USB-IF Statement regarding USB security

Beaverton, OR – August 6, 2014 – The USB Implementers Forum (USB-IF) is a standards organization that develops and promotes USB specifications. We don’t make or sell any products and cannot speak on behalf of any specific companies that implement the USB standards.

The USB-IF agrees that consumers should always ensure their devices are from a trusted source and that only trusted sources interact with their devices. Consumers safeguard their personal belongings and the same effort should be applied to protect themselves when it comes to technology. In order for a USB device to be corrupted, the offender would need to have physical access to the USB device. To prevent the spread of malware, consumers should only grant trusted sources with access to their USB devices.

The USB specifications support additional capabilities for security, but original equipment manufacturers (OEM’s) decide whether or not to implement these capabilities in their products. OEMs develop products based on consumer demand. Greater capabilities of any product likely results in higher prices, and consumers choose on a daily basis what they are willing to pay to receive certain benefits. If consumer demand for USB products with additional capabilities for security grows, we would expect OEMs to meet that demand.

About the USB-IF

The non-profit USB Implementers Forum, Inc. was formed to provide a support organization and forum for the advancement and adoption of USB technology as defined in the USB specifications. The USB-IF facilitates the development of high-quality compatible USB devices through its logo and compliance program, and promotes the benefits of USB and the quality of products that have passed compliance testing. Further information, including postings of the most recent product and technology announcements, is available by visiting the USB-IF website at www.usb.org.