| The Universal Serial Bus(USB)has been widely used as an external bus standard for various types of terminal devices.However,USB also faces some security risks while providing convenient connections for various terminal devices.For example,attackers can exploit vulnerabilities in USB to inject malicious code and leak privacy data from target terminal devices.To prevent such attacks from causing security and privacy issues on terminal devices,researchers have proposed using side-channel information(such as timestamps,electromagnetic radiation,etc.)to verify the identity of USB peripheral devices.However,these approaches make strict assumptions about the collection of side-channel signals and are limited to identifying specific types of USB peripheral devices,making it difficult to apply them in practical scenarios.To address these security concerns,this study proposes a hardware fingerprint generation method for USB peripheral devices based on power consumption measurement:PowerID.By analyzing and modeling the power consumption information of USB peripheral devices.device fingerprints are generated to identify and verify device identities and attributes.To validate the effectiveness of the method,this paper evaluates PowerID on a wide range of power consumption traces dataset collected from 82 USB peripheral devices(including 35 models and 8 types)in the real world.Experimental results show that PowerID can accurately identify the type,model,action,and identity of external devices in the real world,protecting the host from unexpected USB peripheral device interference and filling a gap in this security field. |
