Author: docesam, Posted: Mon May 31, 2010 10:38 pm Post subject: what encryption will be suitable for this situation ? ---- A company need to transmit tens/hundreds of megabytes of data between the company's branches several times per week using the internet.
the data need to remain secure for several years to come.speed of encryption is not important but security is.
given that the data worth a lot(millions). what encryption will be suitable for this ?
Author: Fire Ant, Location: LondonPosted: Tue Jun 01, 2010 11:09 am Post subject: ---- Good security practice would be to encrypt the data in transit using an IPSEC VPN and to encrypt the data at rest using something like PGP.
The VPN will secure it between sites so if anyone sniffs the traffic they cannot read it. Using something like PGP will ensure the data cannot be interpreted should the disks be read via malware or storage theft.
There are risks with securing the data at rest. You must keep the key material securely and possibly for many years. The time it takes to encrypt and decrypt the data could have impact on things like recovery time.
Can I ask what sort of data it is? You may be bound by some legal obligation to secure it.
Fire Ant
Author: docesam, Posted: Tue Jun 01, 2010 1:50 pm Post subject: ---- thank you very much.
do you think that such measures are safe for some 120-150 million $ data ?
Author: CoreDefend, Location: USAPosted: Tue Jun 01, 2010 3:33 pm Post subject: ---- IPSEC VPN and PGP are industry-standards for encrypting information.
Fire Ant is correct regarding encrypting the data in transit and at rest.
Many large institutions use the above to secure their data.
Are database transactions involved during the data exchange?
Thanks,
Author: docesam, Posted: Wed Jun 02, 2010 2:49 pm Post subject: ---- thank you very much