July 6, 2004 12:22 PM PDT
Analyst: iPods a network security risk
- Related Stories
-
Dell puts $100 bounty on iPods
June 30, 2004 -
Cell phone cameras getting day in court--or not
June 4, 2004 -
Jamming device aims at camera phones
September 11, 2003
Small portable storage products can bypass perimeter defenses like firewalls and introduce malware such as Trojans or viruses onto company networks, research company Gartner said in a report issued this week.
Analysts have warned for some time of the dangers of using portable devices, but the report points out these also now include "disk-based MP3 players, such as Apple's iPod, and digital cameras with smart media cards, memory sticks, compact flash and other memory media."
Another potential danger is that the devices--which typically make use of USB and FireWire--could be used to steal large amounts of company data, as they are faster to download to than CDs. Additionally, the size of the portable devices means they can be easily misplaced or stolen.
Gartner advises companies to forbid the use of uncontrolled, privately owned devices with corporate PCs and to adopt personal firewalls to limit activity on USB ports.
"Businesses must ensure that the right procedures and technologies are adopted to securely manage the use of portable storage devices like USB 'keychain' drives," the report states. "This will help to limit damage from malicious code, loss of proprietary information or intellectual property, and consequent lawsuits and loss of reputation."
Andrew Donoghue of ZDNet UK reported from London.
16 comments
Join the conversation! Add your comment (Log in or register)
article about the Apple iPod, but instead found an article on
portable storage devices and the dangers they can pose to
company networks. Another shabby writer biting off the
popularity of the iPod.
In fact, given that iPods and other similar devices are optimized for storing music (and are therefore more likely to be used for that purpose), they're probably less of a concern than (say) USB flash memory devices, which are intended for data storage and might be more likely to either steal company secrets or provide a virus or worm infestation vector.
We get enough distortion and hype in the mainstream media. We can do without it here, I think.
Simple issue.
brainer in the IT world. Was it a slow news day or something?
players IN GENERAL, I note that CNET takes another jab at Apple
with their misleading headline, suggesting that only iPods can
pose a security risk.
These jabs have become fairly frequent; note the other headline
about the online music store opening in
Asia: "Fee-based Web music hits Asia--but where's Apple?"
Another reader pointed out that Apple is only mentioned in two
of the 19 paragraphs; the rest of the article is about the music
downloading business in Asia. So why mention Apple at all in the
headline??
To CNET's editors: Either write about Apple without a negative
bias in non-opinion pieces, or don't write about them at all. It
only makes you look bad.
I use my iPod everyday at work and sync my Outlook contacts, calendars, and tasks from my PC to my iPod. The iPod has an alarm that goes off to remind me of meetings and such, especially useful when I'm not sitting right in front of my computer all day like an analyst.
I also use my iPod to transfer large files to and from work. These files are usually 100s of MBs and burning CDs is just a poor use of time and energy.
The iPod is just as useful as the PDA or cell phone which companies have embraced. Don't knock things you don't understand. Do research first, then speak.
It turns out that employees could use pockets in their clothing to smuggle weapons into a workplace or to steal CDs containing secret corporate data.
It is recommended that clothes be banned in the workplace!
(Whatever happened to, you know, trusting your employees to not do bad things?)
ANYTHING, other than an absolutely closed system poses risks to a network. But do we want to go back to the days of dummy terminals connected to unix servers or mainframes, with no internet access? I think not. Most companies couldn't support their core business without PCs and the internet. So we take the reasonable risks of letting our employees have access to the internet, be able to use CD and DVD drives, and, as in my case, encourage them to use USB drives, since they're inherently more stable than floppies, and give you more MB for your money.
True, except for the rare instance the iPod can't be considered a business tool. But sometimes a company must realize that employee morale is worth a certain amount of risk for the good of the company.
How about if we just try to educate our users to the risk, and have them help us mitigate it.
If you're really worried about it you can set your virus scan program up to automatically scan any drive that connects to a PC. If data theft is such a concern, maybe it's time to talk to HR, not IT.
Apple. Even a elementary school student could identify that this
article is about "portable devices" and not only the iPod (as
insinuated by the title). Andrew Donoghue, are you trying to
out-spin Ina Fried?
they always have a twist to make Microsoft look good and Apple
look bad.
patrons of this more and more shoddy newsletter....
FECKIN WAKE UP AND "REPORT", NOT RECYCLE BIASED/FALSE/
BAD/MISLEADING INFORMATION LIKE YOU USUALLY DO!!!!
You know, I hope your stoopid machine gets a lethal virus, you
deserve it for being an arse!