Print Email Facebook Twitter Plug and Power Title Plug and Power: Fingerprinting USB Powered Peripherals via Power Side-channel Author Spolaor, Riccardo (Shandong University) Liu, Hao (Shandong University) Turrin, Federico (University of Padua) Conti, M. (TU Delft Cyber Security; University of Padua) Cheng, Xiuzhen (Shandong University) Date 2023 Abstract The literature and the news regularly report cases of exploiting Universal Serial Bus (USB) devices as attack tools for malware injections and private data exfiltration. To protect against such attacks, security researchers proposed different solutions to verify the identity of a USB device via side-channel information (e.g., timing or electromagnetic emission). However, such solutions often make strong assumptions on the measurement (e.g., electromagnetic interference-free area around the device), on a device’s state (e.g., only at the boot or during specific actions), or are limited to one particular type of USB device (e.g., flash drive or input devices).In this paper, we present PowerID, a novel method to fingerprint USB peripherals based on their power consumption. PowerID analyzes the power traces from a peripheral to infer its identity and properties. We evaluate the effectiveness of our method on an extensive power trace dataset collected from 82 USB peripherals, including 35 models and 8 types. Our experimental results show that PowerID accurately recognizes a peripheral type, model, activity, and identity. Subject USB SecurityPower Side-ChannelUSB peripheralsHardware fingerprinting To reference this document use: http://resolver.tudelft.nl/uuid:422b1ea4-f64e-421b-aacb-e85c819b2061 DOI https://doi.org/10.1109/INFOCOM53939.2023.10229048 Publisher IEEE, Danvers Embargo date 2024-02-29 ISBN 979-8-3503-3415-9 Source Proceedings of the INFOCOM 2023 - IEEE International Conference on Computer Communications Event IEEE INFOCOM 2023 - IEEE Conference on Computer Communications, 2023-05-17 → 2023-05-20, New York City, United States Bibliographical note Green Open Access added to TU Delft Institutional Repository 'You share, we take care!' - Taverne project https://www.openaccess.nl/en/you-share-we-take-care Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public. Part of collection Institutional Repository Document type conference paper Rights © 2023 Riccardo Spolaor, Hao Liu, Federico Turrin, M. Conti, Xiuzhen Cheng Files PDF Plug_and_Power_Fingerprin ... hannel.pdf 1.82 MB Close viewer /islandora/object/uuid:422b1ea4-f64e-421b-aacb-e85c819b2061/datastream/OBJ/view