Pod Slurping – An easy technique for stealing data

September 23, 2008, 04:42 AM — 

A common misconception is that perimeter security measures such as firewalls and anti-virus software are enough to secure corporate data residing on the corporate network. In this white paper, we explore how the uncontrolled use of portable storage devices such as iPods, USB sticks, flash drives and PDAs, coupled with data theft techniques such as ‘pod slurping’, can lead to major security breaches.

Introduction
Our dependency on technology has never ceased to grow. Increased portability, ease of use, stylish looks and a good dose of marketing hype are the perfect cocktail to entice the population at large! Suppliers of consumer electronics are registering an ever increasing demand for portable consumer electronics. Apple’s iPod for example, is one of the most successful electronic gadgets in the world. Since the iPod launch in 2001, Apple have sold almost 60 million units (CNNMoney.com, 2006). iPod has become a universally appealing source of audio entertainment – the eponym for MP3 players. Projections show that the demand for iPods and other MP3 flash-memory music players will continue on a positive trend and will surge to nearly 124 million units in 2009 (Kevorkian, 2005).
As the popularity of iPods continues to grow, an alarming army of white earphones is slowly taking over the workplace. In fact, these MP3 players have become as common in any workplace as they are on public transport. But what is so alarming about having iPods and MP3 players at work?

Pod slurping: How can insiders steal your data?
Developments in portable device and data storage technology are escalating. The latest versions of MP3 players and flash memory devices have huge storage capabilities; yet these gadgets are small enough to easily conceal and sneak in behind the corporate line of defence. Further to this, easy connectivity and high speed data transfer has become increasingly more widespread – a user may simply plug the device into a USB or FireWire port and they are up and running – no drivers or configuration required! In practice, this means that a data thief can get away with even more precious data, and a negligent employee can dump more viruses onto the corporate network even when connecting for only a short time...
Download the free document at: Pod-slurping Article

» posted by gillykramer

Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world

I like it!
Close

On Twitter now

data stealing

Powered by Twitter
You are logged in | Sign out
Sign in and post to Twitter

What are you thinking?

Cancel Tweet sent

On Twitter now

Comments

iPhone is a threat too -

iPhone is a threat too -

You face an even bigger threat through the iPhone 3G which has wireless capabality inbuilt. long battery life. large storage and with specific software you can hop onto any Open wireless or WEP based system and harvest what ever you like.

Lock down your wireless systems and also make sure you control the proximity of iPhone systems to your critical data.

www.pcprofile.com
| reply

I think that USBs are a much

I think that USBs are a much bigger threat as far as insiders stealing data. You can carry a 500gb hard drive in your pocket these days. Take all the data you'll need in one or two trips.

Most companies these days have pretty good wireless security on their networks, but that does nothing to protect you from an employee who is stealing data.

I haven't read this white paper, but I don't think there really is a solution for this problem unless you want to buy only desktop computers without any USB ports, CD/DVD burners, etc. Lock the cases and chain the computers to the wall. Think that would hurt productivity?
| reply
peer-to-peer

Esther Schindler
If the comments are ugly, the code is ugly

claird
SVG a graphics format for 21st century

pasmith
Take Chrome OS for a test spin

Sandra Henry-Stocker
Solaris Tip: Have Your Files Changed Since Installation?

sjvn
64-bits of protection?

jfruh
Android fragments vs. the iPhone monolith

mikelgan
What Gizmodo missed about the Pro WX Wireless USB disk drive

 

Where Google Chrome security fails: the password
I heard mention that the Chrome OS will have some sort of encryption available a la bitlocker. If it's possible to encrypt personal data using another password or key, then it may have potential for very secure data.... And Ubuntu has an 'encrypt home directory' option, perhaps google should follow suit.
- Dann

Join the conversation here

The Daily Tip

The Daily TipQuick, practical advice for IT pros. Made fresh daily.

Hot tips:

Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.

Newsletters

Subscribe to ITWORLD TODAY and receive the latest IT news and analysis.

I would like to receive offers via email from ITworld partners.
By clicking submit you agree to the terms and conditions outlined in ITworld's privacy policy.
Featured Sponsor

AISO founders envisioned a Web hosting company that was environmentally friendly. While the company employed energy-efficient innovations like solar panels, its infrastructure produced unacceptable power and cooling requirements. Find out how AISO leveraged AMD technology to overcome their challenge in this case study white paper.

In this whitepaper, Scalar explores the opportunity to change the landscape with respect to mission critical databases built around Oracle. Leveraging technologies such as Linux, high-end commodity processing power and Oracle RAC technology to architect, design, build and maintain database infrastructure that delivers maximum availability, reliability and performance at a fraction of traditional cost.

On a typical day, weather.com, the Web site for The Weather Channel in Atlanta, serves up between 15 million and 20 million page views. But in September 2004, when back-to-back hurricanes ransacked Florida, the peak traffic on one day more than tripled: over 70 million page views by more than 7 million unique visitors. Read the full success story now.

Marketplace