(from Inside Higher ED) Institutions need to think about physical attacks to devices, in addition to remote attacks, say school technology and security officers. Many universities report that students using hardware "keyloggers" are compromising professors' accounts and changing grades or gaining access to test questions and answers. Keylogging hardware is different from keylogging software, which is seen as an external threat. The hardware is cheap and is typically placed in the USB port where the keyboard plugs into the computer. The devices can sometimes be embedded in the keyboard itself, making them harder to spot. Two-step verification processes (also called multifactor authentication) are a good countermeasure to protect against passwords being stolen through keylogging.
Listen to the latest episode of the Net Assets podcast.
