Contributors - CyberSecurity Malaysia

and secretly log all connections/disconnections,and files copied, modified or deleted. It can alsosend email notifications when someone connects anunauthorised USB device to the computer.Criteria certifications, making them the USB flashdrive of choice for organisations that requireproven solutions from a leader in secure removablestorage.”9.iii. Safend Protector – administrators can not onlycompletely block all storage devices, but canallow them for read-only. It can also do encryptionof data. It monitors, blocks, and logs files thatare downloaded to or read from these devices.Safend Protector is also an EAL 2 Validated Productconforming to the Common Criteria (ISO/IEC 15408)(Ref [6]). Common Criteria is an internationallyrecognised ISO standard (ISO/IEC 15408) used bygovernments and other organizations to assesssecurity functional requirements and securityassurance requirements of technology products.f) Built-in security featuresCompanies can also provide their employees withdevices that have built-in security features. These USBdrives have features that can protect data securely,quickly and easily. This protection is especially neededto mitigate the risks if the USB drives fall to the wronghands.i. SanDisk’s Cruzer Enterprise flash drives includeprotection at multiple levels and stages, passwordprotection, hardware based encryption, centralmanagement, and powerful authentication. It alsohas anti-malware scanning that examines every filebeing copied to the USB drive, and prohibits filetransfers when it detects infection on a host PC.This will prevent the flash drive from becoming avirus carrier.As reported in “SanDisk Cruzer Enterprise FlashDrives Earn Certification”, (Ref [7]), “CruzerEnterprise flash drives are the only USB drives inthe world to hold both FIPS 140-2 and Commonii. IronKey Secure USB – the only USB flash drivevalidated to meet the stringent Security Level 3requirements of the FIPS 140-2 standard (Ref [8]).It protects data with strong AES 256-bit hardwareencryption. The enterprise version includes centralmanagement which can remotely enforce securitypolicies across thousands of IronKey Enterprisedrives. It also allows secure device recovery andthe ability to remotely disable or destroy drivesthat are lost, stolen or in the possession of formeremployees and other unauthorized users.There are many secure USB drives available in the markettoday. Companies concerned about security shouldinvest in one that meets its policies and requirements.Having a secure USB drive does not necessarily meanthat their security features will be used. Therefore,companies should further define policies to enforce theuse of a flash drive’s security features.Note: Please exercise caution when playing with MicrosoftWindows Registry and you might want to get assistancefrom any system administrator.Policies regarding personal storage devices such as onlycompany-provided devices can be connected to company’slaptops, personal computers and servers, are alsoneeded. To really enforce these policies, there should bea mechanism to control the use of USB removable devices,whether inside or outside the corporate network, andmanage the company-provided USB drives. This can bedone by implementing tools mentioned under e), or usingUSB drives which have central management features likethe ones mentioned under f).e-Security | CyberSecurity Malaysia | Volume 21 - (Q4/2009)