[Troubilshow]

You probably know those little HID keys that behave like keyboards and once inserted in a machine, allow you to perform actions at lightning speed, often without the knowledge of the person who inserted the key. This is what the Rubber Ducky USB key allows.

Well, to counter this attack, Google has developed a tool called ukip for "USB Keystroke Injection Protection" capable of measuring the speed of keystroke entry to determine if it comes from an attack or if it is entered by a human being.

Here is ukip blocking at work:
https://www.youtube.com/watch?v=J0LSWsPH...tianNeuner

Ukip offers 2 modes: A monitor mode which allows to monitor and log the attack, but not to intercept it. And a hardening mode which will immediately block the attack. By default it is the hardening mode that runs.

If you are interested, for example to secure a mobile machine like a laptop on which someone could insert an HID key. However, it is a system that works on a behavioral detection, so it is not 100% reliable. It is better to couple this security with another type of USB Guard like that :
https://usbguard.github.io/

here is the github link to download ukip :
https://github.com/google/ukip

I don't want to say that but well...Thanks Google!