Share

Related Stories

  • Canon printer protects data in copied documents
    Printer company Canon has unveiled a printer that can automatically protect the data in copied documents. The Canon ImageRunner Advance printer, targeted at medium to large enterprises, features Scan Lock, a system which superimposes a watermark on copied documents, coded as a series of microdots.
  • Canon warns of digital printer security issue
    You wouldn't class digital printers as being a security risk but, according to Quentyn Taylor, director of information security with Canon, high-end multi-functional printers pose a serious security risk when they come to the end of their working lifetime.
  • Keeping sensitive information secure when staff is leaving
    Career loyalty is an endangered creature. Unlike our predecessors, today’s workforce is unlikely to stay committed to a job for five years, let alone their entire lives. But with such a fluid stream of employees keeping human resources busy, and countless eyes being cast over company data, Rob Stringer investigates how sensitive information can stay faithful to its organisation, even if its staff don’t...
  • Comment: Security Has Become a Black and White Issue
    As cyber-attacks become increasingly sophisticated, Bimal Parmar of Faronics argues that organizations can no longer rely solely on traditional blacklist technologies, but must adopt a layered approach to endpoint security
  • Biometrics: How and Now?
    Using biometric data for identity access and management can be a controversial move. Esther Shein examines the drawbacks, and looks at where and how biometrics are currently being used

Top 5 Stories

News

Canon warns of digital printer security issue

17 June 2010

You wouldn't normally classify digital printers as being a security risk but, according to Quentyn Taylor, director of information security with Canon, high-end multi-functional printers pose a serious security risk when they come to the end of their working lifetime.

The problem, he says, stems from the fact that all data scanned, processed, printed or similarly manipulated on a high-end printer system is spooled and stored on the machine's hard disk.

On a high-end digital printer , the scanned images are stored in an unencryted format - and when the unit is disposed of by its first owner, anyone in the know can extract this data and generate thousands of images that have been processed and printed on the unit.

"People don't realise that most office [high-end] printers are actually a server. I always ask my audiences at conferences whether they know this and a good 40 per cent say they don't", said Taylor.

The security problem is made worse by the fact that most high-end printers are usually commissioned by facilities managment teams in most major companies, rather than the IT department, he says. "It's a bit like the old phone systems of the 1970s. FM teams installed them back then, but now we have VOIP, there's a security issue that needs to be addressed. It's the same with high-end printers", he explained.

The solution - which Canon has been addressing for some time - is to install an encrypted hard drive at a cost of £120 extra and upwards on a typical high-end printer.

In addition, at the end of the digital printer's initial working life, Taylor says that company IT managers need to dispose of the server drive by shredding the data on the disk, rather than simply selling the unit on to a third party, including all the data on the drive.

"This is a potentially major security issue that companies using high-end printer technology should be aware of. Just as computer hard drives need erasing at the end of their working life [in an organisation] so the printer hard drive also needs wiping", he said.

This article is featured in:
Application Security • Compliance and Policy  • Data Loss

 

Comment on this article

You must be registered and logged in to leave a comment about this article.