in

This Blog

Syndication

Tags

AlertBoot Endpoint Security

Stop Data Theft: Choice Of Superglue Or Port Blocking Software?

I still chuckle at reports of companies supergluing computer ports shut.  Now, when I say ports, I don’t mean internet ports, but your computer’s physical ports.  You know, the holes where you stick in your USB memory sticks, mice, and printers?  There are better methods to prevent data leakages than accidentally attaching your finger to your computer (and sheepishly asking your wife for her fingernail polish remover): port blocking software.  It’s part of the security solutions offered by AlertBoot, in addition to more ordinary offerings like hard drive encryption software.

Why Use Superglue?
Well, it’s cheap and extremely effective.  Just a little dab to a piece of plastic; apply some pressure with your fingers (on the dry side, of course); give it a couple of seconds.  Presto!  No one can use that port anymore.
The Problem With Superglue
However, there are serious limitations on what you can do.  For example, let’s say you’ve got a mouse that is connected via the USB port.  Now you have to make a decision.  Do you glue the mouse to the computer?  Because if you don’t, then you’re back to square one -- a data breach can be caused by someone copying data from the computer to a USB memory stick.  It’s just a matter of taking out the mouse and sticking in the flash drive in its place. (The tab key, arrows, and Alt commands can be used in place of the mouse to “click” and copy stuff.  It takes some getting used to, but it’s not impossible…or hard, for that matter.)

Plus, what if you have to “revive,” as it were, at a later date one of the ports you’ve glued shut?  Let’s use the mouse example again.  While it’s not common now, there was a point in time when a computer came with a PS/2 port for mice.  That’s the connecting end of the mouse that was circular and had six pins.  One day my mouse died, and I had to get a new mouse.  Technology had progressed, though, and I couldn’t find any mice with the round end.  I had to buy one that used the USB port.  Had my USB ports been glued shut at that point, I would have been without a mouse for my computer.  And while this is not an issue anymore, chances are the future will bring about a situation that is similar.

Ports Require Software To Be Used
The great thing about computer ports is that they require software to be useful.  That is, each port requires instruction sets (which is not hardware…so, it must be software) so that the computer can say “a-ha!  I’m getting instructions to receive data from the USB port.”  Disable the software for the port, and the port cannot be used anymore.
A Better Solution - Port Block Software Via Whitelists
A better solution, then, is to use port blocking software.  This is better than gluing a port shut because, again, you don’t need to borrow makeup (or its remover) from your wife.  I mean, that’s got to be somewhat emasculating.

More importantly, it gives you flexibility.  In the event that future circumstances require you to unblock that port, it’s just a matter of click, click -- and you’re set.  Now, some might say, “well, sure.  Click, click…but I’ve got to do this for thousand of computers, so…do they sell carpal tunnel syndrome insurance with port blocks?”

The answer is no.  But, you don’t have to get CTS, either.  You can manage thousands of computers via the use of whitelists and blacklists.  In fact, instead of controlling machines, you can use the same lists to control people’s access to ports.  This way, it doesn’t matter which computer an enduser happens to be in front of, the USB port will not be accessible to them; however, if the next guy who sits in front of that computer needs access to USB ports, just give him access via the whitelists and he won’t encounter any problems.

All from the comfort of your desk.  Certainly beats running around a building with superglue in your hands.

Related Articles:
http://www.theage.com.au/news/security/superglue-used-to-stop-data-theft/2006/07/04/1151778940369.html

<Previous Next>

Backup Tape Data: Encryption Was Used, Information to Decrypt Also On Tape

Hard Drive Encryption Used On Stolen Maitland, Florida IRS Computer

Comments

No Comments

About sang_lee

Sang Lee is a Senior Account Manager and Security Analyst with AlertBoot, Inc., the leading provider of managed endpoint security services, based in Las Vegas, NV. Mr. Lee helps with the deployment and ongoing support of the AlertBoot disk encryption managed service. Prior to working at AlertBoot, Mr. Lee served in the South Korean Navy. He holds both a B.S. and an M.S. from Tufts University in Medford, Massachusetts, U.S.A.