Removable Media Risks

What is a Removable Media?

Removable Media is data storage that can be easily moved from one system to another. Examples include Flash Drives, CD/DVD, and USB/ Firewire External Hard drives.

Why is it a risk?
These devices are compact, hold extensive amounts of data, often not encrypted, and easily lost or stolen. This allows anyone with physical access to view the data. They can become rooted (exploits hidden in special non-viewable space on the device) or contain viruses, worms, or copyright infringement materials.

What is the Risk?
Removable media can introduce destructive worms, viruses that slow down system performance, or be used to improperly store and move sensitive data insecurely.  Often attackers will leave flash drives in the parking lot of a company with root kits and other malware designed to infect systems.  The drives typically display markings designed to enticing someone to view the data such as "Sensitive Payroll data" or "Staff Reduction Plan".

Safety Tips:

1.  Never insert removable media into a computer from an untrusted or source.

2.  Always scan all removable media with your Anti-virus program prior to accessing the device; even if it comes from a trusted source
 
3.  Never store sensitive information on removable media unless it is encrypted.

4.  If you discover a removable media device to does not belong to you, report it to the helpdesk immediately!