Bad Universal Serial Bus(badUSB)是一种利用Universal Serial Bus(USB)接口来攻击计算机的设备,由于其伪装成正常的计算机USB外设,杀毒软件的防护对其没有任何作用,因此是一种极难防御的攻击手段。本文设计了一种利用微控制器USB主机来探测防御badUSB的设备,此设备成本低、体积小、安全性高,而且不影响USB通信速度。
Abstract
Bad Universal Serial Bus (badUSB) is a kind of device to attack computers by Universal Serial Bus (USB) port.It can camouflage as a normal USB device.The computer protective measure by anti-virus software is invalid.The attack from badUSB is very difficult to block.This paper introduces and verifies a device to block the badUSB by micro-controller USB host.The device is low-cost,small volume and highly safe,and the communication bandwidth of USB port is normal.
关键词
badUSB /
STM32F405RG /
信息安全 /
TS3USB221
Key words
badUSB /
STM32F405RG /
information security /
TS3USB221
{{custom_sec.title}}
{{custom_sec.title}}
{{custom_sec.content}}
参考文献
[1] Shin S,Gu G.Conficker and beyond:a large-scale empirical study[C]//Proceedings of the 26th Annual Computer Security Applications Conference,2010:151-160.
[2] Nohl K,Lell J.Bad USB-On accessories that turn evil[C]//Black Hat USA,2014:1-22.
[3] 陈威,陈乐然,徐小天,等.USB设备对电力工控系统的威胁[J].华北电力技术,2016(7):5
[4] 赵松银,郁滨.USB安全连接方案设计与实现[J].系统仿真学报,2016,28(6):6.
[5] Loe E L,Hsiao H C,Kim T H J,et al.Sand USB:An installation-free sandbox for USB peripherals[C]//2016 IEEE 3rd World Forum on Internet of Things(WF-IoT).IEEE,2016:621-626.
[6] Kang M,Saiedian H.USB Wall:A novel security mechanism to protect against maliciously reprogrammed USB devices[J].Information Security Journal:A Global Perspective,2017,26(4):166-185.
[7] 张乃珩.一种基于Hypervisor的BadUSB攻击防御方法[J].河南科学,2020,38(9):1400-1408.
[8] usb org.Defined Class Codes[EB/OL].[2023-06].https://www.usb.org/defined-class-codes.
PDF(1639 KB)
