<
HomeKnowledge BaseOnline BackupHow secure is the data once it is backed up?
Information
Article ID42
Created On8/26/2009
Modified8/26/2009
Share With Others
How secure is the data once it is backed up?
The backup software is designed to be as secure as possible. A number of features are explained here:

Encryption During Transmission

All sensitive user account data (userid, password, encrypting key) is secured during transmission across the Internet using industry standard 128-bit encryption (SSL).

Encrypted File Storage

Before your files ever leave your computer, they are secured through encryption. Encryption parameters are set during backup set creation and cannot be modified. If you need to change these settings, you will need to create a new backup set. Encryption is turned on by default, but it can be disabled (not recommended).  Please make sure you do not disable this important security feature, unless you have a specific reason to do so (and honestly, we can't think of any good reasons). 

Lushsoft OBM (the backup client software) supports several encryption settings. These are explained below along with suggested settings:

Encryption Algorithm - this defines the encryption algorithm used to encrypt your backup files. There are three encryption algorithms available:

[AES] - Advanced Encryption Standard algorithm
[DESede] - Triple DES algorithm
[Twofish] - Twofish algorithm

We recommend the use of AES as this algorithm is a common standard for commercial use. If you do not have a preference, just use AES.

Encryption Mode - this defines the encryption mode used to encrypt your backup files. There are two encryption modes available:

[ECB] - Electronic Cook Book mode
[CBC] - Cipher Block Chaining mode

We recommend the use of CBC mode as it offers a higher level of security.

Encrypting Key - this is the user-selected key used to encrypt all files within a backup set. The key defaults to your password, or you can choose a key that is different than your password. For an additional layer of security, please choose an encrypting key that is different than your password. In this case, even if someone were to get the password to your account, your files could not successfully be decrypted or restored.

If you select the option to make your encrypting key the same as your password, make sure you have selected a strong password - one that is extremely difficult for someone to guess. Use a combination of letters, numbers, and symbols. Keep your password and encrypting key in a safe, secure location. If you forget your encrypting key, YOU WILL NOT BE ABLE TO RESTORE YOUR FILES. Even our administrators cannot restore your files. The security of your files is of utmost concern to us, and we believe this is the only way to ensure the highest level of security for you files.

Backup Server Data Redundancy/Replication

Your data is stored on redundant disk arrays in our state-of-the-art, secured data center. Your data is further protected by copying the data from the primary backup server to one or more replication servers in a different location.  This means that should the primary server fail, your data is held in a separate location on different hardware.

Physical Security

As well as the security controls of the server, the server is within a secure rack in a secure data centre.  But what does that mean?  Well, it means that the rack is within a building with fire suppression, CCTV and RFID access controlled doors.  Only the data centre staff/technical support have access to the physical boxes. 
Call us now on » 08708637200