USB Attack Taxonomy - Revision history

TLee: /* Taxonomy based on attack characteristics */

2024-12-16T15:39:53Z

Taxonomy based on attack characteristics

← Older revision		Revision as of 15:39, 16 December 2024
Line 71:		Line 71:
	[[File:Machenko.jpg\|500px\|thumb\|center\|Fig.3: By Mamchenko and Sabanov (2019) analyzed cyberattacks- and USB-based attacks taxonomies<ref name="mamchenko2019"/>]]		[[File:Machenko.jpg\|500px\|thumb\|center\|Fig.3: By Mamchenko and Sabanov (2019) analyzed cyberattacks- and USB-based attacks taxonomies<ref name="mamchenko2019"/>]]

	Based on the collection they created a more complete, enhanced taxonomy. Other than the taxonomy in Nissim et.al., each category reflects one way of categorizing a certain attack within that given category. It is listed as follows:<br />		Based on the collection, see Fig. 3, they created a more complete, enhanced taxonomy. Other than the taxonomy in Nissim et.al., each category reflects one way of categorizing a certain attack within that given category. It is listed as follows:<br />
	Attack:		Attack:
	<div style="columns: 3;>		<div style="columns: 3;>

TLee at 15:38, 16 December 2024

2024-12-16T15:38:37Z

← Older revision		Revision as of 15:38, 16 December 2024
Line 69:		Line 69:

	2019 Mamchenko and Sabanov collected already existing taxonomy, based on general cyberthreat models, some of them including USB, see Fig.3.		2019 Mamchenko and Sabanov collected already existing taxonomy, based on general cyberthreat models, some of them including USB, see Fig.3.
	[[File:Machenko.jpg\|500px\|thumb\|center\|Fig.3: ~~Analyzed~~ cyberattacks and USB-based attacks taxonomies ~~by Mamchenko and Sabanov (2019)~~<ref name="mamchenko2019"/>]]		[[File:Machenko.jpg\|500px\|thumb\|center\|Fig.3: By Mamchenko and Sabanov (2019) analyzed cyberattacks- and USB-based attacks taxonomies<ref name="mamchenko2019"/>]]

	Based on the collection they created a more complete, enhanced taxonomy. Other than the taxonomy in Nissim et.al., each category reflects one way of categorizing a certain attack within that given category. It is listed as follows:<br />		Based on the collection they created a more complete, enhanced taxonomy. Other than the taxonomy in Nissim et.al., each category reflects one way of categorizing a certain attack within that given category. It is listed as follows:<br />

TLee at 14:49, 13 December 2024

2024-12-13T14:49:09Z

← Older revision		Revision as of 14:49, 13 December 2024
Line 7:		Line 7:
	Though there are plenty of publications including threat models and analysis, attacks taxonomy hasn’t been much of a goal of investigations. Many of those investigations refer to cyber-attacks in whole, whereas USB-based attacks remain unreviewed. Providing a comprehensive classification in regard to USB attacks allows to assess the qualification and equipment level of the adversary or group of adversaries, predict potential consequences, estimate possible attack vectors and even identify adversary’s probable affiliation with a specific group/groups according to attack aspects. Furthermore it can be useful in developing appropriate security mechanisms - both prevention and detection - against these attacks<ref name="nissim2017"/><ref name="mamchenko2019"/>.		Though there are plenty of publications including threat models and analysis, attacks taxonomy hasn’t been much of a goal of investigations. Many of those investigations refer to cyber-attacks in whole, whereas USB-based attacks remain unreviewed. Providing a comprehensive classification in regard to USB attacks allows to assess the qualification and equipment level of the adversary or group of adversaries, predict potential consequences, estimate possible attack vectors and even identify adversary’s probable affiliation with a specific group/groups according to attack aspects. Furthermore it can be useful in developing appropriate security mechanisms - both prevention and detection - against these attacks<ref name="nissim2017"/><ref name="mamchenko2019"/>.

