Security of data

[Ed McNierney]

Randy -

If you need to protect the data at that level, you should not let people
have access with their own laptops.  That's not a blow-off answer; you
simply can't do it.  It's not possible to simultaneously (a) ensure the
image data cannot leave the building and (b) allow users to come in with
their own equipment, view the images, and walk out of the building with
that equipment.

	- Ed

P.S. I used to work for a computer graphics card manufacturer, and we
produced some very high-end (at the time) display hardware.  One of our
customers was a secure Federal agency.  They were not permitted to
return broken display cards for repair because they were afraid someone
might be able to retrieve the images that were formerly displayed on
that card from the video RAM!  They simply bought new ones, and some of
us suspected the company of cherry-picking the marginal boards to send
to them <g>.

Ed McNierney
President and Chief Mapmaker
TopoZone.com / Maps a la carte, Inc.
73 Princeton Street, Suite 305
North Chelmsford, MA  01863
Phone: +1 (978) 251-4242
Fax: +1 (978) 251-1396
ed at topozone.com

-----Original Message-----
From: UMN MapServer Users List [mailto:MAPSERVER-USERS at LISTS.UMN.EDU] On
Behalf Of Randy James
Sent: Wednesday, June 29, 2005 5:48 PM
To: MAPSERVER-USERS at LISTS.UMN.EDU
Subject: Re: [UMN_MAPSERVER-USERS] Security of data

Well ED thats my question also how do I protect from what you mentioned
also? The only way I have been doing it now is not to let anyone that
should not see it on the site by passwords.

--- Ed McNierney <ed at TOPOZONE.COM> wrote:

> Randy -
> 
> If the information is that sensitive, what's to keep the users from 
> doing screen captures and saving the image files, regardless of what 
> you do with MapServer?  Unless you have a well-built secure laptop 
> environment, anything you put on the screen can go on the disk.
> 
> 	- Ed
> 
> Ed McNierney
> President and Chief Mapmaker
> TopoZone.com / Maps a la carte, Inc.
> 73 Princeton Street, Suite 305
> North Chelmsford, MA  01863
> ed at topozone.com
> (978) 251-4242
> 
> -----Original Message-----
> From: UMN MapServer Users List [mailto:MAPSERVER-USERS at LISTS.UMN.EDU] 
> On Behalf Of Randy James
> Sent: Wednesday, June 29, 2005 5:23 PM
> To: MAPSERVER-USERS at LISTS.UMN.EDU
> Subject: [UMN_MAPSERVER-USERS] Security of data
> 
> I was trying to figgure out how to protect sensitive information. We 
> have mapserver set up on our LAN, which does not allow http requests 
> from the internet. It protects our data from the internet but now I am

> getting people who want to do reasearch in our office using thier own 
> laptop. The problem i am faced with is the c:\windows\temp\*.png files

> that is downloaded by thier internet explorer. How do I make sure they

> are not taken out of our office when they pack their laptop out? Is 
> there a way to display the maps and not have these files in the 
> windows\temp folder?
> 
> Randy
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com