Filtering the pod-slurping risk
The threat of malicious parties stealing sensitive data using USB devices requires careful monitoring, writes Harnish Patel
How can resellers help their customers fight pod-slurping? No, it is not a gardening issue, but the threat from malicious parties hijacking business data using USB devices, such as MP3 players or memory sticks.
Businesses are already taking a range of approaches to the problem, from locking down the use of all USB ports on PCs, to using epoxy glue as a physical (and permanent) barrier.
However, locking out all USB ports on the network is not an option – employees may get a little upset when they cannot use their keyboards or mice. But equally, businesses may want more granular control over USB useage, to prevent data drain.
USB port access should be treated like any other corporate computing resource – use it, but use it responsibly. It is the VAR’s customer’s intellectual property that could be slurped. It needs protecting like any other piece of corporate data or IP – by filtering and managing employee behaviour.
By offering a solution that has the added ability to control and block outbound USB data connections as part of a comprehensive user management offering, VARs can help end-users to adopt a holistic approach to protecting corporate assets against threats.
Another issue for firms is the bi-directional nature of the USB threat, such as podcasting and broadcast downloading, which not only drains network bandwidth, but also risks exposure to inappropriate material.
The right filtering tool needs to support the organisation and help it to protect its assets. Businesses need a solution that gives control at a granular level, enabling access rights and filtering requirements to be customised and segmented by the user.
This ensures basic acceptable useage policies for users are enforced and adhered to and minimises threats to the network. Yet the customisable nature of the solution means that employees with a genuine need to work with USB devices can do so, with no impact on business productivity.
Ease of use is another key factor because this will affect productivity. IT managers need a high level of automation and the ability to monitor and control upload and download effectively and accurately, without requiring constant hands-on management.
By offering a solution that protects against pod-slurping, VARs increase revenue streams by ensuring they have in place an holistic content protection solution to prevent their customers’ data becoming an MP-free or all.
Harnish Patel is senior vice-president Europe at SurfControl.