{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,21]],"date-time":"2026-04-21T15:14:45Z","timestamp":1776784485799,"version":"3.51.2"},"reference-count":40,"publisher":"MDPI AG","issue":"1","license":[{"start":{"date-parts":[[2021,3,2]],"date-time":"2021-03-02T00:00:00Z","timestamp":1614643200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["JSAN"],"abstract":"<jats:p>Cyberattacks exploiting Universal Serial Bus (USB) interfaces may have a high impact on individual and corporate systems. The BadUSB is an attack where a USB device\u2019s firmware is spoofed and, once mounted, allows attackers to execute a set of malicious actions in a target system. The countermeasures against this type of attack can be grouped into two strategies: phyiscal blocking of USB ports and software blocking. This paper proposes a distributed architecture that uses software blocking to enhance system protection against BadUSB attacks. This architecture is composed of multiple agents and external databases, and it is designed for personal or corporate computers using Microsoft Windows Operating System. When a USB device is connected, the agent inspects the device, provides filtered information about its functionality and presents a threat assessment to the user, based on all previous user choices stored in external databases. By providing valuable information to the user, and also threat assessments from multiple users, the proposed distributed architecture improves system protection.<\/jats:p>","DOI":"10.3390\/jsan10010019","type":"journal-article","created":{"date-parts":[[2021,3,2]],"date-time":"2021-03-02T10:36:37Z","timestamp":1614681397000},"page":"19","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["Distributed Architecture to Enhance Systems Protection against Unauthorized Activity via USB Devices"],"prefix":"10.3390","volume":"10","author":[{"given":"Jos\u00e9","family":"Oliveira","sequence":"first","affiliation":[{"name":"Instituto Polit\u00e9cnico de Viana do Castelo, 4900-347 Viana do Castelo, Portugal"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1856-6101","authenticated-orcid":false,"given":"Pedro","family":"Pinto","sequence":"additional","affiliation":[{"name":"Instituto Polit\u00e9cnico de Viana do Castelo, 4900-347 Viana do Castelo, Portugal"},{"name":"Instituto Universit\u00e1rio da Maia, 4475-690 Maia, and INESC TEC, 4200-465 Porto, Portugal"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5389-3285","authenticated-orcid":false,"given":"Henrique","family":"Santos","sequence":"additional","affiliation":[{"name":"Department of Information Systems, Universidade do Minho, 4800-058 Guimar\u00e3es, Portugal"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2021,3,2]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Sabillon, R., Serra-Ruiz, J., Cavaller, V., and Cano, J. (2018, January 23\u201325). A comprehensive cybersecurity audit model to improve cybersecurity assurance: The cybersecurity audit model (CSAM). Proceedings of the 2017 International Conference on Information Systems and Computer Science, INCISCOS 2017, Quito, Ecuador.","DOI":"10.1109\/INCISCOS.2017.20"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"68","DOI":"10.1109\/MIC.2017.23","article-title":"Cyberwarfare and digital governance","volume":"21","author":"Almeida","year":"2017","journal-title":"IEEE Internet Comput."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"608","DOI":"10.1109\/TII.2017.2740571","article-title":"Asset-Based Dynamic Impact Assessment of Cyberattacks for Risk Analysis in Industrial Control Systems","volume":"14","author":"Li","year":"2018","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Floyd, T., Grieco, M., and Reid, E.F. (2016, January 9\u201310). Mining hospital data breach records: Cyber threats to U.S. hospitals. Proceedings of the IEEE International Conference on Intelligence and Security Informatics: Cybersecurity and Big Data, ISI 2016, Tucson, AZ, USA.","DOI":"10.1109\/ISI.2016.7745441"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Reddy, S.T., Lakshmi, D.L., Deepthi, C., and Sikha, O.K. (2016, January 7\u20138). USB-SEC: A secure application to manage removable media. Proceedings of the 10th International Conference on Intelligent Systems and Control, ISCO 2016, Coimbatore, India.","DOI":"10.1109\/ISCO.2016.7727131"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Jodeit, M., and Johns, M. (2010, January 28\u201329). USB Device Drivers: A Stepping Stone into Your Kernel. Proceedings of the 2010 European Conference on Computer Network Defense, Berlin, Germany.","DOI":"10.1109\/EC2ND.2010.16"},{"key":"ref_7","unstructured":"(2021, January 20). Human Interface Device (HID). Available online: https:\/\/www.techopedia.com\/definition\/19781\/human-interface-device-hid."