Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: Secondary Storage Device Policy |
|---|---|
| Date: | Wed, 22 Dec 2004 07:36:38 -0800 (PST) |
Dan, Do you know of any other similar device(s) with same/similar functionality. Anything in freeware or shareware? It should have at a minimum data logging, alerting and control by ACL? I believe the product should not have agents to be installed on a user's desktop, because then the user with admin privilege can stop the agent service! Best Regards, Sanjiv Agarwala CISA, CISSP --- "Russell, Dan" <drusse05@harris.com> wrote:
Tim, You may also want to have a look at this product:
http://www.securewave.com/turcana/securewave/sanctuary_DC.jsp
Dan Russell, GCIA, CISSP Harris Corporation, GCSD Information Assurance (321) 729-2787 drusse05@harris.com "A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools." - Thucydides -----Original Message----- From: jkowall [mailto:jkowall@shocking.net] Sent: Thursday, December 09, 2004 3:29 PM To: Tim Watkins; focus-ms@securityfocus.com Subject: Re: Secondary Storage Device Policy Have you seen the GFI product which does this? http://www.gfi.com/lanpsc/ I haven't used it, but its a good idea if you wish to stop the ipod pirates :) Tim Watkins wrote:I am currently developing a policy in a Microsoftenvironment on theuse of Secondary Storage Devices. This isespecially concerned withThumb drives and ensuring that they do notcompromise security betweenclassified systems. Do any of you already have apolicy in place?Additionally, is there a simple way of removing thedrivers from aWinXP or 2000 environment so that these types ofdevices can not beinstalled via plug and play? I have played aroundwith the idea ofshutting down USB ports but there are just too mayother things (mice,keyboards, cac readers) that use them. If therewas a way to know(event viewer perhaps) or other means when one wasattached, it wouldalso help. Tim Watkins------------------------------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
__________________________________
Do you Yahoo!?
Yahoo! Mail - You care about security. So do we.
http://promotions.yahoo.com/new_mail
---------------------------------------------------------------------------
---------------------------------------------------------------------------
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Microsoft Vulnerabilities ARE being reported to Microsoft, Paul |
|---|---|
| Next by Date: | Re: services running in windows domain (winXP clients), Christos Triantafyllidis |
| Previous by Thread: | RE: Secondary Storage Device Policy, Russell, Dan |
| Next by Thread: | iisadmpwd/UPN, Bruno Jänes |
| Indexes: | [Date] [Thread] [Top] [All Lists] |