Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: Selectively disabling USB devices

Subject: Re: Selectively disabling USB devices
Date: Wed, 23 Nov 2005 13:49:27 -0500
Pranav,

I am not aware of a free possibility (if you ever do, please let me
know) but there are many commercial software who can do this by using
the USB device ID to permit/deny the use.

It only works if the user is not an administrator although I assisted
a presentation by Verdasys (Digital Guardian) which claimed they could
bypass this issue by hooking in the kernel at boot time. I'm not a
Windows engineer so I can't confirm is this is real or bogus but the
presentation seemed satisfactory for me. Unfortunately, we haven't
opted for that product.

Instead we used a tool named Device Lock which can do the same thing.
We don't have a problem with users being administrator so this works
fine.

Please note that (as far as I know), Firewire doesn't have different
IDs per device so you can only do "disabled", "read" or "read write". 
USB provides much better managability.

(N)


Is it possible to selectively disable USB devices? For instance, only mice and
printers should work when connected to a USB port but flash drives, other mp3
players etc should not work when connected to the same USB ports.

<Prev in Thread] Current Thread [Next in Thread>