The Pentagon has banned the use of computer flash drives, CDs, and other removable media, at least temporarily, because of a threat on Department of Defense (DoD) networks.
According to Federal Computer Week (FCW), "The virus is a variation of a three year old worm called SillyFDC which spreads by copying itself from one piece of removable media to another. When plugged into another computer the virus will automatically download code from another location."
The Associated Press and other news organizations reported that, "...Messages were sent to department employees informing them of new restrictions. As part of the ban, the Pentagon was collecting any of the small flash drives that were purchased or provided by the department workers...."
Fox News offered this video update, which described the serious nature of the attack.
This situation raises the wider questions regarding portable media. While these devices have long been barred from classified networks, some government organizations around the globe ban all USB use by staff. Examining the pros and cons associated with turning off USB drives can lead to an interesting dialogue.
Basically, the decision comes down to ease of use and customer satisfaction versus the serious security threat posed by a loss of sensitive data. In addition, this DoD case raises the virus threat that can come up with portable media.
So what does your organization do? Are USB ports enabled on PCs and laptops?
Two years ago, two of my colleagues and I received a patent for securing removable drives in cleared installations. Our patent (7,010,647) envisaged a storage, check-in, and check-out system at an installation that kept a watch on the disposition of the drives and what is on them and who is using them. There is a strong need for developing advanced systems to combat the introduction of viruses as well as the theft of valuable and sensitive information.