USB devices lead to network breaches

By Stan Beer
Friday, 27 January 2006 08:11

Business IT - Security

A large Australian organisation has identified that more than 1800 breaches of its computer network security occurred in just 10 days reports a security specialist.

An audit of the organisation undertaken by Lync Software found a degree of exposure caused by uncontrolled use of iPod, USB and other removable media devices within its otherwise highly secured computer environment.

Lync Software managing director Kym Welsby said the results were probably representative of thousands of businesses Australia-wide. "Removable media devices such as iPods, Blackberries and digital cameras get under the radar of network security systems," he said.

"This creates major risks ranging from corporate espionage and business disruption to malicious viruses. Unless businesses can identify and control iPods and other removable media devices, they are leaving a gaping hole in their security systems.

"At the moment, it’s like companies are locking the back door with firewalls but leaving the front door wide open, with people coming and going with uncontrolled removable devices."

Security risks arise from iPods and other music players, USB memory sticks, personal organisers and PDAs, mobile phones and digital cameras that can connect undetected to corporate networks, download gigabytes of data in a matter of seconds and sometimes introduce viruses.

Lync Software’s tracking of 768 computer users within the organisation identified:

39% of users connected to the corporate network with USB devices

154 different types of device were connected to the network

1805 files were transferred between the network and the devices

Transferred files including images, music, video, office documents and system files.