Vista EFS and BitLocker DS

Now, if someone loses a laptop, it's not just the notebook itself, but also personal information, and even important data from the enterprise. and protecting enterprise data is the basic task that each enterprise's IT Security department wants to do. In Windows Vista, Microsoft provides us with improved EFS (Encrypting File System) and a new BitLocker feature, both of which have their own strengths and the ability to compensate each other for their shortcomings. Through these two technologies, we can build a simple and complementary multi-level defense system.

Every month, we can hear that a company's employees have lost their laptops and that they have a lot of sensitive information stored in their notebooks. It may not be long before we receive a large amount of ad mail that means "your personal information has been captured by us". In the middle of 2005, a large credit card company's computer was lost, causing 40 million of users lost information. The company had to quickly shut down all visa and Amex cards ' accounts.

With the introduction or imminent introduction of various data security-related laws are gradually recognized by enterprises, any enterprise if they want to retain their customers, it is necessary to protect data security as much as possible. The Ponemon Society's survey shows that after a second loss of data, an enterprise will have a significant customer churn, and after a third loss of data, customers will leave the company.

One of the main elements of securing your company's data is the security of your PC, especially the security of your laptop, which is the easiest to get stolen. In Windows Vista, a comprehensive set of data encryption security measures is available, including improved EFS (Encrypting File System) and new BitLocker features. Under the protection of these two functions, all kinds of data in Windows Vista can be well protected. Earlier versions of EFS provide protection only for previous versions of Windows, and EFS is especially unsafe for Windows 2000 and XP because of the exposure to EFS in the context of the windows-based directory, paging files, Recycle Bin files, and so on. Like what:

An attacker can attempt to quickly obtain a user's password through a dictionary attack in the Windows directory. Most user passwords can be cracked without a single day. Once you have the user's password, the Windows system has no secrets.

The page file contains plaintext content that can be read directly.