Feeds

USB drives pose insider threat

The latest 'Trojan horse'

Choosing a cloud hosting partner with confidence

Many worms have done an end run around a corporate network's perimeter security by hitching a ride on a laptop brought home by a worker. USB smart drives present a similar problem for companies and should be managed in a similar way, said Kate Purmal, CEO of U3, a maker of the U3 smart drive platform.

"The right solution for this is the management system used by the company to control the endpoints should also manage the USB ports," Purmal said. "The company should have security at each endpoint that prevents a vanilla device from off the street being plugged into the computer."

Purmal stressed that corporate security managers should not focus on a single scenario, but also consider other issues, such as protecting information on USB drives lost by employees and preventing viruses from being transported from a worker's home computer into the office on USB drives. Companies considering allowing USB drives should create policies that mandate encryption, allow centralised management of the USB ports on every computer, protect desktops with anti-virus and anti-spyware tools, and potentially adopt technology to erase data on USB drives that have been lost or stolen.

Specific industries, such as finance and healthcare, may also need to account for what data was copied to a particular USB drive, AdvancedForce's Chernavsky said.

"If you give someone permission to use a thumb drive, you need to be able to track what data they move to it," he said.

Moreover, the policies and audit functionality need to stand up to even a savvy user sitting at the keyboard, said Dor Skuler, vice president of business development for device-security software maker Safend.

"You want to make sure that the policies cannot be uninstalled," Skuler said.

However, as the attack on the credit union shows, a malicious insider is not necessary if a Trojan horse can be delivered inside the company by an unwitting employee.

Even the most trustworthy employees could fall prey to tactics such as those employed by Secure Network Technologies. A USB drive has allure for some people, not only because the data stored on the drive might pique a person's curiosity, but also because the memory can be reused.

Those twin lures of curiosity and utility, in the end, make USB drives a powerful Trojan horse, Secure Network Technologies' Stasiukonis said.

"Social engineering is always the easiest way to compromise a network, because people are typically very friendly and trusting," he said.

This article originally appeared in Security Focus.

Copyright © 2006, SecurityFocus

Choosing a cloud hosting partner with confidence

More from The Register

next story
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
You stupid BRICK! PCs running Avast AV can't handle Windows fixes
Fix issued, fingers pointed, forums in flames
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
5 critical considerations for enterprise cloud backup
Key considerations when evaluating cloud backup solutions to ensure adequate protection security and availability of enterprise data.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
How to simplify SSL certificate management
Simple steps to take control of SSL certificates across the enterprise, and recommendations centralizing certificate management throughout their lifecycle.