I can think of 2 solutions to this issue offhand. - Accept general input from a keyboard or mouse only after the user's password has been entered into a confir

I can think of 2 solutions to this issue offhand. - Accept general input from a keyboard or mouse only after the user's password has been entered into a confirmation window. (Even just a yes/no would work here.) - Change all key shortcuts and menus that can execute things (WinKey+R, Alt+F2, etc.) to something nonstandard. You could also remove them altogether or prompt for a password if afraid of a targeted attack. The question then becomes this: Are there other attacks that can use USB to execute code beside mimicking input devices?