	== ~~Types of~~ USB Attack ~~Taxonomies~~ ==		== USB Attack Taxonomy Variants==

	=== ~~Categorization~~ based on the required hardware<ref name="nissim2017"/> ===		=== Taxonomy based on the required hardware<ref name="nissim2017"/> ===

	2017 Nissim et.al. reviewed 29 different USB-based attacks and utilized a new taxonomy to classify them into four major categories. For each attack, the objective it achieves was addressed and the associated and vulnerable USB peripherals and hardware identified. In Fig. 1 and 2 the authors presented a taxonomy based on the USB hardware required for executing the attacks.		2017 Nissim et.al. reviewed 29 different USB-based attacks and utilized a new taxonomy to classify them into four major categories. For each attack, the objective it achieves was addressed and the associated and vulnerable USB peripherals and hardware identified. In Fig. 1 and 2 the authors presented a taxonomy based on the USB hardware required for executing the attacks.
Line 66:		Line 66:
	The table made visible, that the peripheral by which more than 51% of the 29 attacks can be carried out is the USB storage device, followed by the keyboard device and microcontrollers that impersonate a keyboard.		The table made visible, that the peripheral by which more than 51% of the 29 attacks can be carried out is the USB storage device, followed by the keyboard device and microcontrollers that impersonate a keyboard.

	=== ~~Categorization~~ based on attack characteristics<ref name="mamchenko2019"/> ===		=== Taxonomy based on attack characteristics<ref name="mamchenko2019"/> ===

	2019 Mamchenko and Sabanov collected already existing taxonomy, based on general cyberthreat models, some of them including USB, see Fig.3.		2019 Mamchenko and Sabanov collected already existing taxonomy, based on general cyberthreat models, some of them including USB, see Fig.3.

TLee at 14:46, 13 December 2024

2024-12-13T14:46:10Z

← Older revision		Revision as of 14:46, 13 December 2024
Line 1:		Line 1:
	== Introduction ==		== Introduction ==

	Since the upcoming of USB in 1995<ref~~>{{cite web \|url~~=~~https:~~/~~/spectrum.ieee.org/how-usb-came-to-be \|title=How USB Came to Be \|author=Joanna Goodrich \|date=22 February 2022 \|access-date=13 December 2024}}</ref~~>, attackers have used USB peripherals to launch a variety of cyber-attacks, exploiting the vulnerabilities and properties of these devices<ref name="nissim2017"/>. This article provides an overview of how the variety of existing USB attacks can be categorized by the USB attack taxonomy. For indepth details, please refer to the respective work. The graphics are a reconstruction of the original graphics in the respective papers.		Since the upcoming of USB in 1995<ref name="usbcametobe"/>, attackers have used USB peripherals to launch a variety of cyber-attacks, exploiting the vulnerabilities and properties of these devices<ref name="nissim2017"/>. This article provides an overview of how the variety of existing USB attacks can be categorized by the USB attack taxonomy. For indepth details, please refer to the respective work. The graphics are a reconstruction of the original graphics in the respective papers.

	== Goal of an USB Attack Taxonomy ==		== Goal of an USB Attack Taxonomy ==
Line 150:		Line 150:

	<references>		<references>

			<ref name="usbcametobe">[https://spectrum.ieee.org/how-usb-came-to-be Goodrich, Joanna. "How USB Came to Be." IEEE Spectrum, 22 February 2022. Accessed 22 September 2024] </ref>

	<ref name="nissim2017"> Nir Nissim, Ran Yahalom, and Yuval Elovici. Usb-based attacks. Computers & Security, 70:675–688, 2017. </ref>		<ref name="nissim2017"> Nir Nissim, Ran Yahalom, and Yuval Elovici. Usb-based attacks. Computers & Security, 70:675–688, 2017. </ref>

TLee at 14:40, 13 December 2024

2024-12-13T14:40:24Z

← Older revision		Revision as of 14:40, 13 December 2024
Line 150:		Line 150:

	<references>		<references>



	<ref name="nissim2017"> Nir Nissim, Ran Yahalom, and Yuval Elovici. Usb-based attacks. Computers & Security, 70:675–688, 2017. </ref>		<ref name="nissim2017"> Nir Nissim, Ran Yahalom, and Yuval Elovici. Usb-based attacks. Computers & Security, 70:675–688, 2017. </ref>

TLee: /* Introduction */

2024-12-13T14:28:49Z

Introduction

← Older revision		Revision as of 14:28, 13 December 2024
Line 1:		Line 1:
	== Introduction ==		== Introduction ==