},{"key":"ref_8","unstructured":"Nohl, K., Kri\u00dfler, S., and Lell, J. (2020, December 20). BadUSB\u2014On Accessories That Turn Evil. Available online: https:\/\/srlabs.de\/wp-content\/uploads\/2014\/07\/SRLabs-BadUSB-BlackHat-v1.pdf."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Shafique, U., and Zahur, S.B. (2020). Towards Protection Against a USB Device Whose Firmware Has Been Compromised or Turned as \u2018BadUSB\u2019, Springer.","DOI":"10.1007\/978-3-030-12385-7_66"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Oliveira, J., Frade, M., and Pinto, P. (2018, January 19\u201321). System protection agent against unauthorized activities via USB devices. Proceedings of the IoTBDS 2018\u2014Proceedings of the 3rd International Conference on Internet of Things, Big Data and Security, Funchal, Portugal.","DOI":"10.5220\/0006708502370243"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Pham, D.V., Syed, A., and Halgamuge, M.N. (2011). Universal Serial Bus Based Software Attacks and Protection Solutions. Digit. Investig.","DOI":"10.1016\/j.diin.2011.02.001"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Tian, J., Scaife, N., Kumar, D., Bailey, M., Bates, A., and Butler, K. (2018, January 20\u201324). SoK: \u201cPlug & Pray\u201d Today\u2014Understanding USB Insecurity in Versions 1 Through C. Proceedings of the 2018 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA.","DOI":"10.1109\/SP.2018.00037"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Benadjila, R., Renard, M., Trebuchet, P., Thierry, P., Michelizza, A., and Lefaure, J. (2018, January 13\u201315). WooKey: USB Devices Strike Back. Proceedings of the SSTIC 2018, Rennes, France.","DOI":"10.1145\/3359789.3359802"},{"key":"ref_14","first-page":"25","article-title":"Cyberattacks on Devices Threaten Data and Patients: Cybersecurity Risks Come with the Territory. Three Experts Explain What You Need to Know","volume":"9","author":"Mertz","year":"2018","journal-title":"IEEE Pulse"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Poeplau, S., Gassen, J., and Gerhards-Padilla, E. (2012, January 10\u201312). A honeypot for arbitrary malware on USB storage devices. Proceedings of the 7th International Conference on Risks and Security of Internet and Systems, CRiSIS 2012, Cork, Ireland.","DOI":"10.1109\/CRISIS.2012.6378948"},{"key":"ref_16","unstructured":"Tischer, M., Durumeric, Z., Bursztein, E., and Bailey, M. (2018, December 21). The Danger of USB Drives. Available online: https:\/\/ieeexplore.ieee.org\/stamp\/stamp.jsp?tp=&arnumber=7891503."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Tischer, M., Durumeric, Z., Foster, S., Duan, S., Mori, A., Bursztein, E., and Bailey, M. (2016, January 22\u201326). Users Really Do Plug in USB Drives They Find. Proceedings of the 2016 IEEE Symposium on Security and Privacy, SP 2016, San Jose, CA, USA.","DOI":"10.1109\/SP.2016.26"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Andreasson, K.J. (2012). Cybersecurity: Public Sector Threats and Responses, CRC Press.","DOI":"10.1201\/b11363"},{"key":"ref_19","unstructured":"Greene, T. (2018, December 27). Conficker Worm Takes Manchester Police Offline for Three Days|Security|Computerworld UK. Available online: https:\/\/www.computerworlduk.com\/security\/conficker-worm-takes-manchester-police-offline-for-three-days-18640\/."},{"key":"ref_20","unstructured":"Terdiman, D. (2020, December 30). Stuxnet Delivered to Iranian Nuclear Plant on Thumb Drive. Available online: https:\/\/www.cnet.com\/news\/stuxnet-delivered-to-iranian-nuclear-plant-on-thumb-drive\/."},{"key":"ref_21","unstructured":"Complex, I. (2020, December 30). Stuxnet could Hijack Power Plants, Refineries. Available online: https:\/\/www.cnet.com\/news\/stuxnet-could-hijack-power-plants-refineries\/."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"675","DOI":"10.1016\/j.cose.2017.08.002","article-title":"USB-based attacks","volume":"70","author":"Nissim","year":"2017","journal-title":"Comput. Secur."