In this white paper, we explore how the uncontrolled use of portable storage devices such as iPods, USB sticks, flash drives and PDAs, coupled with data theft techniques such as ‘pod slurping’, can lead to major security breaches.
Pod Slurping - An easy technique for
stealing data
The problem with uncontrolled use of iPods, USB sticks and
flash drives on your network
A common misconception is that perimeter security measures such as firewalls and anti-virus software are enough to secure corporate data residing on the corporate network. In this white paper, we explore how the uncontrolled use of portable storage devices such as iPods, USB sticks, flash drives and PDAs, coupled with data theft techniques such as 'pod slurping', can lead to major security breaches.
WWW.GFI.COM Pod Slurping - An easy technique for stealing data . 2
Introduction Our dependency on technology has never ceased to grow. Increased portability, ease of use, stylish looks and a good dose of marketing hype are the perfect cocktail to entice the population at large! Suppliers of consumer electronics are registering an ever increasing demand for portable consumer electronics. Apple's iPod for example, is one of the most successful electronic gadgets in the world. Since the iPod launch in 2001, Apple have sold almost 60 million units (CNNMoney.com, 2006). iPod has become a universally appealing source of audio entertainment - the eponym for MP3 players. Projections show that the demand for iPods and other MP3 flash-memory music players will continue on a positive trend and will surge to nearly 124 million units in 2009 (Kevorkian, 2005).
IDC Market Analysis "Shipments of iPods and other MP3 flash memory music players will surge nearly 124 million units in 2009."
As the popularity of iPods continues to grow, an alarming army of white earphones is slowly taking over the workplace. In fact, these MP3 players have become as common in any workplace as they are on public transport. But what is so alarming about having iPods and MP3 players at work?
Introduction....................................................................................................................................2 Pod slurping: How can insiders steal your data? ..........................................................................2 Pod slurping: An easy technique for stealing data........................................................................3 Insider information theft is a real problem .....................................................................................4 Why would insiders want to slurp information?.............................................................................4 How can corporations mitigate the risks of information theft? ......................................................5 Conclusion.....................................................................................................................................6 About GFI EndPointSecurity .........................................................................................................6 About GFI ......................................................................................................................................6 References ....................................................................................................................................7
Pod slurping: How can insiders steal your data? Developments in portable device and data storage technology are escalating. The latest versions of MP3 players and flash memory devices have huge storage capabilities; yet these gadgets are small enough to easily conceal and sneak in behind the corporate line of defence. Further to this, easy connectivity and high speed data transfer has become increasingly more widespread - a user may simply plug the device into a USB or FireWire port and they are up and running - no drivers or configuration required! In practice, this means that a data thief can get away with even more precious data, and a negligent employee can dump more viruses onto
WWW.GFI.COM Pod Slurping - An easy technique for stealing data . 3
the corporate network even when connecting for only a short time.
iPod is just one example of such portable contraptions. At a glance it is an innocent-looking portable audio device. However under the hood it boasts up t... [download for more]
