SOHO无线接入路由器的安全漏洞挖掘分析方法研究  

The vulnerability mining and analysis method of SOHO wireless access router

作　　者：何长鹏 He Changpeng(School of Public Security Technology,Gansu University of Political Science and Law,Gansu Lanzhou 730070)

机构地区：[1]甘肃政法大学公安技术学院,甘肃兰州730070

出　　处：《网络空间安全》2020年第12期126-130,共5页Cyberspace Security

基　　金：甘肃省高等学校创新基金项目(项目编号:2020B-164);甘肃政法大学校级科研资助项目(项目编号:GZFXQNLW003)。

摘　　要：SOHO无线接入路由器作为普及度极高的网络接入设备,它的安全影响着整个互联网的安全。文章针对SOHO无线接入路由器的安全漏洞挖掘分析技术开展研究,提出一种基于模糊测试的网络协议漏洞挖掘分析方法,实现对安全漏洞自动扫描分析。首先,在分析SOHO无线接入路由器体系架构的基础上,搭建模拟运行环境,从路由器固件中提取出文件系统;然后,设计了基于Sulley的SOHO无线路由器模糊测试方法,检测到已公开代码的高层网络协议漏洞;最后,重现和验证了其中一种网络协议漏洞,并给出相应的漏洞利用方法。SOHO wireless access router is a highly popular network access devices and its security will affect the entire internet security.In this paper,we study the security vulnerability mining and analysis technology of SOHO wireless access router,and propose a network protocol vulnerability mining and analysis method based-on fuzzing testing to realize the automatic scanning and analysis the vulnerability.First,we create the real-world the running environment and analyze the SOHO wireless access router architecture and extract the file system from the router firmware.Then design the fuzzing method basedon Sulley tool for the SOHO wireless access router,which is able to detect the published vulnerability of high-level network protocol.Finally,we replicate and prove the one of the network protocol vulnerability and give the corresponding method to exploit this vulnerability.

关 键 词：漏洞挖掘 无线路由器 网络协议漏洞 SOHO 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]