Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 6 guests online

ik_xray_google_125x600.gif
IronKey

EH-Net Donations

Enter Amount:
$

EH-Net News Feeds
Latest Additions
Google Ads
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Malwarearrow Military Bans Removable Media
EH-Net
July 04, 2009, 10:15:31 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2009s - Training May 4 - 8, Ethical Hacking Conference May 8 - 9. www.chicagocon.com
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Military Bans Removable Media  (Read 4116 times)
0 Members and 2 Guests are viewing this topic.
jason
Hero Member
*****
Offline Offline

Posts: 718


Aut Viam Inveniam Aut Faciam


View Profile WWW
« on: November 20, 2008, 08:01:10 AM »

Due to the spread of the Agent.btx worm, removable media have been banned from sipr and nipr nets. While the article discussed the army specifically, it sounded like this was going to be implemented for all branches. Seems like a fairly serious situation.


http://blog.wired.com/defense/2008/11/army-bans-usb-d.html
Logged

sgt_mjc
Full Member
***
Offline Offline

Posts: 242


View Profile
« Reply #1 on: November 20, 2008, 08:33:09 AM »

It surprises me that they have not done this before. I know that the only removable media currently authorized on our classified systems for data transfer are CDs. Of course there are plenty of restrictions on how to use them for this purpose, but as far as other media goes, we are not even allowed to take a thumb drive in to the classified lab. We'll watch and see how this plays out.
Logged

Mike Conway
CompTia Security +
C|EH
jason
Hero Member
*****
Offline Offline

Posts: 718


Aut Viam Inveniam Aut Faciam


View Profile WWW
« Reply #2 on: November 20, 2008, 08:47:50 AM »

It certainly does seem to be the logical move. It surprises me that they were this lax about it to begin with.
Logged

ChrisG
EH-Net Columnist
Hero Member
*****
Offline Offline

Posts: 1121


View Profile WWW
« Reply #3 on: November 20, 2008, 10:38:53 AM »

well you are only "supposed" to use govt issued usb drives that would only touch other govt systems which "should" stop that, but we all know how well that works...
Logged

...tests i took go here...

http://carnal0wnage.blogspot.com/
Andrew Waite
Hero Member
*****
Offline Offline

Posts: 692


aka RoleReversal


View Profile WWW
« Reply #4 on: November 20, 2008, 10:58:14 AM »

well you are only "supposed" to use govt issued usb drives that would only touch other govt systems which "should" stop that, but we all know how well that works...
Chris beat me too it  Sad. Has anyone read how they intend to enforce this?

I'm hoping they'll be some form of edge protection to stop the functionality of USB drives if inserted, rather than 'please don't do that'. But from the mention of govt issued devices in the future I'm guessing not. Looks like an way to create scapegoats rather than address the fundamental issues.

From those in the know does the military not already have a boiler plate AUP stating 'don't connect nasty things to our network'? If so, how is this different?
Logged

ChrisG
EH-Net Columnist
Hero Member
*****
Offline Offline

Posts: 1121


View Profile WWW
« Reply #5 on: November 20, 2008, 10:59:52 AM »

ha i win!

they do have the AUP, i think this is a "dont do anything until your drive has been scanned" scenario, just to curb the spread.  least thats what the article said.
Logged

...tests i took go here...

http://carnal0wnage.blogspot.com/
jason
Hero Member
*****
Offline Offline

Posts: 718


Aut Viam Inveniam Aut Faciam


View Profile WWW
« Reply #6 on: November 20, 2008, 11:22:53 AM »

i think this is a "dont do anything until your drive has been scanned" scenario, just to curb the spread.

Which will of course be totally useless if you turn right back around and plug it into your spammy, malware-ridden, porn storage device again.
Logged

ChrisG
EH-Net Columnist
Hero Member
*****
Offline Offline

Posts: 1121


View Profile WWW
« Reply #7 on: November 20, 2008, 12:49:05 PM »

exactly
Logged

...tests i took go here...

http://carnal0wnage.blogspot.com/
sgt_mjc
Full Member
***
Offline Offline

Posts: 242


View Profile
« Reply #8 on: November 20, 2008, 12:55:30 PM »

It cracks me up, but you are right about the AUP: scan then use..... Of course we all know that only works if there is a signature for the malware and IF the end user actually does scan it. Oh well....
Logged

Mike Conway
CompTia Security +
C|EH
jason
Hero Member
*****
Offline Offline

Posts: 718


Aut Viam Inveniam Aut Faciam


View Profile WWW
« Reply #9 on: November 28, 2008, 09:22:16 PM »

Another article with slightly more detail on the specifics of the malware issue:

http://www.latimes.com/news/nationworld/iraq/complete/la-na-cyberattack28-2008nov28,0,230046.story
Logged

ChrisG
EH-Net Columnist
Hero Member
*****
Offline Offline

Posts: 1121


View Profile WWW
« Reply #10 on: November 28, 2008, 10:33:05 PM »

It cracks me up, but you are right about the AUP: scan then use..... Of course we all know that only works if there is a signature for the malware and IF the end user actually does scan it. Oh well....

what you mean all AV doesnt find custom written malware...oops.
Logged

...tests i took go here...

http://carnal0wnage.blogspot.com/
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.9 | SMF © 2006-2009, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.059 seconds with 23 queries.
 
Polls
My next training will be:
 
Support EH-Net

eh-net_amazonstore.jpg
Help Support EH-Net with Our Amazon Store


cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!


windows7_assoc_125x125.png
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2009 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.