usb-guard
Deny-by-default USB gate for Linux. Unknown devices stay unauthorized until you approve them, after identity, consistency, behaviour and storage checks. Defends against BadUSB, rogue keyboards and suspicious sticks. Beta, research-stage.