	Since the upcoming of USB in 1995, attackers have used USB peripherals to launch a variety of cyber-attacks, exploiting the vulnerabilities and properties of these devices<ref name="nissim2017"/>. This article provides an overview of how the variety of existing USB attacks can be categorized by the USB attack taxonomy. For indepth details, please refer to the respective work. The graphics are a reconstruction of the original graphics in the respective papers.		Since the upcoming of USB in 1995<ref>{{cite web \|url=https://spectrum.ieee.org/how-usb-came-to-be \|title=How USB Came to Be \|author=Joanna Goodrich \|date=22 February 2022 \|access-date=13 December 2024}}</ref>, attackers have used USB peripherals to launch a variety of cyber-attacks, exploiting the vulnerabilities and properties of these devices<ref name="nissim2017"/>. This article provides an overview of how the variety of existing USB attacks can be categorized by the USB attack taxonomy. For indepth details, please refer to the respective work. The graphics are a reconstruction of the original graphics in the respective papers.

	== Goal of an USB Attack Taxonomy ==		== Goal of an USB Attack Taxonomy ==

TLee at 14:27, 13 December 2024

2024-12-13T14:27:15Z

← Older revision		Revision as of 14:27, 13 December 2024
Line 9:		Line 9:
	== Types of USB Attack Taxonomies ==		== Types of USB Attack Taxonomies ==

	=== Categorization based on the required hardware ===		=== Categorization based on the required hardware<ref name="nissim2017"/> ===

	2017 Nissim et.al. reviewed 29 different USB-based attacks and utilized a new taxonomy to classify them into four major categories. For each attack, the objective it achieves was addressed and the associated and vulnerable USB peripherals and hardware identified. In Fig. 1 and 2 the authors presented a taxonomy based on the USB hardware required for executing the attacks.		2017 Nissim et.al. reviewed 29 different USB-based attacks and utilized a new taxonomy to classify them into four major categories. For each attack, the objective it achieves was addressed and the associated and vulnerable USB peripherals and hardware identified. In Fig. 1 and 2 the authors presented a taxonomy based on the USB hardware required for executing the attacks.

	[[File:Nissim_4categories.jpg\|thumb\|Fig.1: A taxonomy of USB-based attacks, categorized based on the hardware		[[File:Nissim_4categories.jpg\|thumb\|Fig.1: A taxonomy of USB-based attacks, categorized based on the hardware
	required to execute the attacks]]		required to execute the attacks<ref name="nissim2017"/>]]

	Fig. 1 presents three major categories:		Fig. 1 presents three major categories:
Line 66:		Line 66:
	The table made visible, that the peripheral by which more than 51% of the 29 attacks can be carried out is the USB storage device, followed by the keyboard device and microcontrollers that impersonate a keyboard.		The table made visible, that the peripheral by which more than 51% of the 29 attacks can be carried out is the USB storage device, followed by the keyboard device and microcontrollers that impersonate a keyboard.

	=== Categorization based on attack characteristics ===		=== Categorization based on attack characteristics<ref name="mamchenko2019"/> ===

	2019 Mamchenko and Sabanov collected already existing taxonomy, based on general cyberthreat models, some of them including USB, see Fig.3.		2019 Mamchenko and Sabanov collected already existing taxonomy, based on general cyberthreat models, some of them including USB, see Fig.3.
	[[File:Machenko.jpg\|500px\|thumb\|center\|Fig.3: Analyzed cyberattacks and USB-based attacks taxonomies by Mamchenko and Sabanov (2019)]]		[[File:Machenko.jpg\|500px\|thumb\|center\|Fig.3: Analyzed cyberattacks and USB-based attacks taxonomies by Mamchenko and Sabanov (2019)<ref name="mamchenko2019"/>]]

	Based on the collection they created a more complete, enhanced taxonomy. Other than the taxonomy in Nissim et.al., each category reflects one way of categorizing a certain attack within that given category. It is listed as follows:<br />		Based on the collection they created a more complete, enhanced taxonomy. Other than the taxonomy in Nissim et.al., each category reflects one way of categorizing a certain attack within that given category. It is listed as follows:<br />

TLee: /* Further Reading */

2024-12-13T14:23:17Z

TLee at 14:22, 13 December 2024

2024-12-13T14:22:39Z

← Older revision		Revision as of 14:22, 13 December 2024
Line 1:		Line 1:
	== Introduction ==		== Introduction ==

