Vulnerability Analysis on a Secure USB: Based on a Commercial Product A

A secure USB memory appears to store data safely, protect the data stored inside by the security features such as user authentication, data protection, and access control. However, there is a problem that the security of the data stored inside of a USB device can not actually be preserved on all levels due to several discovered vulnerabilities such as bypassing user authentication and exposing decryption keys. In this paper, we analyze categorized potential vulnerabilities that are possible to be connected to real attacks, based on a commercial product A. With the analysis result, we expect that the security mechanism to counteract the proven vulnerabilities can be developed and applied more safely to the commercial devices to protect the sensitive data stored on a secure USB device, a USB disk, or a hard disk.