Security Basics mailing list archives
Re: auditing access on USB drive
From: michael <michael () virtual-security co uk>
Date: Thu, 16 Jul 2009 20:48:45 +0100
Ron,You misunderstood me. We want to audit the use of the USB sticks themselves, not the devices that they are plugged into. I know of various products that cover the use of usb devices into machines, but I need to look at it the other way.
I havent found a single product out there yet that will allow this, so any assistance given will be greatly appreciated.
Regards Michael ron () gmail com wrote:
I don't have specific experience with the type of tool you are asking about, but I have read a lot about them. In general what you are talking about is Endpoint control or NAC (Network Access Control) or MS specific NAP (Network Access Protection). Typically you don't install anything on the USB, you use the tools to monitor use of USB resources (and other resources). You can define policies that decide what devices can be accessed and associated logging of access. Here are some links on the topic: http://searchsecuritychannel.techtarget.com/generic/0,295582,sid97_gci1286980,00.html?track=NL-676&ad=683698&asrc=EM_NLT_5554490&uid=4739563 - Introduction to the benefits of NAC http://www.itsecurity.com/whitepaper/evolving-nac-enterprise-idc/ - Enterprise NAC Survey 2007 http://searchsecuritychannel.techtarget.com/generic/0,295582,sid97_gci1343076,00.html?track=NL-676&ad=683698&asrc=EM_NLT_5554487&uid=4739563 - Network access control policy cheat sheet http://searchsecuritychannel.techtarget.com/generic/0,295582,sid97_gci1315213,00.html?track=NL-730&ad=650312&Offer=CHSCunsc79&asrc=EM_USC_3995378&uid=4739563 - Integrated endpoint security suites http://mediaproducts.gartner.com/reprints/juniper/vol4/article3/article3.html - Magic Quadrant for Network Access Control 27 March 2009. Good article, superficial reviews of many NAC tools http://articles.techrepublic.com.com/5100-10878_11-6152523.html - 10 things you should know about Vista's Network Access Protection (NAP) These should get you started. I've got lots more if you are interested ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
Current thread:
- auditing access on USB drive michael (Jul 15)
- Re: auditing access on USB drive Ali, Saqib (Jul 16)
- Re: auditing access on USB drive Rob Thompson (Jul 16)
- Re: auditing access on USB drive Adam Pal (Jul 16)
- <Possible follow-ups>
- Re: auditing access on USB drive ron (Jul 16)
- Re: auditing access on USB drive michael (Jul 17)