Hardware Trojan Horse device based on unintended USB channels

NSS 2009 - Network and System Security

Volumn , Issue , 2009, Pages 1-8

  Clark, John ^a   Leblanc, Sylvain ^a   Knight, Scott ^a  

^a ROYAL MILITARY COLLEGE OF CANADA   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

PROOF OF CONCEPT; RESEARCH ACTIVITIES; TROJAN HORSE; TWO WAY COMMUNICATIONS; USB DEVICES;

COMPUTER HARDWARE;

NETWORK SECURITY;

EID: 72849124307     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NSS.2009.48     Document Type: Conference Paper

References (20)

1. USB Implementers Forum, "USB 2.0 Specification," 2001, http://www.usb.org/developers/docs.
2. S. Stasiukonis, "Social engineering, the USB way," 2006, http://www.darkreading.com/document.asp?doc\id=95556.
3. -, "Social-engineering employees," 2007, http://www. darkreading.com/document.asp?doc\id=140433.
4. CentenialSoftware, "Devicewall home page," 2009, http://www.devicewall.com.
5. CheckPointSoftware, "Pointsec protector homepage," 2009, http://www.checkpoint.com/products/datasecurity/protector.
6. J. Clark, "An examination of endpoint security methods to regulate USB flash drives use," Royal Military College of Canada, M.A.Sc. Depth Research Paper, Oct. 2007.
7. DeviceLockInc., "Devicelock homepage," 2009, http://www.devicelock.com.
8. J. Axelson, USB Complete, 3rd ed. Madison WI, USA: Lakeview Research LLC, 2005.
9. D. Barral and D. Dewey, ""Plug and Root", the USB Key to the Kingdom," 2005, http://www.blackhat.com/presentations/bh-usa-05/BH\US\ 05-Barrall-Dewey.pdf.
10. M. Al-Zarouni, "The reality of risks from consented use of USB devices," in Proceedings of the 4th Australian Information Security Conference, Sep. 2006, pp. 5-15.
11. G. Shah, A. Molina, and M. Blaze, "Keyboards and covert channels," in Proceedings of the 15th conference on USENIX Security Symposium, 2006.
12. Common Criteria Recognition Agreement, "Common criteria for information technology security evaluation, version 2.3," 2005, http://www.commoncriteriaportal.org/thecc.html.
13. PLX Technology, "Net2280 home page," 2008, http://www.plxtech. com/products/net2000/net2280.asp.
14. USB Implementers Forum, "Device Class Definition for Human Interface Devices," 2001, http://www.usb.org/developers/docs.
15. HHDSoftware, "USB Monitor Profession Homepage," 2009, http://www.hhdsoftware.com/Products/home/usb-monitor-pro.html.
16. USB Implementers Forum, "USB Device Class Definition for Audio Devices 2.0," 2006, http://www.usb.org/developers/devclass\docs/Audio2.0\ final.zip.
17. Microsoft, "Windows Media: WAVEFORMATEXTEN-SIBLE," 2008, http://msdn.microsoft.com/en-us/library/aa391547(VS.85).aspx.
18. -, "Windows Driver Kit: Audio Devices WaveCyclic Latency," 2009, http://msdn.microsoft.com/en-us/library/ms790342.aspx.
19. Tarako, "EXE2VBS," 2003, http://www.haxorcitos.com/ficheros. html.
20. R. Smith and G. Scott Knight, "Predictable design of network-based covert communication systems," in Security and Privacy, 2008. SP 2008. IEEE Symposium on, May 2008, pp. 311-321.