Citation Context

...ency, asking to send a file he has on a dongle through the laptop of the employee. If the employee plugs the dongle on the laptop, the dongle will install the rootkit without the employee’s knowledge =-=[12]-=-. The road apple attack, as many other social engineering attacks [1] relies on activities occurring in the digital, physical and social world. Thus, we need a model able of presenting movement and ro...

Citation Context

...y device As can be seen from Figure 1, a U3 flash device looks like a standard thumb drive 2 . U3 flash devices are widely used and some interesting applications of the technology have been achieved (=-=Al-Zarouni 2006-=-). A U3 flash drive was included in the research because: • • it provides a more sophisticated USB flash drive given the wide scale adoption of U3 devices it was considered important to determine how ...

Citation Context

... unintended USB channels, but the following bear some relevance on our research. Because the USB protocol relies on devices to properly identify themselves during enumeration, a USB MetaDevice could be programmed to identify itself as any USB device [9]. In this way, the USB Meta-Device could be configured to represent itself as a device associated with a vulnerable driver loaded on the network endpoint. Our approach differs from the USB Meta-Device in that it does not require the presence of a vulnerable driver on the network endpoint. There are risks associated with the consented use of USB [10] where legitimate users allow a foreign USB device to connect to the network endpoint, either voluntarily or because they have been duped [2]. In fact, Endpoint Security Solutions have been developed to mitigate this risk. Our approach differs in that it can still be used in the presence of Endpoint Security Solutions, as those generally do not regulate Human Interface Devices. The idea of a Keyboard Jitterbug was introduced in 2006 [11]. Such a device can be inserted between a keyboard and a network endpoint and act as a keylogger. This work is interesting in that it demonstrates that a devic...

Citation Context

...n the network endpoint. The approach used in this paper differs from the USB Meta-Device in that it does not require the presence of a vulnerable driver on the network endpoint. In 2006, M. Al-Zarouni=-=[10]-=- proved that USB Auto Run and Auto Play features can be used to steal data and automatically execute harmful code on a network endpoint without user‟s knowledge. Endpoint security solutions are availa...

Citation Context

...cy, asking to send 3a file he has on a dongle through the laptop of the employee. If the employee plugs the dongle on the laptop, the dongle will install the rootkit without the employee’s knowledge =-=[8]-=-.In the rest of the paper we call this case road apple 2. 3 Integrated security model of the world When an adversary tries to compromise a system, the adversary uses all available resources, which bes...

Citation Context

...ware (P4) reaches the server, it sends all the data to the remote server. The above actions closely resemble the road apple attack [14] with a dongle automatically running when attached to a computer =-=[15]-=-. The resulting scenario is still not complete. When the dongle reaches the employee, the dongle tries to move to the secureRoom, although the employee is located in the hall at that moment. Thus, the...