Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am developing a project where I need to restrict usage of accessing non white-listed USB devices in the organization's network.

I am using it by checking the VID and PID of that USB devices.

Now, the problem is that if I have, for example, an Apple I-pad, that would have a global VID and PID number. If I white list any of the Apple I-Pads then, with my current scenario, all other Apple I-Pads would be authorized in the network.

Is using VID and PID numbers the best way to check if a USB device is white-listed, or is there a better solution?

Thanks.

share|improve this question
    
Keep in mind this isn't going to prevent people from booting via USB unless you disable "Boot from USB" in BIOS of each computer. –  ekaj Oct 1 '12 at 20:28
add comment

2 Answers

up vote 1 down vote accepted

I suggest you take a look at this document :
Thumb Drive Threats and Countermeasures in a Microsoft Windows

Especially look at the chapter "Threat Countermeasures", where are described the security measures built into Windows, as well as commercial security products such as :

GFI LanGuard
Lumension
DeviceLock

share|improve this answer
1  
Thanks for the information, but have you worked on any such kind of security measures in any organisation? –  Rahul Oct 4 '12 at 15:38
    
Sorry, I have no experience with any of these products. Employees in my company can take home their laptops, so thumb drives are not our main worry. –  harrymc Oct 4 '12 at 17:25
add comment

Most USB devices with storage have a serial number; use that.

For example, in Linux, you can see this in the output of lsusb:

lsusb -v
...
Device Descriptor:
  ...
  idVendor 0x1908
  idProduct 0x0102
  ...
  iManufacturer 2 BUILDWIN
  iProduct 3 Digital Photo Frame
  iSerial 1 200807101900000000
  ...
share|improve this answer
    
Can you show any serial number example here –  Rahul Sep 26 '12 at 10:45
    
I am using Asp.net c#, and does not found any Serial Number. –  Rahul Sep 28 '12 at 11:33
    
On Windows, you get the VID, PID and serial# from the device InstanceID. –  MSalters Sep 28 '12 at 11:42
    
serial id is what device id you are talking about.?correct me if i am wrong –  Rahul Sep 28 '12 at 11:50
1  
This page looks as if it might help you: How to Access the Serial Number on Your Flash Drive –  CL. Sep 28 '12 at 12:59
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.