关键词: USB HID设备, 攻击与防护, 恶意硬件, USB枚举, 主动认证, 隐私保护

Abstract: A novel USB attack technology called USB HID attack is emerging, which is an attack using USB HID protocol vulnerabilities. This technology will hide malicious code in the chip firmware, so that it cannot be detected by existing antivirus software and intrusion detection systems. It has been a serious threat to the security of users privacy due to rapid spread and extreme destruction. This paper analyzes the principle of this attack technology from USB protocol level, and summarizes the development of this technology since its emergence. Moreover, this paper compares the advantages and disadvantages of the existing protection technology. Finally, this paper discusses how the future security system deals with malicious hardware.

Key words: USB HID device, attack and defense, malicious hardware, USB enumeration, active authentication, privacy protection