Free techniques to block USB Ports and Drives Data Loss Prevention Products and Solutions

Why should you block USB Drives? To prevent data thefts and data losses – intentional & accidental To prevent spreading of viruses, Trojans and worms through USB devices Prevent loss of privacy and personal information Preventing others from misusing the USB ports such as using IPODs, Cameras, Cell Phones etc

To prevent data thefts and data losses – intentional & accidental

To prevent spreading of viruses, Trojans and worms through USB devices

Prevent loss of privacy and personal information

Preventing others from misusing the USB ports such as using IPODs, Cameras, Cell Phones etc

Devices Which can be misused on USB ports USB Storage Drives SD Cards Digital Cameras Memory Cell Phones External Hard Drives IPODs

USB Storage Drives

SD Cards

Digital Cameras

Memory Cell Phones

External Hard Drives

IPODs

Possible ways of copying data through USB devices Copy/Cut Paste through windows Send To <drive:> Drag & Drop Copy Con from DOS XCopy from DOS Save as to USB devices Creating a new file in USB and copying the content Any process or program which copies to a USB drive or device

Copy/Cut Paste through windows

Send To <drive:>

Drag & Drop

Copy Con from DOS

XCopy from DOS

Save as to USB devices

Creating a new file in USB and copying the content

Any process or program which copies to a USB drive or device

Five ways of blocking USB drives Using commercial and free software for blocking USB ports Through windows registry tweaks By making changes In BIOS Using glue to block the USB Ports Physically removing USB ports from your PC

Using commercial and free software for blocking USB ports

Through windows registry tweaks

By making changes In BIOS

Using glue to block the USB Ports

Physically removing USB ports from your PC

Using Commercial & Free Software to Block USB drives You can selectively block devices No knowledge of registry etc required to, just install the software and your USB ports are secured Monitoring of drives is possible Printers and Other necessary devices still works Costs Money Free software could be malicious sometimes Free and non reliable commercial software might make your system unstable Pros Cons

You can selectively block devices

No knowledge of registry etc required to, just install the software and your USB ports are secured

Monitoring of drives is possible

Printers and Other necessary devices still works

Costs Money

Free software could be malicious sometimes

Free and non reliable commercial software might make your system unstable

Through windows registry tweaks Blocks all kinds of USB drives Its free to implement Only basic knowledge for windows registry Printers and Other necessary devices still works You can not even use your own USB thumb drive Device Monitoring is not possible Mistakes in registry editing can make system unstable Knowledge of registry editing is required A user with administrative privilege can bypass this technique Pros Cons

Blocks all kinds of USB drives

Its free to implement

Only basic knowledge for windows registry

Printers and Other necessary devices still works

You can not even use your own USB thumb drive

Device Monitoring is not possible

Mistakes in registry editing can make system unstable

Knowledge of registry editing is required

A user with administrative privilege can bypass this technique

How to block USB with windows registry? Click on start and then click on run Type regedit in the textbox that appear and click ok A registry editor window will open up, where you have two panels each on the right and left Click on HKEY_LOCAL_MACHINE on the left panel, a list will open up Click on SYSTEM on the opened up list and then click on CurrentControlSet in the new branch of list that opens up (see the picture 1.1 below), then again follow the same with services until you can see a usbstor in the list Click on usbstor, and then double click on start on the right pane, a pop will appear as shown in the picture 1.2 below Change the value field to 4, select the radiobutton to hexadecimal (if it is not already selected) and press ok

Click on start and then click on run

Type regedit in the textbox that appear and click ok

A registry editor window will open up, where you have two panels each on the right and left

Click on HKEY_LOCAL_MACHINE on the left panel, a list will open up

Click on SYSTEM on the opened up list and then click on CurrentControlSet in the new branch of list that opens up (see the picture 1.1 below), then again follow the same with services until you can see a usbstor in the list

Click on usbstor, and then double click on start on the right pane, a pop will appear as shown in the picture 1.2 below

Change the value field to 4, select the radiobutton to hexadecimal (if it is not already selected) and press ok

How to block USB with windows registry? Finding ControlSet key using regedit – Picture 1.1

How to block USB with windows registry? Changing USBSTOR – Picture 1.2

Blocking USB Port Through BIOS Blocks USB Ports Completely Its free to implement Only basic knowledge for BIOS Settings is required USB Port is completely blocking and nothing can be connected to the USB Ports Device Monitoring is not possible Necessary devices like printers also won’t work A user can still reset the USB blocking settings if BIOS is not password protected Pros Cons

Blocks USB Ports Completely

Its free to implement

Only basic knowledge for BIOS Settings is required

USB Port is completely blocking and nothing can be connected to the USB Ports

Device Monitoring is not possible

Necessary devices like printers also won’t work

A user can still reset the USB blocking settings if BIOS is not password protected

How to block USB Ports through BIOS? Boot your pc Press F2 or whatever shortcut is there on your PC to access the bios Go to advanced tab on the bios and look for USB Port You should be able to find out an option for disabling USB ports Save and the bios settings and reboot the machine

Boot your pc

Press F2 or whatever shortcut is there on your PC to access the bios

Go to advanced tab on the bios and look for USB Port

You should be able to find out an option for disabling USB ports

Save and the bios settings and reboot the machine

Few other Silly techniques to block USB drives Using glues to block the USB ports Carefully fill all your USB ports with a thick epoxy adhesive . But, this technique might damage your system and you will not be able to use even the necessary USB functions such as printers which are connected to USB ports etc. This method is highly not recommended. Physically removing USB ports from your PC Although a bit difficult, but you might also consider physically removing USB ports from your motherboard. If the USB port is onboard, then, there is a very high risk that you end up damaging your motherboard because you will have to use a soldering machine to carefully take out the USB ports. This technique faces the same disadvantages as blocking the USB ports with glues because you will never be able to use your USB ports for necessary functions such as printing etc.

Thank you Visit us at http://blog.dataresolve.com to read other articles on Data Loss Prevention

Visit us at

http://blog.dataresolve.com

to read other articles on

Data Loss Prevention