消费级路由器固件木马分析及防护建议  

Firmware Trojan Analysis and Defense Strategy of Customer Router

作　　者：张旭博[1] 贺彦钧 李建春 

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2018年第2期445-449,共5页Communications Technology

摘　　要：互联网技术的迅猛发展,带动了宽带网络的全面普及。目前,消费级路由器成为网络用户接入互联网的一种重要方式,实现将有限宽带上网共享给其它他设备,如电脑、手机、平板电脑等都可以通过有线或是无线接入网络。但是,由于消费级路由器硬件缩水、固件裁剪、技术不完善、固件设计不合理等,消费级路由器的安全问题层出不穷,已经成为僵尸网络的劫持目标,其安全防护形势严峻。通过分析消费级路由器固件逆向、木马流程、木马产生原因,提出了几点安全防护思路。With the development of internet technology , customer router becomes an important means for internet access, and the limited broadband Internet access to other devices, such as computers, mobile phones, can be realized via wired or wireless access networks based on the spread of broadband internet wide use. However, due to the poor router and firmware design, the security of customer router becomes a serious problem demanding pompt solution. The construction and reconstruction, the process of firmware Trojan are analyzed, and the reasons also given. Finally, several defense measures are proposed from the angle of customer–router security.

关 键 词：消费级路由器 安全 木马 动态分析 

分 类 号：TP97[自动化与计算机技术]