Insecure Removable Media Devices Threaten the Liberation of Data
August, 2006Research issued today by Reflex Magnetics and the Social Futures Observatory has revealed that despite the increased use of removable media devices to assist mobile working, bad management of the devices leaves businesses and consumers data at risk of loss and theft. The Mobile Access study investigated attitudes towards portable media and storage devices, which, whilst becoming smaller, cheaper and more disposable, are proving increasingly difficult to manage.
The study revealed that 61.5% of memory stick owners use their devices to transfer data to their PC; 53% to their laptop; 5% to their games console; 5% to their mp3 players and 2.6% to their Smartphone/Blackberry. These statistics show that memory sticks are becoming increasingly important, providing individuals with flexibility over where and how they work in addition to reducing overhead and personal equipment costs, such as personal printers.
"It is good that you can use it take information off your laptop and go into University to use their printers." (Females respondent, Mobile Access study)
"It is good that you can use it take information off your laptop and go into University to use their printers." (Females respondent, Mobile Access study)
"The growing transformations in the market for highly portable devices, where they facilitate the rapid transfer of data, raises serious questions about the opportunities for the liberation of corporate data, the potential for the transfer of destructive viruses and the serious threat of identity fraud following the loss of theft of such devices carrying personal details," said Professor Michael Hulme, director of the Centre for the Study of Media, Technology and Changes.
Despite this increased use and the obvious benefits, such as ability to store a great deal of data; the speed of data transfer and ease of use, the value of these devices isn’t fully appreciated by end-users. Given this under-valuing of devices, many people are not fully considering the implications of losing such a device, as these responses show:
"My memory stick is not very expensive, if I lost it I could use email again…….I like them, but they’re not really that important."
"I like it, but it’s not vital, it’s just convenient that it’s there."
Whilst simple storage devices such as USB keys have become cheaper and easier to use, more and more devices have emerged which store even larger quantities of data. Because the primary function of devices such as digital cameras, MP3 players and mobile phones, is not likely to be data storage, the unintentional release of data upon sale or loss of such equipment, is not being considered by users.
Despite this increased use and the obvious benefits, such as ability to store a great deal of data; the speed of data transfer and ease of use, the value of these devices isn’t fully appreciated by end-users. Given this under-valuing of devices, many people are not fully considering the implications of losing such a device, as these responses show:
"My memory stick is not very expensive, if I lost it I could use email again…….I like them, but they’re not really that important."
"I like it, but it’s not vital, it’s just convenient that it’s there."
Whilst simple storage devices such as USB keys have become cheaper and easier to use, more and more devices have emerged which store even larger quantities of data. Because the primary function of devices such as digital cameras, MP3 players and mobile phones, is not likely to be data storage, the unintentional release of data upon sale or loss of such equipment, is not being considered by users.
"I like it, but it’s not vital, it’s just convenient that it’s there."
Whilst simple storage devices such as USB keys have become cheaper and easier to use, more and more devices have emerged which store even larger quantities of data. Because the primary function of devices such as digital cameras, MP3 players and mobile phones, is not likely to be data storage, the unintentional release of data upon sale or loss of such equipment, is not being considered by users.
Whilst simple storage devices such as USB keys have become cheaper and easier to use, more and more devices have emerged which store even larger quantities of data. Because the primary function of devices such as digital cameras, MP3 players and mobile phones, is not likely to be data storage, the unintentional release of data upon sale or loss of such equipment, is not being considered by users.
"With the cost of these removable media devices being constantly driven down individuals are failing to make the connection between the value of the data stored on such devices and the level of care that needs to be taken to secure it," said Neil Larkins, director of Reflex Magnetics. "The study highlights the need for an education process, to ensure these businesses and end-users understand that devices should be properly managed and that full consideration is given to the effect of the loss or theft of the data."
With the worldwide portable media market expected to reach 187.7 million units in 2006 (Gartner: June 2006) the increased desirability of portable media players makes them much more susceptible to theft, so any important data saved on the devices would be lost should they become victims of theft. Because these devices are rarely encrypted confidential business and customer information is available to anyone who picks up the devices. Individual users who use the devices to store personal information such as bank account numbers and passwords put themselves at serious risk of identity theft and fraudulent use of their personal details.
"Our study has shown that these devices are undoubtedly a highly useful tool, but businesses and individuals cannot afford to ignore the threat to their data security posed by these devices, and should secure their data accordingly," commented Hulme. "As recent cases highlight, such as the memory sticks containing highly confidential US military information found for sale in Afghanistan, unsecured information can be highly compromising if it falls into the wrong hands."
The Centre for the Study of Media, Technology and Culture’s Mobile Access study was conducted between April and June 2006 and included 100 interviews, 10 focus groups, 1,000 quantitative case studies and desk based research.
About Reflex Magnetics
Established in 1985, London based Reflex Magnetics is a leading provider of IT security solutions for organisations world-wide. The Reflex Magnetics security standard has now become essential practice for 1,000 customers around the globe. The company counts NATO, the UN, over 300 MoD sites, and numerous UK Police organisations as long standing clients.
Reflex Disknet Pro was first launched in 1992 and is firmly established as the market leader world-wide. With its stablemates – Reflex DataVault (government approved Laptop encryption), and Reflex MailSafe (the only UK government approved S/MIME v3 email encryption product), Reflex Magnetics continues to develop its reputation as IT security developers of the highest calibre.
Reflex Magnetics has established an extensive world-wide operation to support its rapidly expanding customer base. Subsidiaries are located across Britain, Europe, the USA, Africa and Australasia.
For further information please contact:
Jamie Kilduff/Eleanor Gough
Bite Communications
Tel: /3472
Email:
