Abstract
Laptop security basics
Contents
Laptop security basics
There are some rudimentary steps that you can take to prevent your laptop from being stolen.
Use the features of your operating system
If you have chosen an operating system that has in-built security features (Windows 2000 Professional and Windows XP Professional are examples) then do not be afraid to use them. Features may include secure logon, file level security, and the ability to encrypt data.
Use the BIOS password
It would be unwise not to protect the BIOS. Find out whether the BIOS will also protect the hard disk drive to stop it from being used in another machine. Another tip is to find out what the procedure is for resetting the BIOS password. If it has to be sent back to the manufacturer, so much the better, as that will afford some protection, as a thief is unlikely to do that. Some will offer an in-the-field work around, which might make it attractive to a thief.
Your laptop's serial numbers
It is written down, right? And stored in a safe place? Good. That will help the police return it to you should it ever be recovered by them.
Use some form of permanent marking on the laptop
Engraving your company name on the case of the laptop with an address or contact number, or both, may increase the likelihood of getting the laptop returned to you if it is stolen and recovered (or, if by some accident, you forget it). Commercial asset tags are also a great aid to the police to return the laptop to you. It may also serve as a deterrent to the casual thief if the choice is between stealing a marked laptop or an unmarked laptop. Why? They cannot sell it using an online auction so easily. Also, travelling through airport security means that someone is also less likely to pick up your laptop accidentally. Information freely available on the Web suggests that 97% of stolen laptops are never recovered.
Use the manufacturer's registration scheme
Most people ignore registration because they think that it is likely to lead to spam. However, remembering that thieves are usually not smart, one might be unintelligent enough to send it in for service or to reset the BIOS, so having it registered with the manufacturer might prove valuable if you alert them to the fact that it is stolen.
Cable lock
Most laptops have a Universal Security Slot (USS), also known as a Kensington Security Slot (sometimes referred to as a K-slot or Kensington Slot). Will it stop bolt cutters? Unlikely. Will it stop a casual thief that just happened to be walking past your hotel room while room service had propped the door open, and then gone off to get more towels? Probably. And make sure to secure it around a strong, immovable, indestructible object. Also use it in the office. What percentage of laptop thefts occur in the office? (See below for answer).
Docking station
Use a docking station that is securely fastened to your desk. If it also allows you to lock the laptop in place, so much the better. This is especially important if you are leaving the laptop overnight, or longer. Better still, lock it in a strong cabinet if at all possible.
Personal firewall
Use a third-party firewall to prevent hackers from hacking into your laptop, and maybe into the company network. If you do disable it for any reason, do not forget to turn it back on.
Biometrics
If your laptop has this capability, then familiarize yourself with them and then use them. Your fingerprint can be your logon ID in place of a password.
Tracking software
There are companies that offer tracking software, allowing your laptop to regularly ping a tracking center with a signal that allows it to be traced. If the laptop is stolen the company will work with law enforcement to trace your laptop.
No safe place
Your laptop is not safe laying around. You would not leave cash lying around, so do not leave your laptop laying around. Conferences of any description are a prime target of thieves, as they know that the attendees guards are often down, and will leave laptops laying around. Thieves rely on this false sense of security to steal them.
Laptop case
It might look chic to have the latest designer laptop case or manufacturers case, but nothing sends out a better signal to a thief than an ostentatious display, which may include your company logo, elite looking luggage tags, your business card embossed in plastic that gives a thief a clue as to the likely worth of the contents. There are nondescript backpacks that have padded sleeves to hold a laptop safely. A backpack is useful for going to the restroom without having to put your case down. For the ultra-security conscious, buy little padlocks to lock the zips so that no-one can get into the backpack quickly, steal the laptop, and then zip it back up again.
