IronKey

Mobile Data Security Blog


by

The Cost of Cybercrime

 

Hackers are holding the world to ransom with cyber-attacks costing the global economy more than £238 billion a year¹. These attacks damage the global economy almost as much as illegal drugs and piracy, with financial losses from cyber theft resulting in a potential 150,000 European job losses.¹ Cybercrime is a growing menace which is proving to be an ever growing challenge for individuals and businesses. US retailing giant Target saw its earnings drop 46% after an attack that leaked more than 40 million customer credit card details², whilst eBay and Office have also been ‘hit’ this year, with customer data compromised.

Despite these devastating implications, the public, corporates and their employees continue to be careless with their valuable and highly confidential data –residing on laptops, tablets and mobile devices. Cyber espionage and theft of individuals’ personal information is believed to have affected more than 800 million people during 2013¹, and our mobile working culture has made data security an even greater challenge.

With IDC estimating that over one million smartphones were shipped last year³, someone somewhere in your company is using a personal, mobile device to connect to a corporate network and download sensitive data – making your organization a sitting target for cybercriminals. Companies must equip their employees with the means to protect corporate data from threats such as identity theft and cyber espionage, whilst mitigating the dangers associated with unsecured devices and free Wi-Fi hotspots.

Mobile devices need to maintain the same high levels of security as office-based desktops and servers, with only IT provisioned laptops or tablets connected to corporate networks. But, the best way of ensuring hackers can’t gain access to your company data, is by storing all your data on a secure fully encrypted Windows To Go USB flash drive. It provides employees with an IT managed and provisioned Windows workspace that replicates their secure office desktop environment, on any device that the USB is plugged into. This also means IT departments do not need to deploy individual computers but rather can deploy the Windows To Go workspace on USB drives which saves time, resources and introduces vast cost savings.

Staff awareness plays a crucial role in protecting the company network against cybercrime. Often under-estimating the inherent security risks of using personal devices in the office, employees must be educated to handle these responsibly – on a proactive, ongoing basis rather than waiting until a security breach occurs, when it’s too late.

With so many high profile security breaches making the headlines, organizations want to know that corporate data is secure at all times, regardless of where it resides, whilst employees need the flexibility to work remotely. Cybercrime can have a devastating impact on your business in terms of cost and reputation. Your organization can’t afford to be tomorrow’s headline…

 

Sources:

¹McAfee report, June 2014 – Net Losses: Estimating the Global Cost of Cybercrime

² http://www.businessweek.com/articles/2014-03-13/target-missed-alarms-in-epic-hack-of-credit-card-data

³ International Data Corporation (IDC)Worldwide Quarterly Mobile Phone Tracker, Jan 2014

 

 

 


 

 

 

by

Computer Breakdown – How My Windows To Go Drive Came to the Rescue

 

You know I’m a fan of Windows to Go . There are so many benefits it is hard to describe them all. The other day I was attending a tradeshow in San Francisco, staying in a swank hotel overlooking the bar next door. I brought my laptop so I could work in my room, but as you might imagine it was running from my PC on a Stick. The laptop was just my workhorse. After dinner, I headed back to my room and powered up the PC, and… NADA! It went part way through its boot sequence and then froze. I rebooted multiple times, pulled out the power supply, even did my reincarnation voodoo dance, but all to no avail. Of course I needed to urgently update a slide presentation before an analyst meeting in the morning – what was I to do??

I was at the show with one of my sales guys, and I knew he would be out drinking most of the night. I quick texted him and got him to drop off his laptop before he headed out. He mumbled something about not wanting to give me his password but I assured him it was not needed – I wouldn’t touch the hard drive on his precious laptop.

I plugged in my USB drive, booted his laptop, and up came my workspace, including the not-yet-completed slide presentation.

“Cool! I’d like to know how you did that, but I’m just a salesman. Also, I’ve got to have that laptop back in the morning without your stuff all over it,” he said.

“No worries, all my work goes into this little PC on a Stick.” I replied with a smile.

Well, the next morning I returned his laptop unscathed, met my colleague, borrowed his laptop to boot my WTG device, and walked him through the presentation. He was so enamored with my WTG drive that he hardly paid attention to my presentation but promised he would give me a very favorable write-up.

by

Travel Light and Secure

 

Hi, I’m Peter. I’m a Senior IT guy working for a big, growing enterprise.  I set the strategy and I’m responsible for the execution of IT infrastructure in my organization.   I need to worry about cost, security, and keeping my customers happy. We have pretty solid IT processes leveraging Microsoft tools, so I’m not about to set my IT team on some wild new solution that requires years to integrate. Recently, after a big meeting with the execs on cutting costs, I came across Windows to Go from Microsoft. Here is a solution that is secure, can save tons of money, make my customers happy, and fits into my IT workflow – Freakin’ SWEET!  My CISO stood up and applauded when I presented this to senior MGMT.  Needless to say I’ve become a big fan. In fact, they call me Windows To Go Guy around here. There are so many ways to apply this technology across my organization. I don’t get a commission on this stuff – I just love cool technology that makes sense. Here’s my blog entry:

Disclaimer: This blog is based on real Windows To Go ® use cases.  The character is fictitious to protect the names of our customers.  Any resemblance to actual customers is coincidental and not intentional.

I’m a Windows to Go guy. I carry my workspace around with me in my pocket, wherever I go. I don’t have to worry about hiding a laptop under the car seat. I don’t have to worry about it sliding off the seat during a sudden stop and I don’t need to try fit it under my coat during a sudden downpour.

One evening after work I had promised to stop at the local store to pick up some groceries. In line ahead of me were some military personnel dressed in camo. I noticed one person was carrying her laptop.
“Hey folks, I really appreciate what you guys do for our Country, but tell me, what’s with the laptop in the grocery store-are you expecting an email from the president?” I joked.

The corporal replied, “Military rules- laptops can’t leave our side. We even take them into the bathroom”.

“That stinks,” I replied.  “Let me show you something,” I replied. I whipped out my IronKey Workspace W500™, my PC on a Stick™ and explained that this was my laptop, FIPS secured against the worst imaginable attacker. It is virtually indestructible too, and I intentionally dropped it onto the hard tile floor to make my point.

“I have got to get my hands on one of those” she said.

“You are right about that, we can make your next bathroom or grocery stop a much more pleasant experience.” I replied.

by

Day One IT Integration for Mergers Using Windows To Go

 

A good friend of mine heads up IT for a successful Silicon Valley networking company. I met him for a beer recently and he looked as down as I’d seen him when his company was dealing with the Heartbleed issue. His company had just gone through a painful acquisition of a global high tech company and he was responsible for ensuring a smooth day one transition. As you know on the day of the acquisition, all the new employees need to have email access, intranet access, connections to corporate servers, VPN access, corporate wireless etc. They also need to continue accessing their existing services to make sure there is no disruption of the business. It can be an IT project management nightmare and my friend had miraculously pulled it off without a hitch.

“Why so blue, Superman?” I asked. “I hear you are the hero of IT!”

“Yeah, but guess what? We just announced another acquisition with 1000 employees, and this one closes in 6 weeks!” he replied. “Never fear, my friend. Let me buy you another beer and introduce you to my workspace in a pocket, PC on a stick,” I said with confidence.

I proceeded to lay out the following plan. Suppose you configure 1000 Windows To Go devices that provide all the applications, access tools and rules, and even personalized documents welcoming each new employee. Then on day one you welcome everyone to the new company and hand them their Windows to Go devices. They plug these into their existing work computers and, voila, they are fully operational on their new corporate systems. But they still need to access their old systems to do their day job. So, you unplug your PC on a Stick™  device to access your old system and plug it back in to access the new. Now, IT can do a step-wise conversion of groups and departments over the next weeks and months starting with the highest priority groups.

“I’m buying the beers…” he replied as a grin came to his brightened face. “This hero stuff is getting easier all the time!”

by

Standing Room Only: BadUSB at Black Hat

 

Our special guest blogger is Chris Louie, an IronKey sales engineer, who joined the company in 2011. 

As I took my seat in the packed Black Hat ballroom, I could sense the level of concern as everyone anxiously awaited the findings on BadUSB. Attacks against USB flash drives are nothing new, but they’ve always centered on the data being compromised or leaked.  Now we’re about to learn about a radically different type of attack. Suddenly the lights dim and the session title flashes across the screen: “BadUSB – On accessories that turn evil” presented by the authors of the malware.

Immediately, things looked bleak for security-minded professionals everywhere. A new type of threat has emerged! Malware is no longer relegated to only files stored on USB flash drives, but can now reside in the controller firmware inside the USB flash drive. And to make matters worse, it doesn’t just affect USB flash drives, but any USB device that has the ability to update its firmware, such as Android-based phones and tablets. BadUSB also has the ability to trick the computer into thinking a flash drive is a mouse or keyboard. Once a computer is infected, it will attempt to infect every USB device that connects to it in the future.

Now if that’s not enough to keep CIOs and CISOs awake at night, the malware authors state that there is currently no mechanism to detect or remove BadUSB from affected devices and computers. It acts as a launch pad to attack computers with the malware author’s attack of choice. Installation of Remote Access Trojans, key loggers, DNS cache poisoning, botnet creation and ransomeware are just a few of the cyber-criminal tools that can be deployed with the help of BadUSB.

