Theft of Laptop Computers Presented by American Crime Prevention Institute Laptop Computer Background 1984 Apple Computer introduced its Apple IIc, a notebook-sized computer, but not a true laptop, as the combination computer LCDscreen required the user to set it up on arrival at the worksite. 1986 IBM introduced its IBG PC convertible, the 1st true laptop computer. It ushered n the laptop era Theft of Laptop Computers It is reported by Safeware Insurance (specializes in insuring computers) that over 590,000 laptop computers were stolen in the U.S. in 2001, a 53% increase over the number stolen in 2000. www.safeware-ins.com Laptops have become the second most valuable item of theft (after motor vehicles) in the United States. The theft of desktop PC’s has actually fallen in recent years (thefts decreased 6% in 2001) while the theft of laptops has increased. While the loss of data contained in stolen laptops is far more valuable than the laptops themselves, the target of most thefts is the laptops, not the data and information contained in them. Recent Notable Incidents Theft of State Department laptop with “highly classified” with non-password protected and nonencrypted information – Feb., 2002 Theft of Qualcomm CEO - left laptop unattended for 15 minutes on a hotel’s podium at a national conference – Sept., 2000 In March, 2000, a laptop containing sensitive data about Northern Ireland was stolen from an agent of Britain’s MI5 internal security bureau In July, 2001, the FBI reported 184 laptops had been stolen or lost In addition to the computer: The risk that confidential and/or sensitive information will be lost or stolen. If information in laptop not backed up, possibility of substantial business interruption - losses and administration costs. Stolen laptop may be used to get unauthorized access to private networks. Liability concerns if confidential information from a third party is lost. Vulnerable Locations Parked, Unattended Motor Vehicles Company Offices Hotels and Conference Centers Colleges and Universities Hospitals Libraries Airports Laptop Theft Prevention Strategies User Awareness and Precautions – – – Record the make, model and serial number of the laptop and any peripheral attached devices and keep the numbers at both a secured location and in a wallet or purse. Return the completed warranty card to the manufacturer. This may help “flag it” if a thief ever sends it in for maintenance. Back-up files in your laptop on a regular basis or download critical files to your desktop computer or server. – – If privately owned, make sure the laptop is covered by the homeowner’s insurance policy. A rider or special insurance policy may be needed. Safeware Insurance Company offers such coverage. Cost = $150.00- $200.00 annually. Never leave a laptop visible in an unattended motor vehicle. If it is necessary to leave a laptop in a an unattended vehicle, the best place is in a locked trunk. – – Carry a laptop in a nondescript carrying case, briefcase or bag when traveling. Placing it in a case specifically designed for computers makes it an obvious target for thieves. When traveling by taxi, shuttle bus or public transportation, keep your laptop with you at all times Laptop Security at the Airport – – Keep your laptop as a carry-on. Place it in the under-seat storage area, if possible. In the airport, always keep your laptop within your sight line. – Places you can lose your laptop in an airport At a rental car check-in counter. While engrossed in a telephone conversation In a crowded restroom As you sleep or read a newspaper between flights. – Be sure laptop battery is charged – for airport security inspections Laptop Security at Hotels and Conference Centers – Don’t place your laptop on the bellman’s cart – Don’t rely upon hotel or conference staff to lock up a meeting room during a lunch break – Use the hotel safe (better than a room safe) to protect your laptop while you are away from your room – If you leave your laptop in your room, don’t advertise its presence -store it out of sight – Possibly in luggage. Laptop Security at the Office – Employees should be advised about the potential of laptop theft in meetings, company newsletters, circulating articles about laptop theft and through interoffice email communications. – Establish a policy making the employee responsible for the loss of a laptop if they do not follow company policy for safeguarding it. Communicate this policy in writing and require a signed statement of