Public places
Thieves are good at thieving. They will target coffee houses, cafes, restaurants, and the hotel lobby, as at some stage you will put your case on the floor, and your guard is usually let down as you place an order. This is especially true if you are paying for something by credit card, as you are busy keeping an eye on that, entering a PIN, signing, and your attention is elsewhere. Thieves can be as anonymous and as part of the scenery as you are.
Air travel
Anywhere that you have to put your laptop down you are at risk of getting your laptop stolen. Air travel provides a number of opportunities to a well-organized thief. Curb-side check-in, car rental, check-in, security checkpoints, shops, seating areas, and rest-rooms are all areas where extra caution should be taken.
Car travel
At some stage you are likely to rent a car, or travel in your own car. Never, ever, ever leave the case in full view on the back seat, front seat, floor wells, or anywhere that it is in view. If you know that you are going to have to lock it in the trunk/boot do it out of plain sight wherever possible. If you have an SUV, make sure that you use the laptop lock to secure it to the car, as the luggage compartment cover will provide no protection. If it has a trunk/boot lid and you are going to have to leave the laptop in the trunk, then do so before you get to your destination if that is possible. Thieves will target restaurants or bars for business and watch for groups loading up the trunk/boot with laptops. If possible, load the trunk before you leave for the restaurant/bar. If there is a way that you can secure your laptop to the trunk lid with the cable then do not be frightened to do so. Thieves will target rental vehicles. Also, if the vehicle is damaged you will probably be liable for that too.
Note: Be aware that extreme temperature ranges within the trunk/vehicle can damage laptops.
Hotels
Always secure the laptop in the hotel room. Doors can often be left open by hotel staff, and they can sometimes be conned into letting thieves into your room. If you have to leave it in the hotel safe (if there is one) then get a receipt. If you lock it in your room safe, before you do so, ask what the override process is if you forget the key code combination. Do not leave it with hotel personnel. If you have to leave it in the hotel room for an extended period of time, lock it out of sight if possible.
Getting the security habit
Probably the weakest link in the security chain is the people. Which means you and me. If you can adopt a healthy siege mentality regarding your laptop, you will increase your chances of keeping it. It takes seconds to use the cable lock. Install it while the laptop is powering up. Make it part of your routine to install it. People may tease you for constantly locking it up, but thieves will not. And do not forget that it is not safe in the office either, so lock it up there, too.
Passwords
Make them a combination of numbers and letters so that they are harder to crack. Do not leave the password on a Post-It on the laptop (it does happen).
Checked luggage
Never check it into the hold. Ever.
Encryption
Always encrypt sensitive, personal, confidential data and leave the password with a trusted source if you need to. If you do not know how to encrypt files, then learn.
Back up your hard drive
At the very least, back up your hard disk drive before you travel.
Checkpoint security
It is a requirement at most airports to remove your laptop and put it on a plastic tray when going through security. Make sure that you have external identification marks on the top and bottom of your laptop to deter it being accidentally "stolen". If you are unfortunate enough to be required to give up your laptop be sure to get a receipt. Ask to see the identification of the security person requesting your laptop. Make a mental note of their name, number, and description. If you have shoes, bags, carry-ons, coats, and so on to go through the screener, be sure to put your laptop on the belt last. Do not walk through the body screener until you have seen your laptop disappear into the x-ray machine. This will prevent someone from stealing it before it goes through security. It also minimizes the possibility that someone will steal it on the other side before you get through. Maximize your chances to get through the screener before it does so that it is not just sitting there for someone else to grab.
Laptop lifters
There are teams of professional thieves that will cause some form of distraction to steal a laptop. Anytime there is a commotion or disturbance near you, stick your hand on your laptop/bag/case.
Answer: 40% of laptop thefts occur in the office.
Special Notices
This material has not been submitted to any formal IBM test and is published AS IS. It has not been the subject of rigorous review. IBM assumes no responsibility for its accuracy or completeness. The use of this information or the implementation of any of these techniques is a client responsibility and depends upon the client's ability to evaluate and integrate them into the client's operational environment.
