ProvUSB - Block-level Provenance-Based Data Protection for USB Storage Devices

Explore a conference talk from CCS 2016 that introduces ProvUSB, a block-level provenance-based data protection system for USB storage devices. Delve into the history of USB security and smart USB devices before examining the ProvUSB system designed for security-sensitive organizations. Learn about its security properties, remote TPM implementation, provenance graph, and integrity model. Discover the system's features, performance metrics, and runtime overhead through benchmark results and audit log size analysis. Gain insights into practical scenarios where ProvUSB can be applied and understand its potential impact on USB storage security.

Intro
History of USB Security
Smart USB Devices
Agenda
ProvUSB
Security Sensitive Organizations
Security Properties
Remote TPM
Provenance Graph
Integrity Model
Integrity Access Control
Security
Features
TPM Performance
Runtime Overhead
Benchmark Results
Audit Log Size
Scenarios
Conclusion
Questions