Home > Ask the Security Experts > Questions & Answers > The hazards of a USB port on a firewall appliance
Ask The Security Expert: Questions & Answers
EMAIL THIS

The hazards of a USB port on a firewall appliance

Jonathan Callas EXPERT RESPONSE FROM: Jonathan Callas

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 20 February 2003
I have a simple question concerning USB ports on firewall appliances. Can this be a security hazard and compromise the firewall?

>

I don't really see it. It could, sure. Anything you do to a computer that doesn't include keeping it powered off could compromise it. But realistically, I wouldn't worry about it.

USB is a a serial bus designed to replace the mass of cables that you have with keyboards, mice, modems and so on. As you no doubt know, you can even put disk drives and other reasonably fast devices on it as well. This is even more viable with USB2.

But as a security threat, USB doesn't create one in and of itself. If someone already has potentially compromising access to a firewall (like the root password), then USB could make it easier for them to do bad things. But they already could do bad things.

An old saying in computer security is that physical access is all. Someone who can put their hot little hands on a computer can do much more to it than someone who has to use a network. Put your firewall behind a locked door. Give keys to only a limited number of people. Better yet, make it an electronic lock that makes an audit record for everyone who badges in. In such a situation, USB isn't much of a worry at all.


For more information on this topic, visit these other SearchSecurity.com resources:
  • Virus Prevention Tip: USB: The new virus infection pathway
  • Ask the Expert: Viruses transmitted via USB ports
  • Tech Tip: Key chain data thieves


  • Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts