Please use this identifier to cite or link to this item:
Title: USB devices phoning home
Language: English
Authors: Schilling, Roland 
Steinmetz, Frieder 
Keywords: USB;rogue chanel;device behavior vs. user intent
Issue Date: 9-Feb-2016
Publisher: BoD–Books on Demand
Source: 23. DFN-Konferenz "Sicherheit in vernetzten Systemen"
Abstract (english): USB is a versatile standard defining various features to allow maximum flexibility for evices. This flexibility, by design, leads to complex device configurations, combining multiple functions into one, making it impossible for users to identify the function of a device by its looks. This can be exploited by crafting programmable USB devices, looking and behaving like an ordinary flash drive that also expose virtual network devices and other functionality to their host OS. This paper outlines such a device, exploiting several USB features to establish a rogue HTTP channel used to leak data stored on the device’s disk to an internet back end. We describe the device itself and its architecture and our conclusions and methods for dealing with the issues presented in a user–friendly way.
DOI: 10.15480/882.1279
ISBN: 9783739223131
Institute: Sicherheit in verteilten Anwendungen E-15 
Type: ResearchPaper
License: CC BY-NC-ND 4.0 (Attribution-NonCommercial-NoDerivatives) CC BY-NC-ND 4.0 (Attribution-NonCommercial-NoDerivatives)
Appears in Collections:Publications with fulltext

Files in This Item:
File Description SizeFormat
paper.pdf107,17 kBAdobe PDFThumbnail
Show full item record

Page view(s)

Last Week
Last month
checked on Sep 24, 2020


checked on Sep 24, 2020

Google ScholarTM


Note about this record


This item is licensed under a Creative Commons License Creative Commons