Testing the malicious USB anecdote

social engineering;Universal Serial Bus (USB)

Tischer, Matthew A ; Bailey ; Michael

关键词: social engineering;    Universal Serial Bus (USB);   

Others  :  https://www.ideals.illinois.edu/bitstream/handle/2142/89034/TISCHER-THESIS-2015.pdf?sequence=1&isAllowed=y

美国|英语

来源: The Illinois Digital Environment for Access to Learning and Scholarship

【 摘 要 】

In today’s computer security climate, attacks against computers are becoming increasingly sophisticated and cheaper to execute. In this thesis, we present the results of a study conducted on the University of Illinois campus to determine the effectiveness of dropping 297 “infected” USB flash drives in a public place as an attack vector. A self-report survey given to 71 individuals highlights some of the psychological processes that motivate people to plug in the flash drives. We find that this type of attack is generally effective and relatively insensitive to its precise environmental configuration. Generally, participants expressed desire to return the flash drives to their owners, although our data shows that they also explored the contents of the flash drives on occasion.