Security analysis method for firmware of embedded equipment

Abstract

The invention discloses a security analysis method for firmware of embedded equipment, which comprises the following steps: 1, carrying out static analysis on a file system of the firmware of the embedded equipment, searching parameters and configuration files used for starting a service daemon, and packaging the file system of the firmware of the embedded equipment into a disk mirror image of a virtual machine; 2, starting a service daemon by utilizing the searched parameters and the configuration file, and recording an execution track of the service daemon; if yes, executing the step 5, otherwise, executing the step 3; 3, searching for a reason why the service daemon cannot be started according to the recorded execution track of the service daemon; 4, repairing the service daemon according to the searched reason why the service daemon cannot be started, and executing the step 2 after repairing; and 5, testing the started network service. According to the method, more types of embedded equipment firmware are supported, and various pieces of operation semantic information in the firmware program running process are obtained for safety analysis.

Description

technical field [0001] The invention belongs to the technical field of software security protection, and in particular relates to a security analysis method for embedded device firmware. Background technique [0002] With the development of the Internet and electronic technology, various types of "Internet of Things" embedded devices have become more and more popular and spread throughout people's lives. However, limited by device manufacturers' update policies and users' usage habits, the security of these devices is often not taken seriously, and they often run outdated or vulnerable firmware programs. Most of these devices play an important role in their working network environment, such as the access device and gateway exit of the local area network, and sometimes may even grasp some important or private information of users. Once the security defenses of these devices are breached, there may be serious consequences. [0003] For a long time, the traditional research a...

AI Technical Summary

Problems solved by technology

Although this method solves the problem of being unable to perform dynamic analysis, experiments show that the compatibility of this solution is not good, and it cannot recognize the correct network configuration or complete the initialization of the device for firmware from many manufacturers.

Images