How to implement backup security

[hamstar]

Backups should be protected so that only the user that the backup belongs to can see/import the contents.

[hamstar]

I think this is more to do with the backup method. Services like Dropbox, Amazon and git are all behind user/pass walls.

The only method we really have to worry about is with backing up to a fileshare. But again, I think the responsibility falls on the user to have a secure location to backup the data to. The fileshare should have network permissions assigned to it to allow only the user to access it.

We may need to allow a user/pass to be entered to authenticate with an access control system to be able to save the backup to the restricted folder.

[bhavicp]

The backups files could also be zipped up with a archive-level password (ie rar does this). However downside with this is that systems would need rar, and tar wouldn't work.

Other option would be to use encryption, which i believe is the best option because:

1. It's available freely
2. Easy to use, via CLI
3. Can automate
4. Less flaws then zip-level password

Available: ccrypt (-e -Kkey to encrypt with key) (-d -Kkey to decrypt with key)
gpg (The GNU Privacy guard - similar CLI as above, can also do signatures)