Tuesday, Sep 05 2006 | Author and
categories:
Justin Hall
| PR,
marketing and design
One of our clients,
Centennial Software – a
developer of IT security and asset management
solutions – has seen the demand for
security information associated with USB threats
rise dramatically since the arrival of new U3
applications to the marketplace. If you're not
aware of U3, it's a self-activating technology
that enables portable devices (flash drives,
iPods, PDAs, etc.) to autorun applications the
moment they are plugged into a PC. This
drastically raises the level of risk associated
with these devices on a corporate network.
However, information on the risks associated
with this new technology has been scarce.
Recently, Centennial posted information on its
website related to the threats surrounding the latest
self-activating U3 technology and the number of
ongoing visitors has since risen by more than 200
percent (with approximately 16,000 unique visitors in
the first 24 hours following the post -- which is
AMAZING), and references in the blogosphere has sent
the Centennial-based URL to number one on
link-sharing site del.icio.us.
Centennial also ranked the latest USB hacks......drum
roll please:
1. Slurp: a podslurping application that can copy
vast amounts of company files in seconds
2. John the Ripper: detects and cracks weak passwords
3. Nmap: can explore an entire network and identify
vulnerabilities or security technology
4. Ethereal: allows the user to see all traffic
passing over a network – originally used for
troubleshooting
5. Showtraf: continuously monitors and displays
network traffic
6. TCPDump: enables the user to display and intercept
TCP/IP addresses travelling across a network
7. Nemisis: intentionally to test intrusion detection
systems, can enable the bypassing of security
measures
8. Netpass: recovers passwords on various guarded
areas of the network
If you want a great resource for data theft and
portable storage device vulnerabilities, please visit
www.watchyourend.com.
-posted by Justin