No. 1 Story

Construction needs cloud flexibility

Australia’s embattled construction sector could benefit from cloud based information systems that can be switched on and off in lockstep with individual projects – with the exception of those organisations based in remote areas like the Kimberleys.

read more

Related Articles

Centennial, and, Slurpexe, author, team, thwart, iPod, threat
The highest level of total malware detected in more than a year, and four...
- sponsored editorial - The Trade Show at the Software & Systems...
- Sponsored Editorial - AppLabs sees huge value proposition for its clients with...
Despite tough anti-spam measures in the US, and recent lawsuits against a MySpace spammer,...
Setting up a secure Wi-Fi network is not for the faint-hearted, and with Wi-Fi...

Centennial and Slurp.exe author team to thwart iPod threat

Business IT - Security

Security vendor, Centennial Software, has teamed up with the author of virus-style program, Slurp.exe, to demonstrate the ease of stealing corporate data via portable devices such as USB sticks and iPods.

US security expert, Abe Usher, first highlighted this issue last year when he developed the proof-of-concept data theft tool Slurp.exe, which spawned the term 'PodSlurping'.

Slurp.exe can automatically download thousands of business documents from a networked PC to an iPod in less than two minutes. (PodSlurping has since moved beyond iPods to encompass all portable storage devices, such as USB, firewire or Bluetooth-enabled mobile phones.)

Usher and Centennial have joined forces to educate organisations about the dangers of unauthorised portable devices in the workplace. Centennial claims to have developed a solution that will protect against portable data theft.

Using Usher's latest creation, Slurp Audit  (a second-generation application based on Slurp.exe) and Centennial's product DeviceWall, organisations are being encouraged to test their own vulnerability.

'Slurp Audit does not allow users to actually download files, so, unlike Slurp.exe, we've been able to make it publicly available on the internet,' Usher said.

Slurp Audit demonstrates the key weaknesses in corporate network security by generating an HTML report that shows users what files would be stolen via a portable device had the download occurred.

Centennial's regional manager, Howard Waterson, urged local organisations to test their vulnerability by using the Slurp Audit offer.

'Large security providers focus mainly on the network perimeter, but now more than ever, there is a need to also focus on the endpoint.

'Any company wanting to see first-hand just how vulnerable their data is can visit our web-site to download Slurp Audit and find out themselves.'

Both Slurp Audit and a trial version of DeviceWall are available for free from www.centennial-software.com.