Sunday Observer Online Ad Space Available HERE

Home

Sunday, 26 October 2008

Untitled-1

observer
 ONLINE


OTHER PUBLICATIONS


OTHER LINKS

Marriage Proposals
Classified
Government Gazette

Combating the security threats of pen drives

Pen Drives, the high capacity movable storage device of the computer, is not just a boon for the IT and other business sectors, but it has been proved to be the most dangerous device to harm any organisation. While data security and confidentiality matter the most in any government and private organisation, a pen drive is the most useful device for the corporate spies or hackers to take data easily and misuse it.

Among the threats for an organisation associated with a pen drive, the most important is transmission of viruses. As most of the antivirus software fail to detect the viruses in a pen drive or safeguard the computer, a computer can be easily infected by a virus transmitted through pen drive. This portable device can be responsible for data loss and data theft. In corporate sectors, many employees have beenfound taking malicious software, video clips, computer games, MP3 files, pornography pictures and other inappropriate files violating corporate rules.However, restricting a pen drive in a corporate environment is next to impossible.

They are small enough in size to be carried stealthily and also they are getting cheaper everyday. These days, the pen drives are available that can not be identified by a metal detectors as well. Hence, the security threats involved with a pen drive is hard to combat with. However, some measures can be chosen to deal with the serious issue.

Educating the user

It is hard to stop the gadget junkies from using pen drives as it has become the `must-have` for them. And sometimes, pen drives become essential for any work progress. But it is possible for the office authorities to educate the users on the use of pen drive while taking data to their home out of the office or bringing any data to the office.

Lock desktop security:

Many companies are adopting the security policy of locking the computer automatically when not in use for a few minutes. Though it is a perfect alternative, using a pen drive or misuse of data are possible when the computer is unattended by someone. The interval of locking can be reduced in a high risk environment. In a workstation with access to sensitive data the lock desktop can prevent misuse of pen drive to a large extent.

Rigorous anti-virus policies

The company or the corporate authorities should configure antivirus software to scan and detect every attached drive and removable media. The users of every interface should be trained to scan the files before opening them. This can reduce the effect of the virus in case it is transmitted through a pen drive.

Restriction of USB ports

In the corporate environment or any other place the USB ports of the desktop computers can be made disabled to prevent the use of pen drive by the outsiders. In place of the USB port, the legacy port can be used for using the peripherals. Even software can be used to restrict the access of end user to the I/O devices and many other plugs and play devices.

Use of secure devices

Companies should take care of issuing only secure devices to the employees and also these devices should be approved to purchase. The users having potential access to sensitive data should be allowed the devices with security features and they should be trained to use all the security features

It is barely possible to work in any corporate environment without the help of a pen drive. But looking at the scenario, where the large business sectors are facing potential threats due to pen drives everyday, some of the above security measures can be adapted to, at least, reduce the hazards of misusing pen drives.

Revolutionizing the storage device with pen drives

Pen drives are the portable USB device with flash memory to store or transfer audio, video and data files from hard disc of one computer to another. As the name suggests the device resembles a pen or pencil in its shape and size and its memory is built in drive. These data storage devices are equipped with a large amount of memory space.

Generally considered as the improved version of older floppy or recent compact disc, pen drives with smallest memory space can also store a large amount of data. Any common type of files that can be loaded into a floppy or CD can be transferred to a pen drive. Apart from that pen drives are able to house photos, spreadsheets, word documents, music tracks, movie clips, etc.

The pen drives are simple to use. One end of the pen drive is designed to connect to the USB connector of the desktop or the laptop to get the pen drive activated.

The files are easily dragged and dropped into the memory and can be forwarded for further use. The function of the pen drives depends on the operating system available. Pen drives prove to be an easy and practical way of transmission of data if the laptop or desktop is constructed with an USB port and the operating system is compatible.

The data and information are stored in the memory of a pen drive in the form of an array. Memory chip is the backbone of pen drives which enables multiple read write and reliability.

Pen drives are one of the products of the faster changing technology. They are constantly changing in their shapes, sizes and storage capacity. The pen drives also differ in features. Some pen drives come with in built rechargeable batteries and they get charged when the pen drive is connected to the USB port of the computer.

