View Full Version : File security
kimballize
Does anyone have any suggestions about security leaks that have been created with the use of portable USB storage devices?
As it stands now anyone with physical access to a pc with files of any sort are vulnerable, just plug in the USB memory cartridge and transfer the file .
osterperson
This company should be able to help you:
http://www.esafe.com/about/contact.asp
Good luck!
jeyyu2003
you can disable the usb controller in windows. Once that is done, even if a device is connected, it won't be recognized by windows.
Nomarian
The best thing to do is to disable the USB controller in the Bios of your system and set a password to access the Bios. Even if you turn off the USB controller in Windows, you can enable it by since you have physical access to the machine. You would still need to access the machine's desktop to begin the data transfer anyways.
As always, the best thing to do is to setup passwords for each login.
TimH
With the ease of USB devices that are simply "plug-n-play" type that don't require any software like thumbdrives, there is one sure-fire method that no hacker can crack.
UNPLUG THE USB DEVICE! It's that simple;-)
whitetree
haha yeah, unplugging the usb does the trick...
but what about when you put it back on?
rabin
Hi kimballiez,
myfriend also facing similar problem,but he reslove it with file security sysytem software.u have any idea?otherwise i will give total details about this software.
cheers...
johnandreew
Decent IT administrators secure their networks behind firewalls. They install mail filters on their SMTP servers and deploy anti-virus software on all client workstations. But securing the network is not sufficient -- what happens if the users bring their own USB memory sticks and connect them to the computers at their office? A 1 Gb USB stick can sometimes hold an entire company's vital data. Within minutes or even seconds an employee has all the files they need in order to start up their own business and take all the customers with them. Alternatively, what happens if a careless user accidentally compromises the network with an infected USB stick?
-----------------------------------------------
When you do so, users cannot install a USB storage device on the computer. To assign a user or group Deny permissions to the Usbstor.pnf and Usbstor.inf files, follow these steps:
1. Start Windows Explorer, and then locate the %SystemRoot%\Inf folder.
2. Right-click the Usbstor.pnf file, and then click Properties.
3. Click the Security tab.
4. In the Group or user names list, click the user or group that you want to set Deny permissions for.
5. In the Permissions for UserName or GroupName list, click to select the Deny check box next to Full Control, and then click OK.
Note In addition, add the System account to the Deny list.
6. Right-click the Usbstor.inf file, and then click Properties.
7. Click the Security tab.
8. In the Group or user names list, click the user or group that you want to set Deny permissions for.
9. In the Permissions for UserName or GroupName list, click to select the Deny check box next to Full Control, and then click OK.
If a USB Storage Device Is Already Installed on the Computer
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk. If a USB storage device is already installed on the computer, set the Start value in the following registry key to 4:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
When you do so, the USB storage device does not work when the user connects the device to the computer. To set the Start value, follow these steps:
1. Click Start, and then click Run.
2. In the Open box, type regedit, and then click OK.
3. Locate, and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
4. In the right pane, double-click Start.
5. In the Value data box, type 4, click Hexadecimal (if it is not already selected), and then click OK.
6. Quit Registry Editor.
wchua24
you could disable usb slot. or you could put security software that could prevent file transfer..
vBulletin v3.0.1, Copyright ©2000-2010, Jelsoft Enterprises Ltd.