{"id":"https://openalex.org/W2896719299","doi":"https://doi.org/10.3233/jcs-191404","title":"USBCaptchaIn: Preventing (un)conventional attacks from promiscuously used USB devices in industrial control systems","display_name":"USBCaptchaIn: Preventing (un)conventional attacks from promiscuously used USB devices in industrial control systems","publication_year":2020,"publication_date":"2020-12-07","ids":{"openalex":"https://openalex.org/W2896719299","doi":"https://doi.org/10.3233/jcs-191404","mag":"2896719299"},"language":"en","primary_location":{"id":"doi:10.3233/jcs-191404","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-191404","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},"type":"preprint","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1810.05005","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065434128","display_name":"Federico Griscioli","orcid":null},"institutions":[{"id":"https://openalex.org/I119003972","display_name":"Roma Tre University","ror":"https://ror.org/05vf0dg29","country_code":"IT","type":"education","lineage":["https://openalex.org/I119003972"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Federico Griscioli","raw_affiliation_strings":["Sezione di Informatica e Automazione, Dipartimento di Ingegneria, Universit\u00e0 degli Studi Roma Tre, Via della Vasca Navale 79, 00146 Roma, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sezione di Informatica e Automazione, Dipartimento di Ingegneria, Universit\u00e0 degli Studi Roma Tre, Via della Vasca Navale 79, 00146 Roma, Italy","institution_ids":["https://openalex.org/I119003972"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078465566","display_name":"Maurizio Pizzonia","orcid":"https://orcid.org/0000-0001-8758-3437"},"institutions":[{"id":"https://openalex.org/I119003972","display_name":"Roma Tre University","ror":"https://ror.org/05vf0dg29","country_code":"IT","type":"education","lineage":["https://openalex.org/I119003972"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Maurizio Pizzonia","raw_affiliation_strings":["Sezione di Informatica e Automazione, Dipartimento di Ingegneria, Universit\u00e0 degli Studi Roma Tre, Via della Vasca Navale 79, 00146 Roma, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sezione di Informatica e Automazione, Dipartimento di Ingegneria, Universit\u00e0 degli Studi Roma Tre, Via della Vasca Navale 79, 00146 Roma, Italy","institution_ids":["https://openalex.org/I119003972"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5078465566"],"corresponding_institution_ids":["https://openalex.org/I119003972"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0039838,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"29","issue":"1","first_page":"51","last_page":"76"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.8910977840423584},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8406689167022705},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7621217966079712},{"id":"https://openalex.org/keywords/usb","display_name":"USB","score":0.7176017165184021},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5967351794242859},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.49070799350738525},{"id":"https://openalex.org/keywords/microcode","display_name":"Microcode","score":0.4809812307357788},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.45173344016075134},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.3206343352794647},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2857673466205597},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.14861297607421875}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.8910977840423584},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8406689167022705},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7621217966079712},{"id":"https://openalex.org/C507366226","wikidata":"https://www.wikidata.org/wiki/Q42378","display_name":"USB","level":3,"score":0.7176017165184021},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5967351794242859},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.49070799350738525},{"id":"https://openalex.org/C22174128","wikidata":"https://www.wikidata.org/wiki/Q175869","display_name":"Microcode","level":2,"score":0.4809812307357788},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45173344016075134},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.3206343352794647},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2857673466205597},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.14861297607421875}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.3233/jcs-191404","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-191404","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:1810.05005","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1810.05005","pdf_url":"https://arxiv.org/pdf/1810.05005","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:2896719299","is_oa":true,"landing_page_url":"