SCOTT AIR FORCE BASE, Ill. -- Don't jump to conclusions. Thumb drives on Air Force computers are still a no-go.
Although U.S. Strategic Command issued an order granting limited use of removable flash media devices under specific circumstances, flash media is still banned in the Air Force.
Once an Air Force policy is created, the use of any flash media device will only be authorized for mission-critical requirements and will be strictly managed.
An Air Mobility Command cyber defense working group is ready to implement the new Air Force policy, even as it continues to find ways to ease the pain from the restrictions.
"We do our best to understand how (the ban) impacts different organizations' missions," said Lt. Col. Michael Polley, deputy chief of operations at the AMC communications directorate.
"We're trying to support them as best we can within the constraints of government policy. We've come up with different workarounds for different people."
One workaround was developed for Air Force photographers. Most, if not all, digital cameras use flash memory cards. Now photographers have to download official photos on a non-networked computer, then save them to a CD and transfer them to a network computer.
This extra step allows the mission to get done while keeping the "bad guys" out of the network.
Exposing a network to flash media is like sleeping with the front door open in a neighborhood without laws -- anyone or anything can come right in without knocking.
Executable files on flash drives can be immediately downloaded before antivirus software can scan them, which is one reason why the Department of Defense banned them over a year ago.
The immediate download function isn't present with non-flash memory media, such as CDs and spinning external hard drives. They don't download files until the user opens them; and the user can (and should) perform an antivirus scan first.
"It's not just that comm. Airmen are touchier about information in government networks," Colonel Polley said. "The same danger holds true with flash drives on home systems."
For example, if you plug a thumb drive into your computer and then did your taxes online, you could make your personal and financial information available to outsiders, Colonel Polley said.
"Personally, my family doesn't use (removable flash media) anymore," he said. "We've put them in a drawer. Does it hurt? You bet. But the risk is too high, and there are other ways to transmit information securely."
"One way to ensure you do not receive malware while trying to transfer files would be through e-mail", he said. "Most major providers, such as Yahoo, include antivirus protection, and the e-mail gets re-scanned once it enters the network.
"Additionally, keeping your antivirus and system updated will go a long way to protecting your home computer," he said.
Other options include CDs and government-approved external hard drives.
Air Force Space Command is the designated approval authority for the Air Force network. The command is working to develop the policy and processes to allow use of removable flash media devices under carefully controlled circumstances.
"This will not be a return to 'business as usual,'" said Maj. Gen. Michael J. Basla, the Air Force Space Command vice commander. "There will be strict limitations on using flash media devices when the Air Force returns to limited access and use. These limitations will be vital to our cyber security."