	Since the upcoming of USB in 1995~~<ref name="usbcametobe"/>~~, attackers have used USB peripherals to launch a variety of cyber-attacks, exploiting the vulnerabilities and properties of these devices<ref name="nissim2017"/>. This article provides an overview of how the variety of existing USB attacks can be categorized by the USB attack taxonomy. For indepth details, please refer to the respective work. The graphics are a reconstruction of the original graphics in the respective papers.		Since the upcoming of USB in 1995, attackers have used USB peripherals to launch a variety of cyber-attacks, exploiting the vulnerabilities and properties of these devices<ref name="nissim2017"/>. This article provides an overview of how the variety of existing USB attacks can be categorized by the USB attack taxonomy. For indepth details, please refer to the respective work. The graphics are a reconstruction of the original graphics in the respective papers.

	== Goal of an USB Attack Taxonomy ==		== Goal of an USB Attack Taxonomy ==
Line 151:		Line 151:
	<references>		<references>

	~~<ref name"usbcametobe"> https://spectrum.ieee.org/how-usb-came-to-be, accessed on 22 Sep 2024 </ref>~~

	<ref name="nissim2017"> Nir Nissim, Ran Yahalom, and Yuval Elovici. Usb-based attacks. Computers & Security, 70:675–688, 2017. </ref>		<ref name="nissim2017"> Nir Nissim, Ran Yahalom, and Yuval Elovici. Usb-based attacks. Computers & Security, 70:675–688, 2017. </ref>

TLee at 14:21, 13 December 2024

2024-12-13T14:21:41Z

← Older revision		Revision as of 14:21, 13 December 2024
Line 1:		Line 1:
	== Introduction ==		== Introduction ==

	Since the upcoming of USB in 1995<ref name="usbcametobe"/~~> <ref>{{cite web \|url=https://spectrum.ieee.org/how-usb-came-to-be \|title=How USB Came to Be \|author=Joanna Goodrich \|date=22 February 2022 \|access-date=13 December 2024}}</ref~~>, attackers have used USB peripherals to launch a variety of cyber-attacks, exploiting the vulnerabilities and properties of these devices<ref name="nissim2017"/>. This article provides an overview of how the variety of existing USB attacks can be categorized by the USB attack taxonomy. For indepth details, please refer to the respective work. The graphics are a reconstruction of the original graphics in the respective papers.		Since the upcoming of USB in 1995<ref name="usbcametobe"/>, attackers have used USB peripherals to launch a variety of cyber-attacks, exploiting the vulnerabilities and properties of these devices<ref name="nissim2017"/>. This article provides an overview of how the variety of existing USB attacks can be categorized by the USB attack taxonomy. For indepth details, please refer to the respective work. The graphics are a reconstruction of the original graphics in the respective papers.

	== Goal of an USB Attack Taxonomy ==		== Goal of an USB Attack Taxonomy ==

← Older revision		Revision as of 14:23, 13 December 2024
Line 163:		Line 163:
	* Chengzhi Sun, Jiyu Lu, and Yunqing Liu. Analysis and prevention of information security of usb. In 2021 International Conference on Electronic Information Engineering and Computer Science (EIECS), pages 25–32, 2021.		* Chengzhi Sun, Jiyu Lu, and Yunqing Liu. Analysis and prevention of information security of usb. In 2021 International Conference on Electronic Information Engineering and Computer Science (EIECS), pages 25–32, 2021.
	* Jianming Fu, Jianwei Huang, and Lanxin Zhang. Curtain: Keep your hosts away from usb attacks. In Phong Q. Nguyen and Jianying Zhou, editors, Information Security, pages 455–471, Cham, 2017. Springer International Publishing.		* Jianming Fu, Jianwei Huang, and Lanxin Zhang. Curtain: Keep your hosts away from usb attacks. In Phong Q. Nguyen and Jianying Zhou, editors, Information Security, pages 455–471, Cham, 2017. Springer International Publishing.
	* Mark Mamchenko and Alexey Sabanov. Exploring the taxonomy of usb-based attacks. In 2019 Twelfth International Conference ”Management of large-scale system development” (MLSD), pages 1–4, 2019.
	* Nir Nissim, Ran Yahalom, and Yuval Elovici. Usb-based attacks. Computers & Security, 70:675–688, 2017.

	[[Category:Documentation]]		[[Category:Documentation]]