http://export.arxiv.org/pdf/1810.05005","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.1810.05005","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.1810.05005","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1810.05005","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1810.05005","pdf_url":"https://arxiv.org/pdf/1810.05005","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2896719299.pdf","grobid_xml":"https://content.openalex.org/works/W2896719299.grobid-xml"},"referenced_works_count":31,"referenced_works":["https://openalex.org/W125969323","https://openalex.org/W192446467","https://openalex.org/W1486370790","https://openalex.org/W1503813395","https://openalex.org/W1555707950","https://openalex.org/W1600255172","https://openalex.org/W1937970120","https://openalex.org/W1960861358","https://openalex.org/W2026450784","https://openalex.org/W2060595276","https://openalex.org/W2114112653","https://openalex.org/W2114349788","https://openalex.org/W2134296086","https://openalex.org/W2155690458","https://openalex.org/W2203654293","https://openalex.org/W2266046455","https://openalex.org/W2266218113","https://openalex.org/W2534971336","https://openalex.org/W2587489636","https://openalex.org/W2608286837","https://openalex.org/W2609561753","https://openalex.org/W2619874920","https://openalex.org/W2770763359","https://openalex.org/W2816349614","https://openalex.org/W2902882777","https://openalex.org/W2945717849","https://openalex.org/W2982048959","https://openalex.org/W3083417773","https://openalex.org/W3083698751","https://openalex.org/W3094520537","https://openalex.org/W4210531213"],"related_works":["https://openalex.org/W3113023528","https://openalex.org/W2902882777","https://openalex.org/W2996181106","https://openalex.org/W2969067196","https://openalex.org/W2907880087","https://openalex.org/W2206271137","https://openalex.org/W2794757687","https://openalex.org/W2742682864","https://openalex.org/W2945703236","https://openalex.org/W3098640816","https://openalex.org/W2752864518","https://openalex.org/W2984900279","https://openalex.org/W2414452294","https://openalex.org/W2064856281","https://openalex.org/W2906412882","https://openalex.org/W2173506482","https://openalex.org/W3092619921","https://openalex.org/W2782981657","https://openalex.org/W2187401644","https://openalex.org/W1603727792"],"abstract_inverted_index":{"Industrial":[0],"Control":[1],"Systems":[2],"(ICS)":[3],"are":[4,16,32],"sensible":[5],"targets":[6],"for":[7],"high":[8],"profile":[9],"attackers":[10],"and":[11,41,56,73,95,153,196,223],"advanced":[12],"persistent":[13],"threats,":[14],"which":[15],"known":[17],"to":[18,35,88,99,145,162,178],"exploit":[19],"USB":[20,84,112,155],"thumb":[21,30,71,168],"drives":[22,31,72,114],"as":[23],"an":[24,140],"effective":[25],"spreading":[26],"vector.":[27],"In":[28],"ICSes,":[29],"widely":[33],"used":[34,52],"transfer":[36],"files":[37,67],"among":[38],"disconnected":[39],"systems":[40],"represent":[42],"a":[43,93,104,108,193,210],"serious":[44],"security":[45,215],"risks,":[46],"since,":[47],"they":[48,166,201],"may":[49],"be":[50,146],"promiscuously":[51],"in":[53,66,69,86,147,219],"both":[54,62],"critical":[55,117,151],"regular":[57,124],"systems.":[58],"The":[59,131,182],"threats":[60],"come":[61],"from":[63,74,119],"malware":[64,199],"hidden":[65],"stored":[68],"the":[70,79,90,100,135,148,164,214,220,225],"BadUSB":[75,77],"attacks.":[76],"leverages":[78],"modification":[80],"of":[81,83,92,111,134,192,213,216,228],"firmware":[82,129],"devices":[85],"order":[87],"mimic":[89],"behaviour":[91],"keyboard":[94],"send":[96],"malicious":[97],"commands":[98],"host.":[101],"We":[102,157,205],"present":[103],"solution":[105],"that":[106,121],"allows":[107],"promiscuous":[109],"use":[110,167],"thumbs":[113],"while":[115],"protecting":[116],"machines":[118,152],"malware,":[120],"spreads":[122],"by":[123,128],"file":[125],"infection":[126],"or":[127],"infection.":[130],"main":[132],"component":[133],"architecture":[136],"we":[137,173],"propose":[138],"is":[139,185],"hardware,":[141],"called":[142],"USBCaptchaIn,":[143],"intended":[144],"middle":[149],"between":[150],"connected":[154],"devices.":[156],"do":[158,174],"not":[159,175],"require":[160,176],"users":[161,177],"change":[163],"way":[165],"drives.":[169],"To":[170],"avoid":[171],"human-errors,":[172],"take":[179],"any":[180],"decision.":[181],"proposed":[183],"approach":[184,218],"highly":[186],"compatible":[187],"with":[188],"already":[189],"deployed":[190],"products":[191],"ICS":[194,221],"environment":[195],"proactively":[197],"blocks":[198],"before":[200],"reach":[202],"their":[203],"targets.":[204],"describe":[206],"our":[207,217,232],"solution,":[208],"provide":[209],"thorough":[211],"analysis":[212],"context,":[222],"report":[224],"informal":[226],"feedback":[227],"some":[229],"experts":[230],"regarding":[231],"first":[233],"prototypes.":[234]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}
