Endpoint security: Managing USB-based removable devices with the advent of portable applications

InfoSecCD'07: Proceedings of the 4th Annual Conference on Information Security Curriculum Development

Volumn , Issue , 2007, Pages 155-159

  Fabian, Michael ^a  

^a KENNESAW STATE UNIVERSITY   (United States)

Author keywords

Endpoint security; iPod; Network security; PDA; Removable media; USB devices; Virus

Indexed keywords

ENDPOINT SECURITY; IPOD; PDA; REMOVABLE MEDIA; USB DEVICES;

COMPUTER VIRUSES; CURRICULA; INTERNET; PERSONAL DIGITAL ASSISTANTS; VIRUSES;

NETWORK SECURITY;

EID: 62949173483     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1409908.1409935     Document Type: Conference Paper

References (48)

1. Gozor Finished payload. (2007, May 30). [MsgID 70406] Message posted to http://forums.hak5.org/index.php/topic.6608.msg70406.html#msg70406
2. Best practices for managing and enforcing USB security. (2006, June 22). Altiris, Inc. Retrieved June 27, 2007 from http://www.altiris.com/upload/wp- bestpracticesformanagingusbsecurity.pdf
3. Beware of strangers bearing iPods. (2005, June 25). New Scientist. Retrieved July 1, 2007 from http://www.newscientisttech.com/article/mg18625055. 500.html
4. Effective IT policies: Acceptable use policy and the threat of lifestyle devices, (n.d.) Centennial Software, Inc. Retrieved June 27, 2007 from http://www.devicewall.com/downloads/Effective-IT-Policies-A UP-threat-of- lifestyle-devices.pdf
5. Data breaches: Is anyone safe?. (2005, July). Information Management Journal. 10. Retrieved June 30, 2007, from MasterFJLE Premier database.
6. Garretson, C. (2007, April 16). Five ways to prevent data theft by iPod. Network World, 24(15), 16. Retrieved June 30, 2007, from MasterFILE Premier database.
7. Giannacopoulos, P. (2006, March 3). Review: Latest Devicewall geared to SMBs. SearchSecurity.com. Retrieved July 1, 2007 from http://searchsecurity.techtarget.com/originalContent/0,289142,sid14-gci1170609. 00.html
8. Hak.5 Episode 2×02, Instant USB password recovery tool ("The USB Switchblade"). Retrieved June 27, 2007 from http://wiki.hak5.org/wiki/ Episode-2x02#Instant-USB-Password-Recovery-Tool-.28The-.22USB-Switchblade.22.29
9. Higgins, K, (2007, April 20). USBs' giant sucking sound. Dark Reading. Retrieved July 1, 2007 from http://www.darkreading.com/document. asp?doc-id=122252
10. Jabra (n.d.). Installing Backtrack to a USB stick or hard drive. Retrieved July 1, 2007 from http://www.offensive-security.com/documentation/ backtrack-hd-install.,pdf
11. Lundquist, E. (2006, April 24). USB security: A sticky situation. eWeek, 23(11), 10. Retrieved June 30, 2007, from Computer Source database.
12. Mellor, C. (2007, March 21). Los Alamos data leaks due to 'gross mis-management'. Techworld. Retrieved July 1, 2007 from http://www.techworld.com/storage/features/index.cfm?featureID=3247&pagtvpe= all
13. Poli, X. (2006, July 6) La sécurité des clés USB mise à mal par USBDUMPER, SecuObs.com, Retrieved July 1, 2007 from http://www.secuobs.com/news/07062006-sstic-usbdumper.shtml
14. Reardon, M (2005). Securing data from the threat within. CNetNews.com, Retrieved July 1, 2007 from http://news.com.com/ Securing+data+f'rom+the+threat+within/2100-7347-3-5520016.html
15. Rothke, B. (2006, July 17). Keeping pace with emerging endpoint security technologies. Searchsecurity.com. Retrieved July 1, 2006 from http://searchsecurity.techtarget.eom/tip/0,289483.sid14-gci1193887.00.html
16. Scheier, R. (2006, January 23). Endpoint security without the pain. Computerworld, 40(4), 21-22. Retrieved June 30, 2007, from Computer Source database.
17. Spangler, T. (2006, December). Don't spring a data leak. Baseline, 7-9. Retrieved June 30, 2007, from Computer Source database.
18. Stasiukonis, S. (2006, June 7). Dark Reading. Retrieved June 27, 2007 from http://www.darkreading.com/document.asp?doc-id=95556&WT.svl= column1-1
19. Strom, D. (2006, July 24). Getting a lock on endpoints. eWeek, 23(29), 20. Retrieved June 30, 2007, from Computer Source database.
20. Thelander, M. (2005, September/October). The great wall syndrome, IT Professional, 7(5)25-30. Retrieved June 30, 2007 from ProQuest ABI Inform Complete database.
21. Toto, G. (2007). Seven signs that it's time to automate and consolidate IT policy enforcement. BigFix, Inc. Retrieved July 1, 2007 from http://www.bigfix.com/resourcecenter/seven-signs.pdf
22. Usher, Abe (2005), Sharp ideas: podslurping. Sharp Ideas, Inc. Retrieved June 27, 2007 from http://www.sharp-ideas.net/pod-slurping.php
23. Vijayan, J. (2006, September 25), USB memory sticks pose new dangers. Computerworld. Retrieved July 1, 2007 from http://www.computerworld.com/ action/article.do?com.mand=view ArticleBasic&articleId=9003592
24. Westin, K. (2006a, October 6). USB hacks: USB dumper. Retrieved June 27, 2007 from http://www.usbhacks.com/2006/10/06/usb-dumper/
25. Westin, K. (2006b, October 7). USB hacks: USB switchblade. Retrieved June 27, 2007 from http://www.usbhacks.com/2006/10/07/usb-switchblade/
26. Westin, K. (2006c, October 7). USB hacks: USB hacksaw. Retrieved June 27, 2007 from http://www.usbhacks.com/2006/10/07/usb-hacksaw/
27. Westin, K. (2006d, October 5). USB hacks: Mitigation. Retrieved June 27, 2007 from http://www.usbhacks.com/2006/10/05/how-to-disable-usb-and-cd-rom-on-a- windows-network-using-use-group-policy
28. Workplace data theft common in U.K. (2007, January). Information Management Journal. 18, Retrieved June 30, 2007, from MasterFILE Premier database.
29. http://www.python.org
30. http://www.senfocre.com
31. http://www.hak5.org
32. http://www.u3.com
33. http://wiki.hak5.org/wiki/USB-Switchblade
34. http://wiki.hak5.org/wiki/USB-Hacksaw
35. http://insecure.org/nm.ap
36. http://www.wireshark.org
37. httos://foundstore.com/index.htm?subnav=resources/navigation. htm&subcontent=/resources/proddesc/superscan.htm
38. http://www.portableapps.com
39. http://www.pegtop.net/start
40. Episode 2×10, available at http://www.hak5.org/episodes/
41. http://www.truecrypt.org/
42. http://www.gtopala.com/
43. http://www.baremetalsoft.com/baregrep
44. www.knoppix.org
45. http://www.remote-exploit.org/backtrack.html
46. http://www.metasploit.com
47. http://www.e-fense.com/helix
48. http://www.devicewall.com.