Internet of Things firmware library function identification method based on matching

An identification method and technology of the Internet of Things, applied in the field of identification of the firmware library functions of the Internet of Things based on matching, can solve the problems of increasing the false negative rate of library function identification and increasing the difficulty of automatic identification, so as to improve the correctness and readability, and improve Recognition efficiency and accuracy, solving the effect of high signature omission rate

Inactive Publication Date: 2019-06-25
XIDIAN UNIV
View PDF0 Cites 3 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] However, the signature-based library function identification method is closely related to the compiler and compilation optimization. Small differences in compilation options will lead to huge changes in the signatures of the two functions, increasing the false negative rate of library function identification and increasing the difficulty of automatic identification.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Internet of Things firmware library function identification method based on matching
  • Internet of Things firmware library function identification method based on matching
  • Internet of Things firmware library function identification method based on matching

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0027] The technical solution of this patent will be further described in detail below in conjunction with specific embodiments.

[0028] Embodiments of the present patent are described in detail below, examples of which are shown in the drawings, wherein the same or similar reference numerals designate the same or similar elements or elements having the same or similar functions throughout. The embodiments described below by referring to the figures are exemplary and are only used for explaining the patent, and should not be construed as limiting the patent.

[0029] In the description of this patent, it is to be understood that the terms "center", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", The orientation or positional relationship indicated by "top", "bottom", "inner", "outer", etc. is based on the orientation or positional relationship shown in the drawings, and is only for the convenience of describing this patent and simplifying the des...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to the technical field of software reversion, in particular to an Internet of Things firmware library function identification method based on matching, which comprises the following steps: 1) Internet of Things firmware loading address identification; 2) constructing a library function feature library; 3) firmware function feature extraction; 4) function feature matching; and5) sub-function matching of the identified function. According to the method, binary function code characteristics can be extracted from multiple dimensions such as function signatures, assembly instructions and character string information, and a characteristic database is constructed for firmware and a function library; identifying a library function in the firmware by using a feature matching-based method; and by automatically matching the sub-functions of the identified function, the library function identification efficiency and accuracy are further improved. According to the technical scheme, quick and accurate recognition of the library function in Internet of Things firmware analysis can be achieved, and the correctness and readability of firmware automatic analysis and vulnerability mining results are improved.

Description

technical field [0001] The invention relates to the technical field of software reverse engineering, in particular to a method for identifying functions of an Internet of Things firmware library based on matching. Background technique [0002] In recent years, the Internet of Things industry has developed rapidly, and more and more devices have entered the lives of the public. IoT devices have covered various industries such as personal wear, home security, transportation and logistics, and smart home, providing a huge experience for people's lives. But at the same time, these devices are also vulnerable to malicious attacks from attackers. Attackers take advantage of vulnerabilities in the device firmware to control the device, monitor user behavior, steal user privacy, and seriously endanger user privacy and property security. Therefore, in order to resist malicious attacks, many security researchers perform binary analysis on firmware. However, due to the limitation of...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F11/36
Inventor 朱立鹏
Owner XIDIAN UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products