[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-16681":3,"doc-seo-16681":27},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"file_id":15,"file_url":16,"file_type":17,"file_size":18,"view_count":19,"is_deleted":4,"is_public":20,"is_downloadable":20,"audit_status":20,"page_count":21,"language":22,"language_code":23,"table_of_contents":24,"faqs":24,"seo_title":13,"seo_description":14,"update_tm":25,"read_time":26},16681,1099514068365,"Aurelia","https://ap-avatar.wpscdn.com/avatar/10000253d8d9f28188e?_k=1776742907772140068",8,"Research & Report","USB Watch: A Generalized Hardware-Assisted Insider Threat Detection Framework","USB-Watch presents a hardware-based framework for detecting malicious USB devices that can disguise themselves as benign devices and insert harmful commands into connected hosts. By capturing live USB traffic at the system level before compromised OS components can alter data, the framework analyzes behavioral dynamics and deploys a decision-tree anomaly detection classifier in hardware. Evaluation on live USB devices reports ROC AUC of 0.99 for distinguishing normal and malicious behavior.","cbCair2nnR8u3pEE","https://ap.wps.com/l/cbCair2nnR8u3pEE","pdf",1309505,13,1,14,"English","en","",1776566942,35,{"code":4,"msg":28,"data":29},"ok",{"site_id":30,"language":23,"slug":31,"title":13,"keywords":24,"description":14,"schema_data":32,"social_meta":67,"head_meta":70,"extra_data":72,"updated_unix":25},105,"usb-watch-a-generalized-hardware-assisted-insider-threat-detection-framework",{"@graph":33,"@context":66},[34,51],{"@type":35,"itemListElement":36},"BreadcrumbList",[37,41,45,48],{"item":38,"name":39,"@type":40,"position":20},"https://docshare.wps.com","Home","ListItem",{"item":42,"name":43,"@type":40,"position":44},"https://docshare.wps.com/document/","Document",2,{"item":46,"name":12,"@type":40,"position":47},"https://docshare.wps.com/document/research-report/",3,{"item":49,"name":13,"@type":40,"position":50},"https://docshare.wps.com/document/usb-watch-a-generalized-hardware-assisted-insider-threat-detection-framework/16681/",4,{"url":49,"name":13,"@type":52,"author":53,"headline":13,"publisher":55,"fileFormat":58,"description":14,"dateModified":59,"datePublished":60,"encodingFormat":58,"isAccessibleForFree":61,"interactionStatistic":62},"DigitalDocument",{"name":9,"@type":54},"Person",{"url":38,"name":56,"@type":57},"DocShare","Organization","application/pdf","2026-06-05","2026-04-19",true,{"@type":63,"interactionType":64,"userInteractionCount":19},"InteractionCounter",{"@type":65},"ViewAction","https://schema.org",{"og:url":68,"og:type":69,"og:title":13,"og:site_name":56,"og:description":14},"https://docshare.wps.com/document/usb-watch-a-generalized-hardware-assisted-insider-threat-detection-framework/16681","article",{"robots":71,"canonical":68},"index,follow",{"doc_id":7,"site_id":30}]