Defcon 1 Targus combination (USS) doubles as an alarm, anchor plate supplied Defcon CL Targus combination (USS) anchor plate supplied Notebook Guardian PC Guardian key (USS) Notebook Guardian Ultra PC Guardian key (USS) heavier cable Notebook Guardian Adhesive PC Guardian key (non-USS) adhesive mount Notebook MicroSaver® Kensington key (USS)
Table of Cable Supplies
Device Vendor Purpose Partition Cable Anchor PC Guardian cubicle wall anchoring device Perma Dome Anchor PC Guardian glue and screw-in anchoring device
Table of Alarm Systems
Device Vendor Activation Type Comments Defcon 1 Targus motion sensor/cable cut doubles as a cable lock iSpy Lexent motion and remote activation
Table of Data Protection Products
Product Vendor Protection Computrace Absolute Software locates and recovers PC Encryption Plus GuardianEdge encrypts entire hard drive Data Vault Reflex Magnetics virtual drive encryption and secure wipe PGP Desktop PGP Corporation secure e-mail and files TrueCrypt TrueCrypt Foundation secure files