Fortunately, not all is lost! BadUSB takes advantage of a commonly found practice in the flash drive industry: the vast majority of USB devices do not require digitally signed code in order to do a firmware update. Since day one, every IronKey device has followed the best practice of requiring digitally signed code for firmware updates to protect against this exact type of attack vector.

During the Q&A session with the malware authors, someone asked if requiring digitally signed code for firmware updates would protect a USB device from this attack.  The audience were assured that those devices are not vulnerable to this attack.

So get rid of that potentially dangerous flash drive and upgrade to a secure flash drive that cannot get infected with BadUSB.

 

 

by

Perspective on BadUSB

 

We recently learned that security researchers Karsten Nohl and Jakob Lell of Security Research Labs plan to present their research at Black Hat next week which consists of proof-of-concept malicious software called BadUSB. The premise of the BadUSB attack appears to be that you can change the firmware of the USB device. A fundamental feature of IronKey high security products is that changing the customized firmware is not possible. IronKey devices have digitally signed firmware with verification on start-up. If the firmware is tampered with, the device won’t function. This countermeasure has been validated by NIST in IronKey FIPS 140-2 Level 3 devices

Once the research is released we will carefully review to ensure there are no potential risks. We will then issue a statement. In the meantime if you have any questions please email securitysales@imation.com.

 

by

New IronKey Channel Program Debuts at Microsoft Worldwide Partner Conference

 

Interested in capitalizing on the emerging opportunities available with Windows To Go?   The IronKey Partner Program unveiled at this week’s Microsoft Worldwide Partner Conference in Washington DC.  Designed to make our partners successful, the new program, consisting of Platinum, Gold and Silver levels, enables security resellers and Microsoft Certified Partners to more easily and profitably sell the family of IronKey Workspace PC on a Stick™ products for Windows To Go.   If you’re at the show, stop by our booth #621 to learn more.

Our new IronKey Channel Program elements include:

* A deal registration program offering generous margins and recurring revenue from license and maintenance renewals.

* Training via a variety of formats including new online courses.

* An enhanced partner portal for lead tracking, sales and marketing support programs and technical resources.

We’re hearing great things from our partners about the reception to Windows To Go as organizations look to meet the needs of an evolving mobile workforce.   But don’t take my word for it; here’s what our partners had to say:

Ed McNamara, Director of Communications and Marketing at SHI International Corp

“The BYOD trend has been a closely watched topic as the demands of a more mobile workforce clash with IT’s need to keep corporate data and the network secure. We’re looking forward to providing customized Windows To Go solutions for trusted IT-managed workstations.”

Ted Murphy, President of Matrix Mobile Security Solutions

“The healthcare industry is notoriously slow in adopting new technologies because of stringent regulations and compliance requirements for protecting patient health information (PHI). Together, Windows To Go and IronKey’s secure PC on a Stick are a breakthrough in supporting a more mobile healthcare workforce while ensuring security.”

Larry Hall, Vice President of Purchasing and Partner Development at Paragon Micro

“New mandates are requiring a certain percentage of federal employees to be teleworkers. Federal agencies are struggling to meet these mandates due to security concerns that unauthorized devices could access government networks. Based on the early success we’ve had with a large federal agency, we see great value in being an Imation partner selling the IronKey secure mobile workplace solution.”

Click here to learn more about the partner program.

by

Will the World Cup Result in a Red Card for your Business?

 

With the ‘Hacktivist’ group Anonymous having announced they were preparing a full scale cyber-attack on the World Cup’s corporate sponsors during the tournament, and an influx in World Cup related malware, security threats are likely to be the topic of choice for all those looking to protect against potential breaches and attacks during the tournament.

IT managers will have been steeling themselves for a potential spike in lost corporate devices, such as USB’s, tablets and mobile devices, during the World Cup. Whether it be a flight to Brazil, a booze fuelled train journey home, or live streaming a match from your laptop, the potential for a security breach, and the resulting consequences, could be more excruciating than a bite from Luis Suarez!

Whilst the tournament might be coming to a close, the risks associated with remote workers and mobile devices are still an inherent danger to corporate data. Many of us undertake work while commuting, with little regard for the security of the information we are working on, so whether you are lucky enough to have flown out to watch a match, or simply travelling home after watching the game in the pub, the need to secure your devices is never more crucial.

With shrinking boundaries between work devices and work-enabled personal devices, the risk of corporate data falling into the wrong hands is a huge possibility. Employees dropping memory sticks, leaving files on trains, and laptops in bars, are all high probabilities, and inevitably, these devices will contain data not meant for prying eyes.

Failing to protect the vast volumes of information they carry and not equipping employees with the IT tools required to securely manage and handle information while travelling could result in a ‘red card’ for your business.

