110 likes | 346 Views
Ironkey. Secure Portable Drives By Evan Wechsler and Daniel Kolb. Why Hardware Security?. Controlled network access Hardware is faster and more reliable than software Disallows unauthenticated access to data. What is Ironkey ?. Originally produced by company Ironkey
E N D
Ironkey Secure Portable Drives By Evan Wechsler and Daniel Kolb
Why Hardware Security? • Controlled network access • Hardware is faster and more reliable than software • Disallows unauthenticated access to data
What is Ironkey? • Originally produced by company Ironkey • Hardware now produced by Imation (2011) • Software by Ironkey https://www.ironkey.com/images/landing/ironkey-s200.jpg
FIPS 140-2 • New Models meet Level 3 • Level 1: Hardware cryptographic module • Level 2: Features that show evidence of tampering with hardware • Level 3: Prevent the intruder from gaining access to data
Hardware Based Encryption • No access to encrypted data before authentication • Password authentication required • AES 256-bit CBC encryption http://www.usbmemorysticks.net/wp-content/gallery/ironkey-flash-drives/ironkey-basic.jpg
Strong Casing • Sealed metal casing outside • Epoxy sealant • Tampering sealant around chip • Resistant to heat, water, and tampering
Self-destruct mechanism • On 10 incorrect passwords (changeable on higher models) • When tampering with hardware detected • Entire secure drive wiped and lock partition destroyed. http://cache.gizmodo.com/assets/images/4/2011/10/medium_self-destruct-hard_drive.jpg
Secure Sessions • Anonymizer network controlled by Ironkey, similar to Tor • 22 privately owned servers • No man-in-the-middle attacks but everything controlled by Ironkey
Identity Manager • Stores passwords in non-accessible location • Reduces chance of keylogging • Passwords only in RAM for a second or two while posting data http://www.creditscore.net/wp-content/uploads/2011/01/identity-theft.jpg
Other Features • Enterprise : allow/deny remote access, profiles • RSA encryption • Partnered with Lockheed Martin to make bootable OS’s with secure flash drive
References • http://www.imation.com/en-US/Mobile-Security/Mobile-Security-Products/Secure-Mobile-Data-encrypted-USB-drives/Imation-Personal-S200-Flash-Drive-Powered-by-IronKey/ • https://www.ironkey.com/news/IronKey-Announces-Partnership-with-Imation-to-Focus-on-Securing-Access-to-Cloud-Services • http://csrc.nist.gov/groups/STM/index.html