Re: Securing / erasing hard drives in copiers?

[Eric Case <ecase () EMAIL ARIZONA EDU>]

At 10:28 AM 2/11/2008 -0500, Bruggeman, John wrote:
>   I was asked by my COO to check into securing / erasing any hard drives
> in photo copiers in the business office.  I can understand that with
> newer copiers that have PDF and email options that they could and
> probably do have hard drives, but I've not seen a protocol for that
> discussed here before.  I did Google the topic and I saw a Fox News link
> that I think prompted my boss asking, and some other similar reads, but
> no protocol or list of "secure" photo copiers.

     Just recently was trying to get my guys to see the printers and
multi-function devices (MFD) from a secure point of view.  Digging
though my security archives for printers I found only found a few
items quickly.

     None of the ones I pulled for my guys have a protocol for
securing the internal drives or list of "secure" MFDs.  Two were
about security incidents involving printers/MFD and one (the last one
below), from UT Austin, has a "Multifunction Printer Hardening
Checklist" and a SANS white paper on "Auditing and Securing
Multifunction Devices."
-Eric


        Pictures of Osama Bin Laden on Network Printers:
<http://listserv.educause.edu/cgi-bin/wa.exe?A2=ind0309&L=SECURITY&P=R3838&I=-3>



At 03:51 PM 12/11/2007 -0600, Julian Y. Koh wrote:
> We have seen a few issues where the FTP server on a printer was used to store
> warez/porn content.  Been a while though.
>
> The more complex printing devices that actually run Windows were a problem
> for a while, since many of them couldn't actually be patched, but again it's
> been some time since our last incident.
>
> --
> Julian Y. Koh                         <mailto:kohster () northwestern edu>
> Network Engineer                                   <phone:847-467-5780>
> Telecommunications and Network Services         Northwestern University
> PGP Public Key:<http://bt.ittns.northwestern.edu/julian/pgppubkey.html>




At 12:56 PM 12/12/2007 -0600, Nick Silkey wrote:
> The InfoSec team at utexas.edu has done a lot of work poking MFPs
> and analyzing the risk of the sometimes scary results ...
>
> http://security.utexas.edu/admin/mfprinter.html
> ^^ Multifunction Printer Hardening Checklist
>
> http://www.sans.org/reading_room/whitepapers/networkdevs/1921.php
> ^^ Auditing and Securing Multifunction Devices
>
> --
> Nick Silkey | silkey () ece utexas edu
> Senior Operating Systems Specialist
> Electrical & Computer Engineering
> The University of Texas at Austin
> ENS 340 | 512.475.8284 | 0x35EB31E2



Eric Case, CISSP  <ecase () Arizona edu>
Information Security Officer
College of Engineering   <http://www.Engr.Arizona.edu>
1127 E James E. Rogers Way Room 200
Tucson, AZ 85721-0020
Mobile Phone 520-275-6436