No computer or tablet not ‘locked down’ by IT should ever be connected to the corporate network, either from inside (fixed line or BYOD) or outside (VPN of VDI). Allocating employees a corporate computer for use inside the network and an IT secured USB device for outside would simplify security and avoid frustrations typically related with tight security policies such as these.

Whether your data is in transit or at rest, encryption is absolutely essential to safeguarding confidential company information. Whether you use strong authentication or hardware encryption will very much depend on your organisation, you need to be able to manage encrypted devices in order to ensure that if there are any concerns that data integrity has been compromised it is possible to remotely wipe the device.

Accidents will happen, but being vigilant in your security practices, and, educating and enabling your employees could be as easy as knocking England out of the Cup altogether.
redcard

by

IronKey Workspace W700 Drives with FIPS 140-2 L3 Set New Standard in Mobile Workspaces

 

Great news for government and other highly-regulated enterprises that require a FIPS 140-2 Level 3 Windows To Go drive— IronKey Workspace W700 ™ drives are now available!   Our W700 PC on a Stick™ drives are the first Microsoft-certified Windows To Go devices to be FIPS 140-2 Level 3 validated. Now you can enjoy all the benefits of Windows To Go while meeting strict data security mandates.

Why is this Significant for Government Agencies?

If your agency is looking to provide mobile workspaces for your contractors, field workers, employees who want to BYOD or telework, this solution is a “no brainer”.  The Windows To Go approach is up to 90 percent more cost effective and more secure than issuing a new laptop or using VDI.  Visit our use case section to learn how agencies are using Windows To Go today (link to Use Case section).

What is Windows To Go?

Windows to Go is an enterprise feature of Windows 8.1 that lets people be productive from almost any location they choose to work by inserting the Windows To Go USB drive into any compatible PC of their choice. An organization’s corporate image, operating system, applications and data are all contained on the Microsoft-certified IronKey Workspace USB drive. The host PC boots completely off the Windows To Go drive using local resources such as monitors, CPUs and network connections.  The Windows To Go drive can be centrally managed and offers remote wipe features to protect against loss and theft. The Windows To Go solution is ideal for mobile workers, teleworkers and contractors, fueling secure “Bring Your Own Device” (BYOD) strategies that allow employees to use their home PCs for work.

IronKey Workspace W700

by

Securely Working from Home – Freakin’ SWEET!

 

Hi, I’m Peter. I’m a Senior IT guy working for a big, growing enterprise.  I set the strategy and I’m responsible for the execution of IT infrastructure in my organization.   I need to worry about cost, security, and keeping my customers happy. We have pretty solid IT processes leveraging Microsoft tools, so I’m not about to set my IT team on some wild new solution that requires years to integrate. Recently, after a big meeting with the execs on cutting costs, I came across Windows to Go from Microsoft. Here is a solution that is secure, can save tons of money, make my customers happy, and fits into my IT workflow – Freakin’ SWEET!  My CISO stood up and applauded when I presented this to senior MGMT.  Needless to say I’ve become a big fan. In fact, they call me Windows To Go Guy around here. There are so many ways to apply this technology across my organization. I don’t get a commission on this stuff – I just love cool technology that makes sense. Here’s my blog entry:

Disclaimer: This blog is based on real Windows To Go ® use cases.  The character is fictitious to protect the names of our customers.  Any resemblance to actual customers is coincidental and not intentional.

Perhaps I’m a bit of a workaholic, but I don’t think I’m alone. After the kids go to bed, I read email, work on reports, look at presentations, and study excel spreadsheets. I’ve tried webmail  and VPN access to file shares from my home computer, but it is just not the same as having your own workspace at home with you. For the past 20 years, I’ve had to lug my laptop between work and home. But laptop screens are tiny when you are looking at a 50-column spreadsheet or comparing two documents side by side.  My home computer on the other hand, has a 27” monitor, surround sound, and fast direct Ethernet connect. In addition, we just bought a new Mac – sweet! I’ve wanted to use my home set-up for work and I’ve waited patiently, for 20 years to solve this problem.

Enter Microsoft Windows to Go. Six months ago, I loaded my entire workspace onto a tiny IronKey Workspace W500 ™ USB 3.0 flash drive with the works: OS, apps, AV scanners, and data.. With 128Gbyte, there is plenty of space. When I’m at work, I plug this device into my work computer and run my workspace from the drive. Because it is flash, it runs much faster than my spinning hard drive in the host computer. When it is time to leave the office, I simply unplug the USB drive, stick it in my pocket, and head for home for dinner with the kids.

Later in the evening, I retire to my man-cave, slide the IronKey Workspace W500 flash drive into my mega machine, and my workspace magically appears before me. I settle back into my deep cushion chair, turn down the lights, fire up some hard rock, and slip back into my working world in the comfort of my home. Now that’s productive work at home!