The development of USB or universal serial bus as a convenient way to connect peripheral devices to computers has generated certain security risks. Complete lockdown can actually be counter-productive, as it blocks the USB port not only to storage devices but to the legitimate use of peripherals keyboards, mice and printers, as well.
The solution to the problems of portable media device security being proposed by SecureWave is a system that comprises a lightweight client driver, which runs real-time checks of the details of executable binary files against a policy database. This holds a ‘white list’ of approved executables, authorized applications and user permissions. It helps block any software that has not been approved for use, and also defends against viruses and worms.
The SecureWave system can also limit read/write activities and control the use of key-fob USB memory sticks, which are increasingly popular with people wanting to carry files or documents between office and home. They constitute yet another channel for viruses and the transfer into the enterprise network of other types of malware.
The company claimed the latest version of its software allows for context-sensitive policy enforcement. In other words, it can be used to lock down all USB access points by default, but will also allow system administrators to set a wide range of access and use privileges depending on who is using what where.
According to the rules held in the policy engine, Sanctuary Device Control 3.0 can manage device and application policies at a much more granular level than previous versions, so that distinct policies can be enforced based on whether the device is inside or outside of the corporate network, for instance. Similarly, devices and users can be grouped into categories for easier management.
File downloads, online games, or use of unlicensed software can also be restricted by the system, which is controlled using a central console and pre-set policy statements.
The system is said to be good for all portable devices, including iPods, digital cameras and USB memory sticks. A license for Sanctuary Device Control version 3 starts as $45 per user.
