This disclosure relates to the field of recognizing a security attack by a USB device on a computer. This method involves recognizing when a corrupted device would surreptitiously reconfigure itself and attack the computer system that is attached to. The universal serial bus (USB) is a flexible interface for connecting all kinds of computer input and output device. Computer systems are generally very open and facilitate both physically accessible “walk up ports” to the exterior of the chassis and pre‐install a very broad number of “lass device”drivers that read the configuration and identification of the device and automatically enable the plugged‐in device. USB is also commonly used as an internal connection to the computer, because of its...