Re: USB and smart drives

["Murad Talukdar" <talukdar_m () subway com>]

How about 'sheep-dip' machine where all users have to download any files
first for checking first? One which is not hooked up to the network?
Unwieldy in large organisations maybe...
Murad Talukdar


----- Original Message -----
From: "Benny Late" <lvmygop () hotmail com>
To: <security-basics () lists securityfocus com>
Sent: Friday, March 05, 2004 6:17 AM
Subject: USB and smart drives


> Has anyone implemented a policy or process to protect networks from
viruses
> brought in by users with USB drives, that are not company issued so no
> passwords etc.
>
> I'm thinking that AV with on access and write to disc scans should help,
but
> I'd like to see some of the policies others have implemented.
>
> Many thanks,
> Benny
>
> _________________________________________________________________
> Learn how to help protect your privacy and prevent fraud online at Tech
> Hacks & Scams. http://special.msn.com/msnbc/techsafety.armx
>
>
> --------------------------------------------------------------------------
-
> Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
> any course! All of our class sizes are guaranteed to be 10 students or
less
> to facilitate one-on-one interaction with one of our expert instructors.
> Attend a course taught by an expert instructor with years of in-the-field
> pen testing experience in our state of the art hacking lab. Master the
skills
> of an Ethical Hacker to better assess the security of your organization.
> Visit us at:
> http://www.infosecinstitute.com/courses/ethical_hacking_training.html
> --------------------------------------------------------------------------
--
>



---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------