Solved

Secure any computer with a USB Drive

Posted on 2013-11-06
16
239 Views
Last Modified: 2013-11-11
Hello,

I would like help in creating a USB thumb drive which when plugged into any computer immediately starts securing it - firewall, antivirus, antimalware, antirootkit, antikeylog, etc.

I've seen many articles on securing the thumb drive. That's not what I'm looking for.

I would like to walk up to any computer, plug this USB drive in, let it do it's magic, and start using the computer resting assured in the fact that it is now secure. I'm not looking to encrypt traffic to a TOR, yet.

Is this possible? I've seen a commerical product that does something very similar.

Thanks
0
Comment
Question by:netcmh
  • 6
  • 5
  • 3
  • +2
16 Comments
 
LVL 82

Expert Comment

by:Dave Baldwin
ID: 39628320
What commercial product?  For all the things you list, it could take up to eight hours to scan the computer before you could use it.  Also, corporate computers will frequently have USB access blocked so their employees can't copy files to or from the computer.
0
 
LVL 20

Author Comment

by:netcmh
ID: 39628354
I wasn't asking about a corporate environment.

I'm looking for is a secure, protected environment made sterile by the USB drive. I understand that the AV part might have thrown you off as your scan comment indicates.

I may have worded the question inaccurately. I apologize.
0
 
LVL 82

Expert Comment

by:Dave Baldwin
ID: 39628370
a secure, protected environment made sterile by the USB drive.
I don't know what that means.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 39628607
Sorry, but you seem to be chasing dreams. If it is not infected yet, of course we could put a script on that stick to set configurations and maybe even script-start some portable virus scanner or install 3rd party anti-anti-anti-so-and-so software. But that would need UAC being off and autoplay being on - both not the default, so no magic, at least not out off the box.

But what if the computer is already infected? Any security expert will tell you that the worst thing a non-expert could then do would be trying to clean it and afterwards treat it as if it were clean. Trying to clean it automated even, as you would like it to be done is ridiculous, sorry. It would be anything but sterile afterwards.

Why not try a live-OS instead? A USB-bootable OS or even a read-only-live OS booted from CD? That's as close to sterile as you can get.
0
 
LVL 20

Author Comment

by:netcmh
ID: 39628627
Yes, I've looked into the liveCD or liveUSB OS options, but that doesn't get me access to the OS on the device which I need.

I appreciate all the help I'm getting, but not the attitude. Sorry.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 39628661
Well, sorry about "the attitude", I was only trying to express my opinion clearly, not meant offensive for sure. May I ask what you mean by "get me to the OS on the device"? You mean access the hard drive or its applications?
0
 
LVL 82

Expert Comment

by:Dave Baldwin
ID: 39628949
@netcmh, so far we don't understand what you actually want to do or how you expect to do it.  At least not in sufficient detail to provide better information to you.  Statements like "a secure, protected environment made sterile by the USB drive" and "get me to the OS on the device" don't have specific technical meaning to us or at least not to me.
0
 
LVL 2

Expert Comment

by:mannyfernandez
ID: 39629874
Not sure I have seen this before outside of probably one of the same you saw, although it does sound like a great idea.  Obviously this would be very OS centric as you would need to duplicate the efforts for potentially Windows, Mac, Linux and even Chrome (although if you are in a controlled environment in you corporate office this may not be the case)

I know Checkpoint has(d) a solution that would create a sandbox for you to work in and would remove all traces of your private data once disconnected.  However there would need to be some interaction with the files/file system on the USB to launch that environment.  

I apologize I did not offer you a solution but will do some research and hopefully add to the discussion moving forward.  Please update if you do find something.
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 20

Author Comment

by:netcmh
ID: 39631012
Yes, the sandbox environment is exactly what I'm looking for. The environment which would protect my work on the computer utilizing the OS and applications on the same.
0
 
LVL 12

Accepted Solution

by:
kadafitcd earned 500 total points
ID: 39631331
http://www.sandboxie.com/

This might fit the bill.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 39631737
At the start, you wrote you wanted to secure a computer, to clean it, and so on. Now you talk about sandboxing. What are you trying to do?
0
 
LVL 20

Author Comment

by:netcmh
ID: 39631893
I've never indicated that I need the PC cleaned. That was assumed by the first responder.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 39631922
I see... but what is it that you use that usb drive for, then? Something like a live system, or a rescue system or...? You did not answer my other question... it was "May I ask what you mean by "get me to the OS on the device"? You mean access the hard drive or its applications?"
0
 
LVL 20

Author Comment

by:netcmh
ID: 39638827
I thought I did answer that question by - The environment which would protect my work on the computer utilizing the OS and applications on the same.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 39638852
Still not clear to me.
The usb drive should be "The environment which would protect my work on the computer utilizing the OS and applications on the same" ?
How should the usb drive use applications installed on the Computer? That would not work with applications that use the registry (which is by far the majority). And what do you mean by "utilizing the OS"? Sorry, I still haven't the slightest idea how you plan to use that usb drive.
0
 
LVL 20

Author Comment

by:netcmh
ID: 39638870
I think I have my answer. I have explained it to the best of my understanding. I feel that the sandboxie answer does indeed fit the bill.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now