acknowledgement. – – – – Provide employees with adequate secure storage for their laptops, such as lockable security closets or cabinets. Maintain an up-to-date inventory of company owned laptops. Engrave the company’s name/ID on laptops When unattended in the office, maintain laptops in lockable docking stations secured to a desk or workstation. Laptops in Motor Vehicles Never leave a laptop in an unlocked vehicle – even in a driveway or garage. Even in a locked vehicle, never leave a laptop in plain sight. If you must leave a laptop in a vehicle, place it in a locked trunk. If you don’t have a trunk, cover it up and lock the vehicle doors. Laptop Theft Prevention Strategies Encryption - Install software that makes documents stored in a laptop computer unreadable to anyone without a correct password. Strong Password Guidelines – – – Use 2 or 3 unrelated short words Include at least 3 character sets, e.g. special characters or punctuation numerals, and a mixture of upper and lower case letters. Deliberately misspell words. Backup of Data Consider backing up laptop data to a network server before leaving the office or using an external hard drive that can be kept in a safe place. Distinctive Markings – – Apply distinctive markings to make your laptop unique or easily identifiable. Security Tracking of Office Property (STOP) – The STOP tag, which is glued to the laptop case and requires 800 pounds of pressure to remove, leaves an etched stolen property inscription and phone number for recovery. www.stoptheft.com Biometrics – Intel has developed a system that requires the users to identify themselves via a fingerprint before the operating system is loaded. Cables Locking Systems -cables are attached to the Universal Security Slot (USS) provided in most laptops. Anchor the laptop to a table or desk with the cable. Most of these devices are between $30-$50 and can be found at office supply stores. www.anchorpad.com www.kensington.com www.computersecurity.com www.pcguardian.com Alarm Devices – Two units - one in the laptop case and the other carried by the owner. There are RF transmissions between the two units. If the units are separated beyond a predetermined distance, an alarm sounds. www.Trackitcorp.com – Motion Detection Systems – The Caveo anti-theft system for Windows laptops has a motion detector that emits a 110-decibel alarm if the laptop is moved beyond a user-specified (3-30 foot) perimeter. Cost of Caveo system is approximately $75-$80 www.caveo.com Theft Retrieval Programs – – – Similar to “LoJack” “Stealth” software is loaded into the laptop detects presence of a telephone line and periodically dials an 800 number to report its serial number and the phone number it is calling from. Software is undetectable and tamper-proof. – – – – CompuTrace - initial cost is $30.00 with annual cost of $50.00 CyberAngel – automatically transits the calling location ID – both telephone and network connection. Lucira zTrace Stolen Computer Registry – Nacomex USA will publish the serial number on a stolen computer registry - buyers, sellers, insurers, law enforcement can use this service. Laptop Security Technologies User Authentication – confirm authorized user – prevent unauthorized access Physical Locking Devices – deter theft Encryption – protect data Monitoring and Tracing Software – locate and assist in recovery of stolen computers Alarms – deter theft Possible Crime Prevention Initiatives Crime prevention presentations to large corporations Crime prevention presentations to local civic organizations – Chamber of Commerce, Rotary Clubs, Optimists, etc. Informational item on the police department’s Internet website Training bulletin for line police officers Coordination and programming with local libraries, hospitals and colleges/universities Crime prevention brochures – local computer stores Better Business Bureau Article in local newspaper about laptop theft Programming with the security staff or management of conference hotels School Resource Officers (SRO’s) Laptop Theft Videos “Now You See It, Now You Don’t: Preventing Laptop Computer Theft” 20 min. - $149.95 www.CorporateTravelSafety.com Phone: (818) 225-1991 “Look Out For Your Laptop” 18 min. - $695.00 www.comonwealthfilms.com Phone: (617) 26205634 Excellent laptop Security Information on Internet (Google) Corporate Laptop Security Guide – SANS Institute Caveo – Laptop computer Security whitepaper, March, 2003 THANK YOU American Crime Prevention Institute is a division of the AEGIS Protection Group, Inc.