SSD and High Security

Microbell

Commendable
Jun 4, 2016
34
0
1,530
Howdy Gents,

Well I finally bought my first SSD (Samsung 850EVO) and have some questions regarding carrying over my habits for high security from a standard hard drive to this SSD. I'll explain how I handled it on a standard hard drive and can use any input you have on it's negative effects on the SSD.

1. The OS (Windows 7 Pro 64bit) is housed on the SSD and will be written to frequently and files deleted often.
2. On the standard drive I have Hibernation disabled and the page file is deleted at every power down. (Power down = 1-3 times a day)
3. CCleaner is used to clean all temp folders, recycle bin etc and files are deleted using secure 1 or 3 pass wipe write method (secure Delete) every power down.
4. The SSD will contain one "Hidden" encrypted container (about 4GB) that will be filled and emptied every few months.
5. Free space is Wiped using 1 to 3 pass method every month or so.
6. Recuva used in deep scan mode to make sure everything is securely deleted and nothing is recoverable.

Now I don't want to encrypt the whole drive as that method sometimes slows down other programs even on a SSD and I know your not supposed to WIPE free space on a SSD but this drive must remain both secure and trackless. Meaning that No one can recover the moved and deleted files and and all fingerprints of were you have been and the files your working with, places you visited on the web etc, can not be seen or recovered. This is a work related issue where I deal with corporate files on my home PC and these must remain very secure.

a.) So If I continue with the methods above what side effects will it have on the SSD besides reducing drive life?
b.) And can you guess on what reduced life span that may be, months, years?
c.) Is there another method (other then total drive encryption) which would secure everything without effecting the performance and longevity of the SSD that I have overlooked?

Thanks for any input gents!
 
Solution
So you used CATIA on an encrypted HDD? and it was really slow?
I'd at least try it on an ssd if you haven't.

I know you've already got the 850, but if you can use M.2, the Samsung 950 Pro is seriously fast. You're looking at sequential read speeds of 2,200 vs 540 for the EVO.

The Evo has a 3 year warranty, and Pro 5 year, so you should be good regardless of how you encrypt.
You should be backing up your data regularly too. Our Mac's at work backup hourly.

If your data is critical, which it sounds like it is, you should be replacing all your drives every 1-3 years.
I replace our main backup HDDs yearly, and the SSD NAS drive 3 yearly.
Our data isn't so critical and our backups work really well, so I don't bother replacing user drives...

mrmez

Splendid
Probably easier to just stop trafficking drugs.

Total drive encryption is really the only way.
Pssing around with all of that just sounds way too time consuming, and really, not all that secure.
Without knowing exactly what programs you use, drive encryption is probably only going to slow things down a TINY bit, and using an encrypted SSD will still be tons faster than an unencrypted HDD.

If speed in a concern I'd get a Samsung M.2 950 drive.

Also, if you're a regular employee, the company should provide you with encryption standards at the very least. If you sub-contract to them, better to be safe and encrypt the whole drive, even further password protecting individual files or folders as needed.
 

Microbell

Commendable
Jun 4, 2016
34
0
1,530



Well I don't do drugs but ok. One of the programs that I use is CATIA Cad for electronic design automation which crawls on an encrypted hard drive is the main reason I don't go that method. I guess I can try it on a SSD and your correct I'm a sub contractor so no special PC's for me and the method I described above was about the best I could achieve without total drive encryption and it's more secure then you think though not totally foolproof.

 

mrmez

Splendid
So you used CATIA on an encrypted HDD? and it was really slow?
I'd at least try it on an ssd if you haven't.

I know you've already got the 850, but if you can use M.2, the Samsung 950 Pro is seriously fast. You're looking at sequential read speeds of 2,200 vs 540 for the EVO.

The Evo has a 3 year warranty, and Pro 5 year, so you should be good regardless of how you encrypt.
You should be backing up your data regularly too. Our Mac's at work backup hourly.

If your data is critical, which it sounds like it is, you should be replacing all your drives every 1-3 years.
I replace our main backup HDDs yearly, and the SSD NAS drive 3 yearly.
Our data isn't so critical and our backups work really well, so I don't bother replacing user drives until they show problems.
May seem like overkill, but losing business data for the sake of saving a couple of bucks is just dumb.
Sub contractors are the first to be let go when anything happens, don't risk losing your data the day before it's due.
 
Solution