Backing up is the process of making copies (a backup) of data which may be used to restore the original after a data loss event.

learn more… | top users | synonyms

3
votes
1answer
2k views

Backing up SSL certificate private key files

What are some recommended practices for backing up SSL certificate private key files? I'm working in an environment where the public web servers are not backed up, because in theory the public ...
1
vote
2answers
388 views

best place to store backup encryption key [closed]

I have a server on which I keep an encrypted backup of some data. The server updates the backup once a day if the data has been changed and is physically accessible to many people. Further, I would ...
3
votes
2answers
2k views

Deduplication of Encrypted Files

Let's assume I have an 18GB database that is backed up nightly by dumping the database and then encrypted using a modern algorithm such as AES-256. This database has a daily update of rate of ...
3
votes
3answers
787 views

Encrypting Backups on Linux

I'm working on an automated backup solution to protect my files on my Linux servers. However, I'm not sure about how to securely encrypt the resulting archives. I am using 64bit linux, and I am ...
1
vote
4answers
806 views

Is a full backup the quickest or the longest on restoring [closed]

Studying for Security+ with Darril Gibson's book he says that "A full backup is the easiest and quickest to restore" Now I've been looking for another test exams and I found the MasterExam of the ...
8
votes
2answers
417 views

Backup schedule for Encryption Keys

How often should encryption keys be backed up? Should this be done on the same schedule as the encrypted content/configuration? That seems excessive, as the keys do not change as often. Perhaps ...
-8
votes
1answer
216 views

Hacker problems - They stole my backups [closed]

I am facing an issue where hackers are seeking to compromise two of my servers. They succeeded in wiping out both and stealing my backups. I had off-site backups and I am back online. Nonetheless, I ...
2
votes
1answer
160 views

Backup media storage strategy

As a company we are performing daily backups onto RDX removable media which is fully encrypted (shows as unformatted drive) and the backup software also encrypts the files during the backup process, ...
1
vote
1answer
147 views

What should be backedup periodically? [closed]

I know of less than 10 data files I modify regularly that I want backed up. I did a full system backup and tried doing incremental backups every week but find it unnecessary and too long. For example ...
4
votes
1answer
881 views

Standards for secure key backup of master keys with secret sharing

In many cases, there is a single master key that is installed in a HSM or similar device, but which should be backed up. The recommended method for this backup in many cases is to encrypt the master ...
1
vote
3answers
475 views

Is physical tape backup better than disk to ensure integrity

When assessing tape backups vs online disc backups, which of them ensure better protection from integrity incidents. For example, if the system is compromised by attacker or virus or malware and I ...
0
votes
1answer
125 views

Auto encrypt chunks of content for backup, best practice?

I'm just curious and it's more like a mind game, I'm not into cryptography. How would one encrypt data that's constantly generated? Put the data automaticly into chunks encrypt the chunk and send it ...
0
votes
3answers
618 views

Backup TrueCrypt hidden volume [closed]

I have a usb stick witch is encrypted using truecrypt. How can I back it up? The only method that comes into my mind is making a image of the usb drive and then restore it. But 16 GB I think it will ...
2
votes
1answer
92 views

Privacy laws' right-to-amend (and right-to-delete) requests and archived data/backups

Under HIPAA and some privacy laws (in US, EU and other countries), the user has the right to amend (under some laws even delete) his/her data. What is the right way to handle a request to amend/delete ...
0
votes
3answers
88 views

Is there a way to make changes to a virtual machine, test it out, and automatically make same changes to normal machine?

Is there a way to install programs and make changes to a virtual machine and if they work ok have them applied to the "actual" machine? For example in this question when fiasco_averted says "...only ...
2
votes
1answer
2k views

Is there any way to list the contents of the iPhone/OSX Keychain and their security level?

I have a few apps that I purchased from the app store that probably store information in my keychain on OSX and on the iPhone. Since it's possible for keychain items to be bound to a device (and ...
-1
votes
1answer
67 views

Are there any benifits to backing up when you have all the original installation disks? [closed]

Is there any benefit to doing a full system backup or differential backup if you have all the installers for programs you use and no special settings are needed? Most of my data files can be deleted ...
5
votes
2answers
405 views

How to back up encrypted data over a VPN connection? The encrypted container, the data within or encrypted individual files?

Given a (TrueCrypt) encrypted volume on one device A, what is the more secure way to back it up via a VPN connection to the physically far away device B? Backup the data: Requires the volume to be ...
16
votes
4answers
2k views

How do you prevent physical backups from being stolen?

