Drive-based threats may pose a larger risk to your business than drive-by attacks -- and USB drives may pose the largest threat of all.
Drive-based threats may pose a larger risk to your business than drive-by attacks -- and USB drives may pose the largest threat of all.Threats carried by USB drives, and brought inside your network by employees -- either deliberately or, more likely, in complete ignorance of the risk -- continue to worsen.
Unfortunately, with Auto-Run malware, the crooks are ready to go too.
The Pentagon's solution to its flash drive problem was to ban the drives for a year. Not a bad solution -- and one every business should consider, at least for as long as it takes to put into place a proper removable storage device policy and monitoring tools.
That policy should include:
Clear and straight forward delineations of what drives can and cannot be plugged into your system. In addition to flash drives, removable memory in cameras, phones, as well as music players and other USB devices should be included in the policy.
Under no circumstances should unfamiliar USB drives and devices be introduced into the network. Even if the drive comes from a seemingly reputable source, it can carry malware, as recipients of an infected IBM flash drive tchotchke learned to their dismay.
Finally, give some serious thought and budget consideration to implementing business-wide port and device monitoring. You and your security manager should know every time a device is introduced into a port, whether in compliance with your USB device policy or not.
How Enterprises Are Attacking the IT Security EnterpriseTo learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
2017 State of IT ReportIn today's technology-driven world, "innovation" has become a basic expectation. IT leaders are tasked with making technical magic, improving customer experience, and boosting the bottom line -- yet often without any increase to the IT budget. How are organizations striking the balance between new initiatives and cost control? Download our report to learn about the biggest challenges and how savvy IT executives are overcoming them.