iPods are the latest security risk

Thumbs down from Gartner

  • alert
  • submit to reddit

Apple's trendy iPod players could be a serious security risk, Gartner claims. The analyst firm says the devices could be used to sneak out valuable corporate information or introduce computer viruses into corporate environments.

Gartner expresses similar concerns about portable FireWire hard drives, such as those from LaCie or Toshiba, and USB hard drives or keychain drives, digital cameras with smart media cards, memory sticks (we've been there already), compact flash and other memory media.

In a research note, Gartner analyst Ruggero Contu writes: "The use of unauthorised portable storage devices poses many dangers, not least for the malicious code that they can introduce. High data capacity and transfer rates, and broad platform support mean that a Universal Serial Bus (USB) or FireWire (IEEE 1394) device has the capacity to quickly download much valuable corporate information, which can be easily leaked to the outside world.

"This underlying vulnerability has existed since the release of Microsoft Windows 2000, the first widely deployed operating system able to mount a USB storage device automatically," he adds.

Firms should think about disabling universal plug and play functions after installing desired drivers, to restrict their use to authorised devices, Gartner advises. Host-based intrusion prevention software can be used to control the use of USB ports, and we can expect this function to feature prominently in sales pitches from SecureWave, PrevX, Cisco and the like over coming months. ®

Related stories

Dirty rotten inducers - the law the IT world deserves? [criminalizing the iPod]
Memory sticks are the latest security risk
UK reseller unveils 'video iPod'


Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.