The Impostor Among US(B): Off-Path Injection Attacks on USB Communications. (arXiv:2211.01109v2 [cs.CR] UPDATED)

USB is the most prevalent peripheral interface in modern computer systems and
its inherent insecurities make it an appealing attack vector. A well-known
limitation of USB is that traffic is not encrypted. This allows on-path
adversaries to trivially perform man-in-the-middle attacks. Off-path attacks
that compromise the confidentiality of communications have also been shown to
be possible. However, so far no off-path attacks that breach USB communications
integrity have been demonstrated.

In this work we show that the integrity of USB …

attacks communications injection injection attacks path usb