This document discusses encryption of storage and provides exercises for a security course. It outlines two exercises: 1) having students for an architecture company evaluate whether full disk encryption should be used based on threat analysis, and 2) having students set up encrypted storage on a USB drive and assess its user-friendliness. Options for encrypting files, directories, partitions, and drives using eCryptfs and dm-crypt are also listed. The document is licensed under Creative Commons while noting the EAL logo may require permission.

1. Morten Bo Nielsen – mon@eal.dk 1/7
Encryption of storage
ITT2 ITS security
2014S

2. Morten Bo Nielsen – mon@eal.dk 2/7
What does it do?
How does it do it?
Software/hardware?
(why and where is the exercise for you)
Encryption (of storage)

3. Morten Bo Nielsen – mon@eal.dk 3/7
Exercise 1 – To use or not to use?
Architect company - 30 people
● Decide on a scenario (an attack) where full disk encryption is
relevant
● Evaluate treats, vulnerabilities, attack, impact, likelihood, risk
● Should they have full disk encryption?
● What is your recommendation?
● State your assumption

4. Morten Bo Nielsen – mon@eal.dk 4/7
Exercise 1 – To use or not to use?
30 min, 5 slides
very limited amount of text
Present to other group
Maybe on class if you want

5. Morten Bo Nielsen – mon@eal.dk 5/7
Options
File- or directory based
Partitions
(USB, /home, loopback devices)
eCryptfs and dm-crypt:
http://thesimplecomputer.info/encrypt-your-linux-home-folder-2-ways-and-10-steps
Truecrypt
https://help.ubuntu.com/community/TrueCrypt

6. Morten Bo Nielsen – mon@eal.dk 6/7
Assignment 2: Encrypt something
● Set up encrypted USB stick
● On linux
● Must work on your own machine
● Test on others also
● Is it user friendly?
● Upload or link to a document or blog entry describing
your efforts.

7. Morten Bo Nielsen – mon@eal.dk 7/7
Credits & licences
● Content by Morten Bo Nielsen
License: Creative Commons Attribution-NonCommercial-ShareAlike 3.0
Unported License. (http://creativecommons.org/licenses/by-nc-sa/3.0/)
● EAL logo might be an issue, please check before you use it