The most basic approach that I'm talking about would block anyone non in the admin group from mounting anything. If you want to allow CD-ROM/DVD mounts, but not USB storage devices, then I don't have anything for you...maybe someone else has an idea.
There used to be documentation on Apple's developer site about rigging up OS X for kiosk use, but it's out of date so I haven't linked to it here.