Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am developing a project where I need to restrict usage of accessing non white-listed USB devices in the organization's network.

I am using it by checking the VID and PID of that USB devices.

Now, the problem is that if I have, for example, an Apple I-pad, that would have a global VID and PID number. If I white list any of the Apple I-Pads then, with my current scenario, all other Apple I-Pads would be authorized in the network.

Is using VID and PID numbers the best way to check if a USB device is white-listed, or is there a better solution?

Thanks.

share|improve this question
    
Keep in mind this isn't going to prevent people from booting via USB unless you disable "Boot from USB" in BIOS of each computer. – cutrightjm Oct 1 '12 at 20:28
up vote 1 down vote accepted

I suggest you take a look at this document :
Thumb Drive Threats and Countermeasures in a Microsoft Windows

Especially look at the chapter "Threat Countermeasures", where are described the security measures built into Windows, as well as commercial security products such as :

GFI LanGuard
Lumension
DeviceLock

share|improve this answer
1  
Thanks for the information, but have you worked on any such kind of security measures in any organisation? – Rahul Oct 4 '12 at 15:38
    
Sorry, I have no experience with any of these products. Employees in my company can take home their laptops, so thumb drives are not our main worry. – harrymc Oct 4 '12 at 17:25

Most USB devices with storage have a serial number; use that.

For example, in Linux, you can see this in the output of lsusb:

lsusb -v
...
Device Descriptor:
  ...
  idVendor 0x1908
  idProduct 0x0102
  ...
  iManufacturer 2 BUILDWIN
  iProduct 3 Digital Photo Frame
  iSerial 1 200807101900000000
  ...
share|improve this answer
    
Can you show any serial number example here – Rahul Sep 26 '12 at 10:45
    
I am using Asp.net c#, and does not found any Serial Number. – Rahul Sep 28 '12 at 11:33
    
On Windows, you get the VID, PID and serial# from the device InstanceID. – MSalters Sep 28 '12 at 11:42
    
serial id is what device id you are talking about.?correct me if i am wrong – Rahul Sep 28 '12 at 11:50
1  
This page looks as if it might help you: How to Access the Serial Number on Your Flash Drive – CL. Sep 28 '12 at 12:59

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .