1

What measures should I take to avoid any infection through USB devices?

For example, there is a tiny virus called shortcut which hides your files and put shortcuts instead. I was wondering if there are some special measures besides the traditional ones (updated antivirus, firewall...)? Should we disable them and enable on demand or set privileges on them, what do you propose?

Arminius
  • 43,922
  • 13
  • 140
  • 136
Arslan Smal
  • 131
  • 3
  • Could you clarify if you mean USB Drives like a flash drive / external hard drive? USB Devices is very broad. Also, is this for home use on a personal network or for a business? You would go to more extremes in a business environment because end users are a big liability. – R. Murray Dec 23 '16 at 13:07
  • i mean any USB device – Arslan Smal Dec 23 '16 at 16:36

1 Answers1

1

To avoid any infection you should remove the USB ports.

Here are some measures one might take to minimise the probability of an infection:

1.) Provide users with USB devices. Allow only those devices to be used.

2.) Disable autorun for USB devices.

3.) Disallow the use of U3 devices.

4.) Allow only specially trained users with the permissions to transfer files between USB devices and your network. Those should know the procedures to minimise the probability of transferring infected files to your network (e.g. scanning the files beforehand).

5.) Allow the use of USB devices only on specific, air-gaped computers. Check files for malware before transferring them to your network.

Hacktiker
  • 914
  • 7
  • 14