Almost all pen drives are developed with the built in sound recorder. They even give the provision of MP3 playback using a earphone but lack the clarity of sound. Some pen drives come with mini LCD displays that help in browsing the MP3 songs stored in them.The technology of pen drives are changing just as the mobile phones and now the pen drives are available with micro sized one pixel cameras.

Sooner the market is going to find pen drives with LCD based view finders.The latest version of the pen drive is gaining popularity and almost every computer user today is found with one of some capacity or other.

Is it a necessary evil?

Technology has always been a necessary evil. The more the technology develops, the greater are the chances of its being abused. Pen drive, the small storage device used to store and transfer data to and from computers, has gained popularity due to its functionality. It has got thousands of uses. Ease of use and convenience is the prime reason of its popularity.However, like many other equipment, pen drives are also a necessary evil and pose a potential security threat to the technology world. When placed in wrong hands, the portability and high storage capacity of the pen drive can be hazardous.The device has evolved as a threat to the corporate and other organizations where security of data is given utmost importance.The threats that are associated with pen drives are seri

ous. Some of them are listed below:

Stealing of data

Apart from the defence department, the corporate sectors all over the world are under the threat of data theft for espionage. There is no dearth of incidents where spies, and hackers are employed to steal data. A pen drive gives ample opportunity for the theft from an unattached or unlocked PC with a USB port. It is easy to access data and steal information like client list, research data or any other information. The hackers can even bring the software with a pen drive allowing the user to hack password or other confidential information.

Spreading virus

Earlier, floppy drives and emails were considered as main source of virus to computers. However, there has been anti-virus software developed to counter virus and protect the PC. But with pen drive it is difficult to check the virus with the safeguard as the device can bypass the protection. It is almost impossible to defend against the viruses unless and until you have strong anti-virus policies or you are not scanning all files in your network.

It is easy for a virus writer to corrupt the entire network of a corporate environment with a pen drive.

Plant malicious software

Virus apart, it is not difficult for anyone to take any spamware and plant it in the PC. In corporate sectors the threat multiplies when employees use pen drives to bring unauthorized software or any other data such as software pranks, sharewares, mp3 files, pornography pictures, video clips and other inappropriate data that is against the corporate ethics. As pen drives allow more space, it is easy to bring bulky software which is impossible with a floppy. Situation worsens when the software is used to crack password.

Causing data loss

Pen drives barely allow any security system in terms of password or any other built in security feature. So it is more likely that if a person loses a pen drive, the data inside it can be accessed by anyone. If it falls into wrong hands he or she can misuse it. A pen drive can be easily stolen or misplaced and the data stored inside it can be easily manipulated. There is large demand for pen drives with some security systems such as finger-print reader or protective software.

There has been a conscious protest against pen drives in many private and government organisations. Though it is a convenient device for the productive brains, it has proved to be beneficial for the thieves as well. Pen drives are small in size and have greater capacity to store information.

Hence the thieves can carry the device stealthily in pockets and take information.Unless and until any drastic step is taken against it, the security of any organization can be in stake. Even a visitor can retrieve data easily from an open computer. Considering these threats, some companies have taken some protective measures for their security by banning pen drive inside company premises.It can reduce the threat to some extent.

EMAIL |   PRINTABLE VIEW | FEEDBACK

Gamin Gamata - Presidential Community & Welfare Service
srilankans.com - news & information
http://www.victoriarange.com
www.ckten.com.my
Ceylinco Banyan Villas
www.millenniumvilla.com
www.deakin.edu.au
LANKAPUVATH - National News Agency of Sri Lanka
www.helpheroes.lk/
www.peaceinsrilanka.org
www.army.lk
www.news.lk
www.defence.lk
Donate Now | defence.lk
www.apiwenuwenapi.co.uk
 

| News | Editorial | Financial | Features | Political | Security | Spectrum | Impact | Sports | World | Plus | Magazine | Junior | Letters | Obituaries |

 
 

Produced by Lake House Copyright © 2008 The Associated Newspapers of Ceylon Ltd.

Comments and suggestions to : Web Editor