Solved

AV Detect BadUSB?

Posted on 2014-10-03
1
473 Views
Last Modified: 2014-10-08
So I reading various tech articles about the USB flaw known as BadUSB (malware embedded in firmware) and that the code was recently posted on GitHub.  As a result, there's hysteria and suggestions not to use USB connected devices.  That's not very practical and I wanted to know if AV apps would detect such malware?
0
Comment
Question by:markbyrn
1 Comment
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
Comment Utility
If a device tells windows "I am a keyboard", then windows installs it and that device is ready for action. So if that fake keyboard starts typing in a command shell, windows cannot distinguish if this is the user or not, nor can the AV software. So the code typed there will be executed.

There are 2 measures to be taken:
-lock your screen when absent
-use software that only lets whitelisted USB devices work on your machine.

The latter can be done by GPOs. It can also be done with external softwares, amongst them AV software.
But it will be a real pain to administer, so the best solution stays "lock your screen!".
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
Never store passwords in plain text or just their hash: it seems a no-brainier, but there are still plenty of people doing that. I present the why and how on this subject, offering my own real life solution that you can implement right away, bringin…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now