Abstract:Nowadays, The Universal Serial Bus (USB) is one of the most adopted communication standards. However, the ubiquity of this technology has attracted the interest of attackers. This situation is alarming, considering that the USB protocol has penetrated even into critical infrastructures. Unfortunately, the majority of the contemporary security detection and prevention mechanisms against USB-specific attacks work at the application layer of the USB protocol stack and, therefore, can only provide partial protection, assuming that the host is not itself compromised. Toward this end, we propose a USB authentication system designed to identify (and possibly block) heterogeneous USB-based attacks directly from the physical layer. Empirical observations demonstrate that any extraneous/malicious activity initiated by malicious/compromised USB peripherals tends to consume additional electrical power. Driven by this observation, our proposed solution is based on the analysis of the USB power consumption patterns. Valuable power readings can easily be obtained directly by the power lines of the USB connector with low-cost, off-the-shelf equipment. Our experiments demonstrate the ability to effectively distinguish benign from malicious USB devices, as well as USB peripherals from each other, relying on the power side channel. At the core of our analysis lies an Autoencoder model that handles the feature extraction process; this process is paired with a long short-term memory (LSTM) and a convolutional neural network (CNN) model for detecting malicious peripherals. We meticulously evaluated the effectiveness of our approach and compared its effectiveness against various other shallow machine learning (ML) methods. The results indicate that the proposed scheme can identify USB devices as benign or malicious/counterfeit with a perfect F1-score.

Analysis and Enforcement of Recognizing USB Token by Host

Enhanced Recognition of USB Token

Fingerprint-based Authentication in Networking Environment

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

Research on Foundation Fieldbus Token Mechanism

Sensory-Data-Enhanced Authentication For Rfid-Based Access Control Systems

Research on Side Channel Attack for USB Key

USBIPS Framework: Protecting Hosts from Malicious USB Peripherals

An Authentication Protocol in Mobile RFID Environment

To (US)Be or Not to (US)Be: Discovering Malicious USB Peripherals through Neural Network-Driven Power Analysis

Study on the Model and Algorithm of Internet Trusted Identity Authentication System.

An Enhanced Secure Authentication Scheme With One More Tag for RFID Systems

A Security Protocol for the Identification and Data Encrypt Key Management of Secure Mobile Devices

Establishment of Trusted Platform of PC Based on Intelligent Card

An Identity Authentication Mechanism Based on Timing Covert Channel.

QRToken: Unifying Authentication Framework to Protect User Online Identity

An Enhanced Secure Identity-Based Certificateless Public Key Authentication Scheme for Vehicular Sensor Networks

Flexible Authentication Technique for Ubiquitous Wireless Communication using Passport and Visa Tokens

Research and Realization of Session Defined in PKCS#11

A New Method For Authentication Based On Covert Channel