Full Disk Encryption vs. File-Level Encryption

by Daniel Gail IT Consultant Most modern operating systems offer file-level encryption, allowing users to choose which files to encrypt as needed. While file-level encryption has its place, investing in server security software that enables full disk encryption may be warranted. Here's a look at the two types of encryption so you can make a more informed choice.
 
What is Encryption?
Encryption sounds mysterious – almost like something out of a James Bond movie – doesn't it? Imagine if James Bond had a highly secretive file that absolutely could not fall into enemy hands. What might he do to ensure the integrity of that file? While the possibilities from 007's perspective may include booby traps or a high speed chase, for the rest of us, encryption will do just fine. Encryption is a method used to convert an ordinary text-based message into encoded text using a formula or key. In order to decipher the encoded message, you must have the "key."
 
As a kid, did you ever use a secret code to send messages to your friends? For example, you might have changed the values of the letters of the alphabet where a=b, b=c, d=e, and so on. If your friends had a copy of the formula or key, they could decrypt the following message: upq tfdsfu (top secret). If they didn't have the key, upq tfdsfu would be meaningless gibberish. Naturally, computer encryption is far more sophisticated than this example, but it's based on the same concept.
 
File Encryption
File encryption is useful when you have occasional files that need to be protected. For example, if your personal computer is used primarily for playing solitaire, storing copies of recipes, and browsing the Web, you wouldn't necessarily need full disk encryption. However, you might want to encrypt a few sensitive files such as your tax returns and other financial documents. You might also want to encrypt some sensitive emails. In these instances, you could do so by using your computer's built-in file encryption tool and your email client's encryption features.
 
The problem with file encryption is that it requires you to take action and remember to do it. You can minimize this problem by creating an encrypted folder and then saving your sensitive documents to it, but again, you will need to remember to do so.
 
Full Disk Encryption
Full disk encryption is ideal for individuals and companies with a greater need for protecting files and folders. For example, an accountant that uses a laptop should encrypt all client files lest the laptop becomes lost or stolen. The same is true of a large financial institution charged with protecting account holder data, only encryption should extend far beyond individual laptops to include servers and storage.
 
Using full disk encryption and/or server encryption software largely takes the user out of the equation. For example, once a laptop's hard disk is fully encrypted, the user simply logs on, enters a password, and works as normal. Should the laptop become lost or stolen, no one else will have the key (the password) to access the laptop's contents which makes the laptop unusable to anyone other than the authorized user.
 
Full disk encryption wins on several counts: level of protection, seamless operation, and no dependence on the user's part to remember to encrypt files.

Daniel Gail is the author of this article and has been helping businesses with purchasing server security software and full disk encryption software to protect them from outside threats.

Sponsor Ads

• Ad Space Available - Rent it Now!

Created on Dec 31st 1969 18:00. Viewed 0 times.

Comments