Use the simplest USB dock with the least amount of ports for your specific use case. Simpler docks have less physical room and lower baseline power to hide mal

Use the simplest USB dock with the least amount of ports for your specific use case. Simpler docks have less physical room and lower baseline power to hide malicious mods. e.g. this StarTech dock costs 50% less than one with ethernet. It can be used with a USB-ethernet adapter, which allows both the dock and ethernet adapter to be evaluated separately, https://www.amazon.com/gp/product/B09DGRJMYK/ https://www.amazon.com/gp/product/B09DGRJMYK/ We need crowdsourced behavioral fingerprints and open-source test suites for peripherals which may be subject to supply chain or shipment interdiction. Measure power consumption and response latency baselines, when idle and with reference workloads. Fingerprint units of the same model procured via multiple supply chains: brick & mortar, online, different couriers, new/used. More generally, there is ongoing work for integrity verification of devices, including PCIe device authentication [1][2], USB device authentication [3] and SPDM for remote attestation between DICE-RoT and system firmware, before allowing a device to communicate with the system. [1] PCIe component auth, https://pcisig.com/pcie®-component-authentication https://pcisig.com/pcie®-component-authentication [2] Intel PCI Express Device Security, https://www.intel.com/content/dam/www/public/us/en/documents/reference-guides/pcie-device-security-enhancements.pdf https://www.intel.com/content/dam/www/public/us/en/documents... [3] https://www.zdnet.com/article/usb-type-c-gets-authentication-to-protect-against-malicious-devices/ https://www.zdnet.com/article/usb-type-c-gets-authentication... USB data blocker with transparent case for physical inspection: https://portablepowersupplies.co.uk/product/pure-usb-data-blocker https://portablepowersupplies.co.uk/product/pure-usb-data-bl.... Do we need transparent docks?