Thumbs down to thumb drives

  • Published
  • By Nick DeCicco
  • 60th Air Mobility Wing Public Affairs
TRAVIS AIR FORCE BASE, Calif. --  Removable computer media is not to be used on any Department of Defense machine, according to a directive 60th Air Mobility Wing commander, Col. Mark Dillon signed recently.

Such devices plug into a computer using a Universal Serial Bus port, including iPods, cameras, cell phones and USB flash drives, often referred to as "thumb drives."
The directive is consistent with a DoD-wide scrubbing of all portable media issued last fall.

"Since I directed the 60th Communications Squadron to begin monitoring compliance with these instructions and directives, a large number of violations have been detected," he wrote. "Despite warnings, Travis Airmen and civilians continue to connect cameras, thumb drives, cell phones and iPods to our networked computers. This presents both a violation of clear direction and a threat to our continued cyber operations."

The stoppage affects everyone using a DoD computer, without exception. The penalties for disobeying this order include administrative action, nonjudicial punishment and/or court-martial, according to Colonel Dillon's letter. Violations by civilian personnel may also result in administrative-disciplinary action.

"The mission of the United States Air Force is to fly, fight, and win in air, space and cyberspace," Colonel Dillon wrote. "Each of us has a duty to ensure the integrity of Air Force computer systems."

There are no exceptions.

Bringing devices from home and plugging nongoverment-issued portable media into a network computer also is forbidden.

"When people used the thumb drives and brought them from home, they were actually opening up a back door and making it easy to infiltrate home computers and use government computers," said 2nd Lt. John Suter, the 60th Communications Squadron officer in charge of network operations.

In the interim, "spinning media" such as portable hard drives and compact discs are to be used. These are harder to use to infect a computer system especially with the type of malicious software as the worm that was detected from a thumb drive, said Airman 1st Class Ricka Spears, who works in network security for the 60th Communications Squadron.

The reason for the order is to protect computers from the Conficker/Downadup worms that have infected computers using Microsoft Windows operating systems since October 2008. It's to keep the network secure from intrusion, Airman Spears said.

Use of such devices helps the virus spread quickly and easily, said Lieutenant Suter
"Cyber security is as important as everything else," he said. "It's more and more important to be ready for battle physically and in cyberspace."

If one's computer is infected, the worm could spread to the entire network.

But detection is not a user concern. The communications squadron is constantly scanning the network for viruses, worms and other malicious software, Airman Spears said. She said most users probably would have no idea their computer is affected.

In the event a user's computer is infected, the communications squadron will have a representative inspect that machine.

The directive is expected to be temporary, but Airman Spears said a date for lifting the ban is yet to be determined. Still, she believes this is the best solution to the problem at present.

"I believe it is the easiest and safest way to keep the network protected especially since there are other methods of storing data essential to the mission," Airman Spears said.

Any questions regarding the use of portable electronic drives should be directed to the communications squadron's Information Assurance office at 424-0002.