Preventing Attacks on Critical Infrastructure through Hardware Protection Against Malicious USB Devices
While many of the S4 presentations look at offense, Pascal Sitbon of EDF gives a presentation on defense. Specifically protecting a system from a malicious USB device.
Pascal brought the prototype called SCOOP (Selective Control of Peripherals). It had two main use cases.
1. Human Interface Protection
2. Mass Data Storage Protection
Pascal and the team at EDF have presented at S4 a number of times, and in all cases they are trying to develop or trial new technologies that are needed by a large energy company. At the beginning of the presentation, Pascal rejects the notion that owner/operators do not care about security.