USB security vulnerability



Just read this over at eweek…. USB devices can post a security risk.

There’s an “age old” adage in computer security (well – as far as computer security it’s old…) You can control a machine if you have physical access to it. This is yet another example. Essentially it sounds as though an attacker can gain administrative access by inserting a specially “programmed” usb key which can cause a buffer overflow in the USB device driver.

From the article “demonstrating a USB storage device that is programmed to automatically copy recently accessed files when inserted into a Windows PC.” This could be very bad news in certain environments. No need to site trying to break into the system, just plug it in and the recently access files are copied over. This is “hollywood movie style hacking/cracking” it wouldn’t seem to get much easier.

If you’re concerned about this kind of data theft, there are options though. Devicelock is one. Safend’s USB port protector is another. It is still worth making sure to restrict unauthorized access to “valuable”, data rich machines. Products like Devicelock and Safend’s protectors can slow down and make more complicated data theft, or tampering with a system, but it cannot be prevented. Give an individual enough time with physical access to a machine and they will get in.

Related Posts

Blog Traffic Exchange Related Posts
  • How to Remove SystemVeteran | Removal Guide SystemVeteran is (yet another) variation from the wini family of rogue antivirus applications. Their last one prior to this was BlockProtector (BlockProtector Removal Guide) but it is a VERY long lived family and they are churning out one variation every two to three days. Most of these have the same......
  • List of Open Source software Packages The following is long, but likely not complete. This is a list of open-source software packages: Computer software licensed under an open-source license. Software that fits the Free software definition may be more appropriately called free software; the GNU project in particular objects to their works being referred to as......
  • Vista UAP (User Account Protection) - too much? First let me tell you I have not seen first hand Microsoft's Vista UAP (User Account Protection) I cannot then claim firsthand experience with it, the following is and will be based on what I have read plus how it relates and compares to linux and "run as" functionality. George......
Blog Traffic Exchange Related Websites
  • Hackers Are At Work Both Online And Offline The overall focus of data security SMEs and even private parties when it comes to protection of their private information is on the virtual world, not the real world. But there are plenty of instances of hackers both online and offline to successfully intrude into an institution, government, company or......
  • Attempting a Digital Media Overhaul: Music, Movies, and Television Any Time, Any Place I've been thinking about overhauling my use of technology lately. Most of that is in the form of media consumption - music, television, movies, books, etc. (Side note: This seems to be a good place to plug my article on Saving Money on Movies, Music, Television, and Books - plugged!)......
  • Hard Drive Data Recovery Guide   The same principle applies to Mac users too, there are tools that will help you recover deleted and lost files very easily.   Hard Drive Data Recovery From Crashed Hard Drive   It is trickier to recover data from a crashed drive, but by no means is it......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site