In the previous post we have mentioned that the release date was planned for 15 January. Unfortunately during our tests, both the server and the client part have shown problems that have to be fixed.

That is why the release is not available on the market yet.

We estimate that the new release will be available on 15 March.

Thank you for being here and keep posted for more news.

Long time since our last post . The only important news is that the official release for USB-Safe-Keeper will be on January 15 2010.

The product now is in beta testing in our network and we plan the extend the beta testing to more users in December.

We will keep you posted. Thanks for the visit.

While waiting for the beta version of USB-Safe-Keeper, I have been online and manage to make 100 Inbound Links

And to have an estimated value of the web domain:

I'd say is not bad , but we can do better.

No page rank yet for the web site (under development) and for the functional blog.

I am using dnScoop for getting the estimations.

USB “plug and play” devices

This is the nice part.

Now a few problems:
-   Malware and spyware application can be stored and run from USB devices
-    On a 4 or 8 GB USB drive pen you can store a few hundred documents – which can contain confidential information (intellectual property)
-    The USB storage devices are small. They can get LOST easily and important data stored can be lost
-    Most of the USB “plug and play” storage devices provide light or no protection. So such a device is not suitable for storing important data

And now a list of Advantages of USB ports blocking in a network:
-    Protect your networks against Malware and spyware applications which might be stored on the USB devices. Considering that such devices are usually accessed (“plug and play”) on several computers: home computer, office computer and so on – this risk is quite high. On a scale from 1 to 5 we score this risk to 4
-   Reduce the risk of having confidential information copied on such devices. Securing confidential information is serious job for all network administrators but by blocking the USB ports blocking this risk is seriously reduced. On a scale from 1 to 5 we score this risk to 5

Considering that there are benefits of using USB storage devices and risks we recommend to Monitor and Control (Allow / Block) USB Storage Devices activities by using an appropriate software. If you can allow a list of safe devices that can be used on all network computers and if you can verify the file activity on the trusted devices (which files were copied, deleted, renamed and so on) than the risk are definitely reduced.

I will try to describe in a few words the “test set” that I been using:

1.    The client application started
2.    I have discounted and reconnected my USB mouse. The application was able to detect this but not being a mass storage usb device nothing happened
3.    I have plugged a USB pen drive. I was promoted to allow or not this action (now or permanent). I have selected now and the access was given only once. Next time I have plugged the same pen – same notification appeared. If I have selected permanent – I was able to use the device for as many times I wanted.
4.    I have connected my mobile phone to the computer. The phone asks me how I intent to use it as phone, modem or file storage. If I select any of the options – excepting file storage – the phone and the modem can be used without ant problem. If I select file storage – the behavior is the same as in the case of the pen drive.

And this means that the beta will be soon available  .

Keep posted for updates.

The first case: the guys who pretend to know but they do not have a clue about that is happening were not able to answer to a single questions from this scenario: you have a confidential document on a server – can you please tell us how many users have accesses the document during the last month? And the answer to this question was no – we cannot tell. Even if there were aware of using several software products that should provide such an information, or even something easier: can you tell if the file has been copied to a removable device like a pen drive or mp3 player? No – the answer is no and the risk is real.

The second case: the people who were aware of what is happening but they are pretending not to know, were able to answer to the question: you have a confidential document on a server – can you please tell us how many users have accesses the document during the last month? Yes – we are using the domain policy to audit the file access from the network. That is the correct answer – more details in a new post – and now the second question: can you tell if the file has been copied to a removable device like a pen drive or mp3 player? No – because the auditing cannot tell if the file has been copied to such a USB device so in this case the risk is also real.

The access to sensitive documents is something that any decent sys admin should be able to manage but there is a real risk that sensitive data to leave the network by email (we will have a post for this topic as well) or by using the USB storage, The product that we are working on USB Safe Keeper will be able to solve the problem that both our types of users are facing: can you tell if the file has been copied to a removable device like a pen drive or mp3 player? And the answer will be yes – the user x on the computer y have copied the sensitive file to his iPod on Friday 31 August 2009. And this is a big plus for any organization.

And we get some suggestions:

Keywords
block usb ports
blocking usb ports
block usb port
how to block usb ports

Using a similar approach for our second best keyword: monitor usb ports we got the following suggestions (the one that are to be used are bold):

Keywords
monitor usb ports
monitor usb port
monitor with usb ports
usb ports in monitor
usb ports on monitor
usb ports on a monitor
activate usb ports on monitor
hp monitor usb ports
monitor usb ports not working
computer monitor with usb ports
lcd monitor usb ports
monitor usb ports don t work
lcd monitor with usb ports
usb ports on monitor don t work
usb ports on monitor not working

And finally for the last keyword: track usb file activity we got no relevant results. So we will keep on researching the best keywords that are to be used for our brand new web site:  http://www.usb-safe-keeper.com/

The application architecture is client – server.

The client application has to be installed or deployed on every computer that is intended to be monitored.    At the installation the client has to be linked to a server by name or IP address. The client has to run for all users’ accounts (on that computer) and has to be invisible in the task manager. The client can be uninstalled by running an uninstaller which will require a password. The password is stored on the server.

The server represents a central user interface from where the admin is able to see:
-    All the monitored computers – where the client computer is running and the status (online or offline)
-    By selecting a computer – he will be able to see the USB activity for the current day, current week, current month, custom period of time (from date – till date)
-    By selecting a computer – he will be able to see the list of “not trusted” devices and when they were connected on the computer
-    A section called alerts should  be included – where the admin will see all the request for access from the network – he can give temporary or full access for the specified device or continue to block it.
-    The ability to stop monitoring a workstation or to uninstall the client application remotely

And many more ... to come.

And we are sharing with you. Check below:

We will start the CMS implementation this week and we haope that we will have a fully functional web site in 2 weeks.

And we have a huge number of pages that contain links to www.usb-safe-keeper.com - also ZERO

We will update the information about the web site evelution weekly.

Ah ... and we have like 3 unique visitors on http://www.usb-safe-keeper.com daily (the IP addresses of the team working on the project )

Anyway - a new web site is a new challenge for all. We are positive that the previous zeros can be turned into millions ... I sow something similar in an advertising for CeBIT 2008 - image below;  so is not something original but is definitely motivational.