1. A method for allocating at least one universal serial bus (USB) device to one of a trusted virtual machine and a non-trusted virtual machine, in a computing device executing a hypervisor hosting the trusted virtual machine and the non-trusted virtual machine, the method comprising: establishing, by a control program executed by a processor of the computing device, a trust level of a virtual machine responsive to a user providing authentication credentials; receiving, by the control program, data indicating a USB port on the computing device received a first USB device; identifying, by the control program, at least one attribute of the first USB device; selecting, by the control program, a first security policy based on the at least one attribute of the first USB device; applying, by the control program, the first security policy to the at least one attribute of the first USB device to determine a security level of the first USB device; granting, by the control program to the trusted virtual machine, access to the first USB device based on the security level of the first USB device; preventing, by the control program to the non-trusted virtual machine, access to the first USB device based on the security level of the first USB device; and selecting, by the control program, based on (i) the at least one attribute of the first USB device and (ii) the security level of the first USB device, the trusted virtual machine among a plurality of virtual machines executing on the computing device.