USB drives Risk Reduction
Traditional
- Block all USB devices in Group Policy
- Disable AutoRun
- Glue USB ports shut (?!?!)
-
- Standard Protocol for Authentication in Host Attachments of Transient Storage Devices
- USB devices can be signed and authenticated, so only authorized devices are allowed
- in Windows 7, Linux.