I am a "power user" with a limited knowledge of information security. I frequently store confidential documents on my computer. How can I protect these against a rootkit that gives an attacker complete access to all your files?
The question is not so much about best rootkit prevention practices (like having an up-to-date firewall, antivirus), but rather, if you are to appreciate the fact you can never be 100% certain something isn't lurking in your system from all the dodgy files/software you download or websies you visit, what would you say are the best practices of storing sensitive data on the hard drive which would make finding/downloading those files very difficult? For example, I now store all this data in encrypted TrueCrypt containers which get mounted occasionally. However, when these containers are mounted as a separate drives, what stops attackers downloading decrypted files off me?
How do people working in secret services across the planet manage this issue? What could you recommend for a beginner who is interested in thi? What's an easy way to lock down specific files from leaking over the internet, or at least be able to monitor traffic and spot irregular patterns/files being accessed by other programs?