摘要 |
A system for thwarting malicious malware attacks on computing devices potentially introduced by flash drives and similar universal serial bus ("USB") devices. The system disclosed herein includes a USB shield that treats both a hosting computer and a newly inserted USB device with appropriate caution and monitors interactions between the host and the device based on its own logic. In some embodiments, the USB shield is configured independently of its intended host or intended target device. Once configured, the shield is typically plugged into a host computer, and then a desired USB device is plugged into the shield and then monitors and blocks all communications inconsistent with its configuration parameters. In some embodiments, the USB shield modifies certain communications (such as filenames) as a safety precaution if so configured to defeat auto-run logic even if configured on a host computer.
|