Gartner: iPod, Portable Devices a Corporate Security Risk
TMO Reports - Gartner: iPod, Portable Devices a Corporate Security Risk
by , 5:00 PM EDT, July 7th, 2004
Companies should consider banning portable storage devices such as Apple's iPod from corporate personal computers because they can spread viruses or steal critical corporate data, according to the research company Gartner, Inc.
The report, obtained by The Mac Observer and issued this week, does not recommend outright the banning of such devices from office environments, but does make it clear that portable USB and FireWire-based products open up businesses to a whole range of risks and that the protection of sensitive information is more important than ever.
The report points out the wide range of such portable devices, including smart media cards, memory sticks, compact flash, keychain drives as well as portable MP3 players. Small portable storage products can bypass perimeter defenses like firewalls and introduce malware such as Trojans or viruses onto company networks, said the report.
"Companies are at risk of losing intellectual property and other critical corporate data," the report said. "Portable storage devices are ideal for anyone intending to steal sensitive and valuable data. Employees may also be responsible for losing data if they inadvertently mislay these devices."
Gartner recommends companies "forbid the use of uncontrolled, privately owned devices with corporate PCs." In addition, the company suggests the adoption of "personal firewalls to limit activity on USB ports", investigate products that can control ports selectively, and "consider employing mobile data protection products to encrypt corporate or sensitive data."
The report ends by telling businesses that they "must ensure that the right procedures and technologies are adopted to securely manage the use of portable storage devices like USB 'keychain' drives. This will help to limit damage from malicious code, loss of proprietary information or intellectual property, and consequent lawsuits and loss of reputation."
Observer Comments
from the "duh" department.
so you are saying that people who bring in virtually unlimited storage devices in their pockets are a risk for data theft? say it ain't so.
we can't bring any recordable media, cameras, or even have cassette recorders (or cell phones).
blah blah, nothing to see here.
Wed Jul 07, 2004 9:00 pm Subject: ummm....
Let's see...they make USB drives that look like pens and watches and have a significant download (or upload) capacity, and they are picking on the iPod (by name, btw.)....
If employees are going to steal information from a company, banning iPods isn't going to stop it, or even slow it down. There is the floppy disk, burning CDs, or just printing the stuff or photocopying. Or, if you want to go really hi-tech, attaching a collar to the monitor cable and transmitting the screen to be received elsewhere (and it doesn't take much to do that, btw. Anybody remember TEMPEST?)
Malicious attacks at the hardware level are very difficult to stop. The methods suggested by Gartner will also cause a great deal of heartburn with most corporate users. It is treating them all like criminals, which doesn't generally go over well. And it is nigh impossible with laptop users.
I work for a very large media company as a PHP and ASP developer. A few months after they hired me I purchase a brand new laptop. Without even asking or thinking twice I started bringing it to work and connecting it right into the network. My boss didn't say a word other than "hey, that's a damn fine laptop you have there!" Over the next few months, to make things easy for me, I had copied 100% of the content of the internal servers as well as making complete duplicates of the databases - over 50 Gig's in all - directly onto my laptop hard drive (it is an 80 gig drive). I do all my work on my laptop and then upload it to the server and database at work and untill recently hearing all this stuff about theft of code, etc, I never thought about what I was doing as being "bad." Now I'm left very uneasy as the realization hits that I have 100% of the intellectual property of my employer on my laptop. I think I'd better have a conference with my boss over this and figure out a way to resolve this before it becomes an issue of concern among upper management, all of whom obviously never thought about this as thumb drives and laptops are pretty commonplace at work.
Sun Jul 11, 2004 3:59 pm Subject:
Nice way to make copy and grab a headline. A greater security risk than a bored employee surfing the 'Net and visiting questionable site loaded with spyware, trojan horses, etc.? I don't think so.
How many organizations provide employees with a CD burner on their PC and a USB port that will handle a flash memory backup device?
Just another way to grab a headline.
Knowing human nature, banning iPods from the workplace will only increase the attraction and consumer demand.
Comments are currently closed. Please email the author instead.
Recent Headlines - Updated February 11th
- Fri, 8:10 PM
- News - Apple Sues Motorola Mobility in California Over German Case
- 7:54 PM
- Free on iTunes - OnLive Desktop: Windows & Office on Your iPad
- 7:43 PM
- Product News - Apple Rolls Out MacBook Air Configurations for Education
- 6:35 PM
- Just a Peek - Battle Pocket Bulge With The Hint for iPhone
- 6:01 PM
- Rumor - Apple Reportedly Bringing MacBook Air Styling to Pro Line
- 4:50 PM
- Particle Debris - The Hidden Gotchas of Browser Security
- 3:56 PM
- Apple Stock Watch - Analyst: Paying a Dividend Makes Sense for Apple
- 2:58 PM
- Deal Brothers - iMac 27-inch 2.93GHz Intel Quad-Core i7 processor: $1,999
- 2:45 PM
- In-Depth Review - Theodolite App for iOS is Breathtaking
- 12:52 PM
- Apple Stock Watch - Mizuho Securities Starts Apple Coverage with $635 Target
- 11:35 AM
- Hot Forum Topic - Forum Poll: Are You Planning on Buying a New iPad?
- 11:00 AM
- Analysis - Competitors Size up Apple’s iBooks Author
The Mac Observer Reader Specials
TypeStyler 11 is now in the Mac App Store!! -- Special Introductory Price of $59.95!! -- To Buy From The Mac App Store Click Here Now!! Or buy direct
from Strider Software.
Mac RAM Upgrades: MacBook Pro 16GB kits $475, 8GB Kits for $119.99! iMac 16GB RAM Kits (4x 4GB) for $229.99! Mac Pro Memory 32GB Kit for $399.99, 64GB Kit for $889.99! Mac Hard Drives 2TB Seagate SATA II for $249.99! Click Here!
If you're using a Mac, then you've gotta check out Online Poker Mac.
This mac poker and online casino mac site
actually does the unthinkable, it actually rewards!
