Distributed Architecture to Enhance Systems Protection against Unauthorized Activity via USB Devices

Cyberattacks exploiting Universal Serial Bus (USB) interfaces may have a high impact on individual and corporate systems. The BadUSB is an attack where USB device’s firmware spoofed and, once mounted, allows attackers to execute set of malicious actions in target system. countermeasures against this type can be grouped into two strategies: phyiscal blocking ports software blocking. This paper proposes distributed architecture that uses enhance system protection attacks. composed multiple agents external databases, it designed for personal or computers using Microsoft Windows Operating System. When device connected, the agent inspects device, provides filtered information about its functionality presents threat assessment user, based all previous user choices stored databases. By providing valuable also assessments from users, proposed improves protection.