Strengthening Regulations Governing Use of Portable Media

Twenty-first century man lives in a world in which 8 gigabytes (GB) of data can be stored on a device with dimensions of a little more than 3 centimeters by a little more than 1 centimeter. This device weighs less than 6 grams, costs less than 24 dollars, is highly portable, widely available, and easily accessible using a universal serial bus (USB) interface. These devices also are referred to as thumb drives, flash media, USB flash drives, memory sticks, removable storage media, or portable media. Although incredibly useful at home or at work, they pose a significant security risk. This form of media can easily be lost, stolen, or compromised. They also can be used to introduce, intentionally or unintentionally, malicious code and to infect a targeted system or series of systems on any network. As technology develops at such a rapid pace, emerging products become mainstream before sufficient testing is completed to determine the risks associated with using them. Additionally, users are so enamored with the convenience of a new device that they ignore the dangers connected with its use. Such is the case within the Department of Defense (DoD). Military regulations governing the use of portable media must be strengthened to prevent compromises by improving training and awareness, limiting individual discretion, and imposing stiff penalties when violations occur.