},{"key":"ref_23","unstructured":"Cimpanu, C. (2020, December 30). Here\u2019s a List of 29 Different Types of USB Attacks. Available online: https:\/\/www.bleepingcomputer.com\/news\/security\/heres-a-list-of-29-different-types-of-usb-attacks\/."},{"key":"ref_24","unstructured":"Crenshaw, A. (2011, January 28\u201330). Plug and Prey: Malicious USB Devices. Proceedings of the Shmoocon, Washington, DC, USA."},{"key":"ref_25","unstructured":"Walters, P. (2012). The Risks of Using Portable Devices What Are the Risks?, Carnegie Mellon University."},{"key":"ref_26","unstructured":"(2020, December 30). Microsoft Releases Security Update for Autorun Vulnerability\u2014Redmondmag.com. Available online: https:\/\/redmondmag.com\/articles\/2011\/02\/10\/update-for-autorun-vulnerability.aspx."},{"key":"ref_27","unstructured":"(2018, December 21). Reviews of the Best USB Keyloggers for 2018\u20132019\u2014Nerd Techy. Available online: https:\/\/nerdtechy.com\/reviews-best-usb-keyloggersl."},{"key":"ref_28","unstructured":"(2020, December 30). Say hello to BadUSB 2.0: A USB Man-In-The-Middle Attack Proof of Concept|CSO Online. Available online: https:\/\/www.csoonline.com\/article\/3087484\/say-hello-to-badusb-20-usb-man-in-the-middle-attack-proof-of-concept.html."},{"key":"ref_29","unstructured":"(2020, December 30). USB Killer v3\u2014USBKill. Available online: https:\/\/usbkill.com\/products\/usb-killer-v3."},{"key":"ref_30","unstructured":"(2020, December 30). Thousands of Hacked CCTV Devices Used in DDoS Attacks | PCWorld. Available online: https:\/\/www.pcworld.com\/article\/3089346\/thousands-of-hacked-cctv-devices-used-in-ddos-attacks.html."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Tian, D., Bates, A., and Butler, K. (2015, January 7\u201311). Defending Against Malicious USB Firmware with GoodUSB. Proceedings of the 31st Annual Computer Security Applications Conference on\u2014ACSAC 2015, Los Angeles, CA, USA.","DOI":"10.1145\/2818000.2818040"},{"key":"ref_32","unstructured":"(2020, December 30). USBKey. Available online: http:\/\/www.meet-electronics.com\/products\/usbkey."},{"key":"ref_33","unstructured":"Ulanoff Lance (2020, December 30). How You Can Avoid a BadUSB Attack. Available online: https:\/\/mashable.com\/2014\/10\/03\/how-can-you-avoid-badusb\/?europe=true#DhMbENGvxiqh."},{"key":"ref_34","unstructured":"Natalie, C. (2020, December 30). Protect Against BadUSB with Mobile Cloud Storage|ChaiOne. Available online: https:\/\/chaione.com\/blog\/protect-badusb-cloud-storage\/."},{"key":"ref_35","unstructured":"(2020, December 30). Port Blocking: Why Corporate Computers Need Disabled USB Ports\u2014The Network Hub. Available online: https:\/\/searchnetworking.techtarget.com\/blog\/The-Network-Hub\/Port-blocking-Why-corporate-computers-need-disabled-USB-ports."},{"key":"ref_36","unstructured":"Poppe, C.H. (2009). USB Port Locking and Blocking Device. (7,635,272), U.S. Patent."},{"key":"ref_37","unstructured":"(2020, December 30). Block Access to USB Ports\u2014SecuPlus Shop. Available online: https:\/\/www.secuplus-shop.nl\/en\/secumate-usb-port-locks.html."},{"key":"ref_38","unstructured":"Oliveira, J., Frade, M., and Pinto, P. (2020, December 30). JoseOliveira01\/usb-Whitelisting: USB-Whitelisting. Available online: https:\/\/zenodo.org\/record\/1009691#.XB0Ya8_7TKM."},{"key":"ref_39","unstructured":"(2020, December 30). Overview of INF Files\u2014Windows Drivers | Microsoft Docs. Available online: https:\/\/docs.microsoft.com\/en-us\/windows-hardware\/drivers\/install\/overview-of-inf-files."},{"key":"ref_40","unstructured":"Bourdon, R. (2021, February 21). WampServer, La Plate-Forme De D\u00e9veloppement Web Sous Windows\u2014Apache, MySQL, PHP. Available online: https:\/\/www.wampserver.com\/en\/."}],"container-title":["Journal of Sensor and Actuator Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2224-2708\/10\/1\/19\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T05:31:33Z","timestamp":1760160693000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2224-2708\/10\/1\/19"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,3,2]]},"references-count":40,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2021,3]]}},"alternative-id":["jsan10010019"],"URL":"https:\/\/doi.org\/10.3390\/jsan10010019","relation":{},"ISSN":["2224-2708"],"issn-type":[{"value":"2224-2708","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,3,2]]}}}