Threat

Usb Flash Drives a security Threat?

Progress in new technology, driven by the fall in Nand Flash price, has led to a amount of small devices that can hold a significant amount of data. The gismo that epitomises all of these is the Usb Flash Drive. In 1999 a 16Mb Usb Flash Drive cost £50 now a 4Gb Usb Flash Drive costs only £10.

Usb Flash Drives have been a great friend to businesses over the last few years, making it quick and easy to exchange data from one motor to an additional one and to carry work home to terminate without needing to haul colse to a heavy laptop. However, with flash drives being able to hold ever growing amounts of data and exchange data faster than ever, Usb flash drives are being looked at by some fellowships as one of their biggest threats to security.

Drives

The use of Usb Flash Drives in company poses three categories of risk: the contraction of a computer virus; the loss of data and the theft of data. All three of these are considerably serious: a computer virus could totally wipe out a company's It infrastructure and delete their most foremost files, if the company hasn't an productive data backup this could ruin it; if a company holds sensitive information and loses it, the company could be found to have broken the Dpa and could get fined a crippling sum of money, not to mention the damage to its reputation; if a sales someone walks out with your whole clients database and gives it to his new firm you're going to lose at least a few customers.

Fortunately there are some solutions out there to reduce the chances of businesses being a victim of one of the sad situations mentioned above.
 
1. Dismissal of Usb ports - The Dismissal of Usb ports is a rather severe reaction to this potential threat and is often a roughly difficult one to implement, a lot of firms use Usb ports for their mice and keyboards and these would all have to be changed.

2. Encryption of Usb Drives - Encryption on Usb Flash Drive can take one of two forms either a hardware encryption or software encryption. Forms of hard ware inscription may include only allowing entrance to the Usb Flash Drive after the user has authenticated his or her authority using a password, encryption certificate or biometric authentication (most generally finger print recognition but sometimes also retina recognition). The encryption of storage media can also be managed via software two examples are Microsoft's Active Directory and Novell's eDirectory, both can be set up to use certificates to data held on Usb Flash Drives.

3. Restrict entrance to foremost files on significant servers - As with all company information entrance should be given on a need to basis and taken away from employees as soon as they no longer need that access: if you're going to give someone their notice is it worth letting them have entrance while they sit it out?

4. Monitor entrance of company employees to sensitive files - Just because your employees have entrance to the data doesn't mean they have ant proprietary to do with as they please. Monitoring their behaviour with sensitive data is the best way to spot any unusual pattern and can give you time to act and stop any potential data leaks.

5. Limit size of data transferred to Usb drives- Data exchange restriction software can be used to protect sensitive files by capping the sizes of files that can be copied to a Usb Flash Drive. The file size limit naturally needs to be set to the size of the smallest sensitive files. 

6. Enforce Usb Flash Drive policies - Enforcing Usb Flash Drive Policies can go a long way to reducing the risk of accidental loss of data, policies alone aren't likely to stop a disgruntled laborer from doing any damage. Here are some policies you might want to consider: Usb Flash Drives should only be used for data exchange and not storage. Data should not be on Usb Flash Drives for over a week. Data should not be transferred to Usb flash drives without prior consent form a manager.

7. Firewalls and Anti viruses - Viruses can be contracted from Usb Flash Drives just as they can be contracted from any other type of media. To keep yourself safe make sure you have the latest updates installed for whichever antivirus software you use.

Although the Dismissal of Usb ports is the only 100% sure way of making sure Usb flash drives pose you no risk it is not a solution, the benefits of Usb flash drives are vast and getting rid of them would be a step back for computing. By being vigilant to the behaviour of company staff and using one or a variety of the safety solutions mentioned above you can protect yourself from flash drive misuse but still benefit from their versatility.

Usb Flash Drives a security Threat?

Posted in , , | No Comments