Be the first to like this
USB is still a dangerous vector of attack. Attacks such as Stuxtnet make this evident. Sharing USB devices between machines that are physically or logically isolated can stablish connections between them, building what is called a Hidden Network. Being aware of such links is essential for guarantying the security of the network, machines connected and data within them. This paper presents a tool able to detect these links automatically, both remotely and locally. These links are explicitly plotted in graphs, making them visible and allowing taking security measures against threats. Furthermore, this tool can be used for forensic purposes, for example in cases of data exfiltration, since it can plot the trazability of a given USB device within a network, besides showing which USB devices were connected to a certain computer.