USB Drive Security Risks

Preview USB drive trend Risks of storing data in USB drive What we need to do How to do it Why we should do it now conclusion

USB drive trend

Risks of storing data in USB drive

What we need to do

How to do it

Why we should do it now

conclusion

USB thumb drive USB memory stick USB jump drive First sold in year 2000 weigh less than 2 ounces Intended to make life easier for users History

USB thumb drive

USB memory stick

USB jump drive

First sold in year 2000

weigh less than 2 ounces

Intended to make life easier for users

Wi-Fi 2) Digital Camera 3) MP3 Player/IPOD 4) Email 5) Floppy Disks 6) CDR, CDRW, DVD-RW 7) Remote control software Different ways to get data out. Alternatives

Wi-Fi

2) Digital Camera

3) MP3 Player/IPOD

4) Email

5) Floppy Disks

6) CDR, CDRW, DVD-RW

7) Remote control software

Small physical size More durable Fast Speed --3MB/s Big capacity Low price More functionality Plug-and-Play -1million read & write cycle Why Choose USB ?

Small physical size

More durable

Fast Speed --3MB/s

Big capacity

Low price

More functionality

Plug-and-Play

Greatest benefit = Greatest security risk !

85million units sold in 2007 Only few buyers thought about the drives’ security implications. -Gartner

85million units sold in 2007

Only few buyers thought about the drives’ security implications.

-Gartner

According to security firm Vontu >50% of 480 surveyed tech-professionals’ USB drives contain unprotected confidential information 1 USB drive is lost at work each month Unlike laptop, storage devices are small and cheap. Many employees do not report them missing as they would a laptop.

>50% of 480 surveyed tech-professionals’ USB drives contain unprotected confidential information

1 USB drive is lost at work each month

Unlike laptop, storage devices are small and cheap. Many employees do not report them missing as they would a laptop.

Corruption of data Virus Transmissions Loss of media Loss of confidentiality Risks

Corruption of data

Virus Transmissions

Loss of media

Loss of confidentiality

Corruption of data Occur if the drive is uncleanly dismounted computer usually has no way of knowing when USB memory sticks are going to be removed The OS will attempt to handle unexpected disconnects as best it can, so often no corruption will occur. Risks

Corruption of data

Occur if the drive is uncleanly dismounted

computer usually has no way of knowing when USB memory sticks are going to be removed

The OS will attempt to handle unexpected disconnects as best it can, so often no corruption will occur.

Corruption of data Virus Transmissions Whenever files are transferred between two machines there is a risk that viral code or some other malware will be transmitted, and USB memory sticks are no exception. April 2008, a batch of HP USB flash drives were shipped with a virus. November 2007, Maxtor USB Hard Drives Ship Virus Infected Risks

Corruption of data

Virus Transmissions

Whenever files are transferred between two machines there is a risk that viral code or some other malware will be transmitted, and USB memory sticks are no exception.

April 2008, a batch of HP USB flash drives were shipped with a virus.

November 2007, Maxtor USB Hard Drives Ship Virus Infected

Corruption of data Virus Transmissions Loss of Media A drawback to the small size is that they are easily misplaced, left behind, or otherwise lost. All data is lost too Risks

Corruption of data

Virus Transmissions

Loss of Media

A drawback to the small size is that they are easily misplaced, left behind, or otherwise lost.

All data is lost too

Corruption of data Virus Transmissions Loss of Media Loss of Confidentiality If the stick then finds its way into the hands of a competitor, then the company has suffered a much greater loss than simply the replacement cost of the drive. A $25 thumb drive can contain $25 million worth of information on it Risks

Corruption of data

Virus Transmissions

Loss of Media

Loss of Confidentiality

If the stick then finds its way into the hands of a competitor, then the company has suffered a much greater loss than simply the replacement cost of the drive.

A $25 thumb drive can contain $25 million worth of information on it

The personal information of 6,500 current and former University of Kentucky students was reported stolen May 26 after the theft of a professor's flash drive. The drive has not been recovered. April 2006, Flash drives holding sensitive and classified military information turned up for sale at a bazaar near Afghanistan. Investigators recovered many drives, but an unknown number are still missing. In October, Wilcox Memorial Hospital in Hawaii, informed 120,000 current and former patients that a flash drive containing their personal information — names, addresses, Social Security numbers and identifying medical record numbers — was lost. It has yet to be recovered. Recent Incidents

The personal information of 6,500 current and former University of Kentucky students was reported stolen May 26 after the theft of a professor's flash drive. The drive has not been recovered.

April 2006, Flash drives holding sensitive and classified military information turned up for sale at a bazaar near Afghanistan. Investigators recovered many drives, but an unknown number are still missing.

In October, Wilcox Memorial Hospital in Hawaii, informed 120,000 current and former patients that a flash drive containing their personal information — names, addresses, Social Security numbers and identifying medical record numbers — was lost. It has yet to be recovered.

USB Hacksaw Any files from the USB drive connected to the PC will be email/upload to a remote location. Gone … in a Flash

USB Hacksaw

Any files from the USB drive connected to the PC will be email/upload to a remote location.

Gone … in a Flash

4 easy steps Solutions

Corruption of Data dismount the device according to the OS documentation.

dismount the device according to the OS documentation.

Virus Transmission Some USB memory sticks include a physical switch that can put the drive in read-only mode. keep the host computer from writing or modifying data (including viruses) on the drive If files need to be transferred from an un-trusted machine, scan the USB drive after copying files from it.

Some USB memory sticks include a physical switch that can put the drive in read-only mode.

keep the host computer from writing or modifying data (including viruses) on the drive

If files need to be transferred from an un-trusted machine, scan the USB drive after copying files from it.

Loss of Media attaching flash drives to keychains, necklaces and lanyards.

attaching flash drives to keychains, necklaces and lanyards.

Loss of Confidentiality avoidance no private data is stored on the drive severely limiting encryption. allows any data to be stored on the drive but renders the data useless without the required password,

avoidance

no private data is stored on the drive

severely limiting

encryption.

allows any data to be stored

on the drive but renders the

data useless without the

required password,

Encryption fingerprint scanning USB drive run your finger over the scanner and it will be ready to read your files. Very expensive Pre-installed encryption software Cost 2X more encryption software Commercial Free

fingerprint scanning USB drive

run your finger over the scanner and it will be ready to read your files.

Very expensive

Pre-installed encryption software

Cost 2X more

encryption software

Commercial

Free

easy and fast encrypt files/folders. 128 bits encryption

easy and fast

encrypt files/folders.

128 bits encryption

On-the-fly (Real Time) Encrypt Automatically encrypt virtual partition 256 bit AES (military-grade) encryption

On-the-fly (Real Time)

Encrypt Automatically

encrypt virtual partition

256 bit AES (military-grade) encryption

Can’t completely eliminate all the risk

Can’t completely eliminate all the risk

Significantly reduce all the risks Kick-back and relax If You Do It will be too late when you lost the drive or your drive got infected by virus. Recognize the thumb-drive threat and take action If You Don’t

Significantly reduce all the risks

Kick-back and relax

It will be too late when you lost the drive or your drive got infected by virus.

USB drive will become more popular and security incidents will occur more often 4 steps to reduce Data corruption Virus transmissions Loss of media Loss of confidentiality Conclusion

USB drive will become more popular and security incidents will occur more often

4 steps to reduce

Data corruption

Virus transmissions

Loss of media

Loss of confidentiality