The proliferation of writeable media devices such as USB thumb drives and CD/DVD-W has created security challenges – in fact, much of the more serious theft of organizations’ data today is from internal sources, and a very convenient and efficient way to accomplish this is by utilizing these devices to copy confidential data. This often takes a few seconds, and since it can be easily done from a desktop, physically limiting access to the servers is not a complete solution. So the question becomes, how does an organization protect itself against data leakage from such endpoints and internal threats, such as maliciously infecting the network with spyware and viruses borne on such media?
EventTracker Enterprise from Prism Microsystems provides complete security information and event management from servers in the datacenter all the way down to the workstation, and gives valuable insight into what users are doing. A key feature of EventTracker Enterprise is the ability to monitor removable media including USB drives, and CD/DVD drives. This allows organizations to detect and in many cases prevent confidential data loss, and limit purposeful or accidental attacks from insiders. This feature is available for Windows servers 2003 and 2008 including R2 and for workstations including XP, Vista and Windows 7.