USB Block

USB Block is a security application that controls access to USB ports on Mac computers. Its main function is to prevent unauthorized data extraction through external storage devices. The software allows selectively blocking different types of USB devices, ensuring the protection of confidential information.

★★★★★

5.0(1 ratings)

• Mass storage device control. Specifically blocks USB storage devices such as flash drives, external hard drives, and USB sticks. This feature prevents users from copying sensitive data to removable devices without authorization. The blocking is applied at the operating system level, making it impossible to mount these devices when the policy is active.
• Allow HID devices exclusively. Allows the operation of keyboards, mice, and other human interface devices while blocking storage. This ensures that essential peripherals continue to function normally. The technology identifies the device type through its specific hardware identifiers (PID/VID).
• Blocking of Ethernet over USB network devices. Prevents connection to unauthorized networks via Ethernet adapters that connect through a USB port. This measure mitigates security risks associated with accessing external networks by bypassing primary network controls. The system detects and blocks these adapters automatically.
• Protection against video capture devices. Blocks webcams and external video capture devices connected via USB. This feature is crucial for areas where sensitive information is handled and unauthorized recording must be prevented. The blocking is enforced even if the device uses native system drivers.
• Synchronization device management. Controls devices such as smartphones and tablets that connect to sync data. Prevents file transfer to and from these devices, preventing information leaks through synchronization connections. The policy is applied by differentiating between charge-only mode and data transfer mode.
• Serial communication interface blocking. Disables virtual serial ports created by USB devices, often used by diagnostic and programming equipment. This prevents data extraction via unconventional serial communication protocols. The application intercepts the creation of these interfaces at the kernel level.
• Customizable exception policies. Allows creating whitelists of specific authorized devices based on their unique identifiers. Administrators can allow trusted devices while maintaining general blocking. Policies are managed using a protected administrative password.
• Protection against emulation devices. Detects and blocks devices that emulate keyboards (such as Rubber Ducky) which can be used for command injection. Analysis of input traffic identifies emulation patterns and blocks the device before it can execute malicious commands.
• Detailed security event logging. Logs all USB device connection attempts, whether successful or blocked. The log includes timestamp, device type, identifier, and username. Logs can be exported for security audits and forensic analysis.
• Supervision mode without blocking. Allows monitoring all USB activity without applying blocks, useful during evaluation stages. Generates statistical reports on USB port usage and types of devices connected. This information helps design appropriate blocking policies for each environment.

USB Block was developed by Xiang He, a company specializing in cybersecurity tools for macOS. Development began in 2016 in response to the rise in data leaks via removable devices in corporate environments. The first public version was released in July 2017. The application is written primarily in Objective-C and Swift, utilizing low-level macOS frameworks such as IOKit to interact directly with the system's USB stack. The blocking engine operates at the kernel level through system extensions, ensuring policies are applied before the device is recognized by the operating system.

Alternatives to USB Block:

USBCrypt

USBCrypt is an encryption utility for Windows that secures sensitive information using the AES algorithm.

Price: Free   Size: 6.6 MB   Version: 25.6   OS: Windows