USB sticks post security risk

[Security]

A good report at the BBC highlights the dangers of USB pen drives as a security risk.

It used to be the case that businesses were warned about use of floppy-disks & diskettes, because it would be so easy for these to be removed from the office - but now USB pen drives/memory sticks are raising the same concern, and especially because of the large amount of data they can store.

If you're running a business that uses USB sticks commonly around the office, it's definitely worth looking at encryption options.

http://news.bbc.co.uk/1/hi/technology/4946512.stm

Smart phones, iPods and USB memory sticks are posing a real risk for businesses, warn security experts.

Just over half of companies take no steps to secure data held on these devices, found a UK government-backed security survey.

Now security firms are developing ways to help firms control access to the confidential data held on the gadgets.

They are also working on ways to stop the devices being used by viruses as a way to bypass other digital defences.

[LyricB]

Wow, I hadn't even thought of this but it makes total sense. USB sticks can carry so much data, and they're so compact that it would be easy hide heading out the door. Scary!

[PhilosophiX]

Yes, they are a danger - but on the flip side, they (pen drives) are also being used for the very opposite purpose. I've saw some nifty permutations where a pendrive acts as a key - only by sticking it in the USB port can you access your data - or only by sticking it in the port and pressing your finger on the fingerprint reader built into the pendrive, can you access your data. I guess its a double edged sword.

[brian]

I think it's safe to say that if you record backups or sensitive data to *any* media - whether CD, DVD, floppies - or USB Pen Drives - then you need to use a little common sense and awareness to ensure they are stored in a safe place.

In a business environment, that means not in a place easily accessible by members of the public - even customers - who could accidentally or purposefully leave with something.

[ninikins]

maybe the pen can just be used as 'a 'storage option and not as the sole solution..its always a bit silly to just bet on one horse

[OneofaKind]

Originally Posted by ninikins

maybe the pen can just be used as 'a 'storage option and not as the sole solution..its always a bit silly to just bet on one horse

I'm inclined to agree with you.

One option that is becoming increasingly common is online backup services.

[shaneseyt]

Online back up options can even have their flaws. I am not sure I have ever heard of any one security plan for anything that is fool proof. Best to have several plans in action, in case one fails, there is a safety net.

[megaman]

Is this any different to burning to CD though?
Any form of storage is a risk, including CD's and USB drives.
It really comes down to human diligence

[Security]

Exactly the point - but it's all too easy for people to overlook that.

I remember working in a small office where customer records and passwords were just left lying around, even in areas where customers had access to. Pretty amazig, really.

[vicki2]

The whole password thing in offices amazes me ..people are so non-chalant about it and all it takes is one disgruntled person to really foul things up!