关键词: 恶意USB设备, HID接口, 数据传输, HID键盘, 安全性分析, 用户权限, USB复合设备

Abstract: This paper discusses research activities that investigated the risk and protection mechanism associated with USB devices. Using USB interface protocol, an adversary can mount suck an attack with an objective to get the administrators permission of computer, autorunning the malware, obtaining the stored information, even remotely controlling the computer. The work was validated through the design and implementation of a malicious USB device that can be disguised as the keyboard. Files stored in the computer are got remotely through this keyboard without violating any system rules. With high concealment, this method has high threat to classified computers, which cannot be found or removed by the antivirus program. Furthermore, this paper proposes the corresponding protection mechanism of USB devices.

Key words: malicious USB device, HID interface, data transmission, HID keyboard, security analysis, user permission, USB composite device