Detecting Vulnerability on IoT Device Firmware: A Survey  

作　　者：Xiaotao Feng Xiaogang Zhu Qing-Long Han Wei Zhou Sheng Wen Yang Xiang 

机构地区：[1]School of Science,Computing and Engineering Technologies,Swinburne University of Technology,Hawthorn VIC 3122,Australia [2]IEEE

出　　处：《IEEE/CAA Journal of Automatica Sinica》2023年第1期25-41,共17页自动化学报（英文版）

摘　　要：Internet of things (IoT) devices make up 30%of all network-connected endpoints,introducing vulnerabilities and novel attacks that make many companies as primary targets for cybercriminals.To address this increasing threat surface,every organization deploying IoT devices needs to consider security risks to ensure those devices are secure and trusted.Among all the solutions for security risks,firmware security analysis is essential to fix software bugs,patch vulnerabilities,or add new security features to protect users of those vulnerable devices.However,firmware security analysis has never been an easy job due to the diversity of the execution environment and the close source of firmware.These two distinct features complicate the operations to unpack firmware samples for detailed analysis.They also make it difficult to create visual environments to emulate the running of device firmware.Although researchers have developed many novel methods to overcome various challenges in the past decade,critical barriers impede firmware security analysis in practice.Therefore,this survey is motivated to systematically review and analyze the research challenges and their solutions,considering both breadth and depth.Specifically,based on the analysis perspectives,various methods that perform security analysis on IoT devices are introduced and classified into four categories.The challenges in each category are discussed in detail,and potential solutions are proposed subsequently.We then discuss the flaws of these solutions and provide future directions for this research field.This survey can be utilized by a broad range of readers,including software developers,cyber security researchers,and software security engineers,to better understand firmware security analysis.

关 键 词：Firmware emulation internet of things(IoT)firmware network fuzzing security static analysis 

分 类 号：TP391.44[自动化与计算机技术—计算机应用技术]