I'm sure, by now, we're all aware of the need to encrypt backup disks, but what can be done on the physical security side of things to prevent backups from being stolen or damaged? Particularly: ...
-1
votes
4answers
160 views

Sensitive information I don't want my work to backup

Can this be done safely? I want to print 2 pdf’s containing personal/banking information from a computer at work. It has CrashPlan Pro running and I don’t want a copy of the files to be made that I ...
0
votes
1answer
386 views

Amazon S3 Encrypted File Backup System

I am designing my backup system to Amazon S3 (probably Singapore) and I would like to have all my files strongly encrypted on the server. I use ArchLinux x64. My system will append only once an ...
3
votes
2answers
236 views

Where a sysadmin deletes a company's data, why can't they just restore from backups

As an example, in the UBS Duronio case, Mr. Duronio executed code that deleted everything in its path, but isn't there a backup server? Why was UBS hit by the loss of data? If the backup is available, ...
4
votes
1answer
2k views

How to backup database to comply with UK data protection act?

Charity has a server in their office onto which they backup a database with sensitive information. They want to get rid of this server. Is there a cost effective solution that would allow them to ...
-3
votes
1answer
794 views

Safest and most secure way for backing up private data

Here is what happened, I first collected my data into one folder,tar'd it, encrypted it with gpg, put it in truecrypt container, and after that started to copy the container to another place, but ...
2
votes
1answer
248 views

Maximum protection on a computer network?

I would like to secure as much as possible a computer I am using to sync sensitive data files from work to my home pc. The syncronisation is being done by only 1 software is there a firewall to allow ...
7
votes
3answers
3k views

Secure sync of TrueCrypt containers

Need to sync arbitrary files within two TrueCrypt containers; one container is a backup, the other the one actively used by me, both are local during the transaction. Current concern security wise is ...
10
votes
6answers
25k views

It is safe to store photos and documents on skydrive / google cloud services?

I have over 20GB of photos and documents stored on my hard disk without a backup. I'm thinking about saving all of them in a cloud service such as Microsoft Skydrive or google cloud, but I'm wondering ...
7
votes
1answer
6k views

Is CIFS/SMB (Folder Sharing in Windows) secure?

I have to back up some data from windows 7 machines over the internet, and I rarely use windows so am distrustful of it in general. Specifically: Is there any sort of check that the server is the ...
4
votes
1answer
138 views

What security features and qualifications should we look for in an online backup provider?

What security features and qualifications should we look for in an online backup provider for an Internet-exposed web server storing sensitive data? In the backups themselves - encryption type, ...
2
votes
3answers
182 views

What is the likelihood of getting sensitive information off of a backup tape?

For purpose of the quesition, I am going to paint a picture: A system administrator maintains and backs up a production server for clients with sensitive financial information (account numbers, names,...
4
votes
4answers
656 views

How to securely delete a table in MS-Access?

I have a Windows 7 computer which currently has a large working Microsoft Access 2007 database on it containing some tables with confidential data. I would like to securely delete/remove the tables ...
1
vote
1answer
331 views

Should I mount my mac Truecrypt Volume elsewhere?

I've read in various places to not mount your truecrypt volume in the same place as your Dropbox or Sugarsync folder. I believe this only matter for Mac/Linux, but I need some verification. On a Mac, ...
0
votes
1answer
342 views

Do Auditors use a specific methodology or framework when auditing IT Backup policy? [closed]

I am wondering if IT Auditors use a methodology or framework to audit a backup policy. Here is a example of a different kind incase my question does not make sence: ~~~~~~~~~~~~~~~~~~~~~~~~~ A ...
10
votes
3answers
587 views

Tools needed to setup a paranoid remote backup server

I'm a system admin with little security experience. I want to schedule the copying of our backups to protect our data in case of fire. The best solution would be to copy the data onto a new hard-...
52
votes
8answers
6k views

Online backup : how could encryption and de-duplication be compatible?

A "soon to enter beta" online backup service, Bitcasa, claims to have both de-duplication (you don't backup something already in the cloud) and client side encryption. http://techcrunch.com/2011/09/...
20
votes
6answers
2k views

Backing up sensitive data - pitfalls and best practices

Obviously, securely backing up sensitive data is a challenge. A remote backup is important for surviving a variety of disasters. What are some of the "gotcha's" lurking out there, and what best ...
7
votes
1answer
482 views

Should iPhone backups be encrypted? Is this in-scope for Corporate IT if the device is linked to a home pc?

iPhone backups may reside on a computer that is outside of IT Policy (Home PC) and therefore doesn't have any Corporate IT protections on it. If this home PC was stolen or hacked, then the iPhone ...
8
votes
2answers
1k views

Recently had a virus, can I use backed up files on clean system?

I had to reinstall my OS (windows) recently due to a virus. I backed up my source files onto a flash drive. How can I get to those files without problems? I know flash drives can have nasty things in ...