RE: removable media security

["Tim Sceurman" <tsceurman () pennhighlands edu>]

Scott,
 
I don't know if this will answer your exact question, but there is software out there that gives very fine control over 
removable media.  Reflex Disknet Pro can allow you to set permissions so that a user can't access any executable file 
from removable media, and can auto AV scan devices.   I work for a college, so this has been an idea we've been kicking 
around as well.
 
Tim

        -----Original Message----- 
        From: SMiller () unimin com [mailto:SMiller () unimin com] 
        Sent: Fri 7/30/2004 1:20 PM 
        To: security-basics () securityfocus com 
        Cc: 
        Subject: removable media security
        
        





        Been thinking about security re USB flash drives, whether to require
        encryption, and how the risk represented by such devices compares with that
        posed by other removable media.  I'm aware that the general subject has
        been discussed in several threads on this list.  This train of thought led
        to wondering whether any software exists to monitor and log file writes to
        removable drives.  I understand that it could be difficult to make an
        absolute programmatic determination of what drives are removable, but an
        approximation (in Windows, perhaps any drive other that C:) should be easy.
        Anyone know of or employing such a tool?  Other thoughts on the subject?
        Thanks.
        
        Scott
        
        
        ---------------------------------------------------------------------------
        Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
        any course! All of our class sizes are guaranteed to be 10 students or less
        to facilitate one-on-one interaction with one of our expert instructors.
        Attend a course taught by an expert instructor with years of in-the-field
        pen testing experience in our state of the art hacking lab. Master the skills
        of an Ethical Hacker to better assess the security of your organization.
        Visit us at:
        http://www.infosecinstitute.com/courses/ethical_hacking_training.html
        ----------------------------------------------------------------------------