Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

We would like to provide a flash drive to a client, that they can boot to, which includes a read-only operating system of our own customization, probably Linux. Every boot, it starts from clean slate.

With the current setup, a person with physical access to the drive could switch the write protect switch, inject some code that calls back their own server, flip the switch back, and we may or may not be able to detect that the code was injected, when booting, because once booted, the OS could be tampered to hide the injected files from boot integrity checksumming, or modify the checksumming routine not to check the injected files.

What I would like is to put a password on the flash drive, so the write protect can only be disabled if we enter the password.

  • Is there such a device with the additional hardware/firmware countermeasure I refer to? What would it be called, how could I find this type of product?
  • For an operating system that is required to contact our server equipment, do you have an alternate suggestion of how to detect and/or prevent operating system tamper such as this?
share|improve this question
add comment

3 Answers

If you google for secure flash drive you will find a few. There aren't many that are commercially available that will do exactly what you want though.

Have a look at http://www.secureusb.co.uk/index.php?route=product/category&path=35&gclid=CNTh9e3ykbACFYt-fAodn2Ojqg

share|improve this answer
add comment

You could encrypt the USB drive with truecrypt, then install your distro inside truecrypt to protect it. This wouldn't satisfy the write-protected requirement, but seems the best option considering everything else you're asking.

https://kb.berkeley.edu/jivekb/servlet/KbServlet/download/1625-102-55/

share|improve this answer
add comment

(The write protect switch on the model drive I have used is discrete like a reset button, you need to stick a pen or something into the slot in order to reach the switch and flip it)

The best solution I have so far - that still satisfies the requirement that no malicious files be downloaded by the user - is to get a flash drive that has a physical write protect switch, and apply a coating that will harden. (similar coats are on the market for covering tool handles, such as wrenches)

If the hacker has physical access, I see this setup as having 2 possible outcomes

  1. the tamper would be evident to the user (broken seal), or
  2. after tamper is complete, a new coat of similar color would have to be applied by the hacker.
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.