IoT 기기 취약점 분석을 위한 펌웨어 추출 및 분석 환경 구축 방법론
Firmware Extraction and Analysis Environment Construction Methodology for IoT Devices Vulnerabilities Analysis
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
최근 몇 년간 급속히 발전하고 있는 IoT 기술과 함께 다양한 IoT 기기가 개발되면서 사용자에게 다양한 기능과 편리함을 제공하고 있다. 하지만 이러한 발전과 동시에 개인정보 유출과 같은 보안 위협에 대한 우려도 커지고 있다. 따라서 IoT 기기의 보안 취약점을 사전에 탐지하는 것은 매우 중요하며, 이를 위해 다양한 취약점 분석 연구가 진행되고 있다. 그러나 IoT 기기의 취약점 분석을 위해 펌웨어를 획득하고 분석 환경을 구축하는 과정은 일반화되기 쉽지 않아 많은 연구자가 어려움을 겪고 있다. 본 논문에서는 IoT 기기 중 사용자가 많이 사용하는 IP 카메라와 같은 소형 IoT 기기에 탑재되는 SOP 타입의 칩을 대상으로 펌웨어를 추출하고 분석 환경을 구축하는 범용적인 방법론을 제안한다. 또한, 상용 IoT 기기에 제안된 방법론을 적용하는 과정을 통한 실장비 분석 환경 구축 사례를 통해 IoT 기기 보안 연구자들에게 펌웨어 추출 및 분석환경 구축에 대한 가이드라인을 제공하고자 한다.
Abstract
In recent years, the rapid development of IoT technology has led to the creation of various IoT devices, offering users a wide range of functionalities and conveniences. However, alongside this advancement, concerns about security threats such as personal information leakage have also grown. Therefore, detecting security vulnerabilities in IoT devices in advance is of utmost importance, and various vulnerability analysis studies are being conducted to address these concerns. However, the process of acquiring firmware and establishing an analysis environment for IoT device vulnerability analysis is not easily standardized, making it challenging for many researchers. In this paper, we propose a universal methodology for extracting firmware and establishing an analysis environment for SOP-type chips embedded in small IoT devices, such as IP cameras, which are widely used by consumers. Furthermore, through the application of the proposed methodology to commercial IoT devices and the process of building an analysis environment for real devices, we aim to provide IoT security researchers with a guideline for firmware extraction and analysis environment setup.
참고문헌 (16)
- "Internet of Thi ngs (IoT) Market Size, Share, and Tr ends 2024 to 2033"[URL]
- "CVE Records for IoT Vulnerabilities"[URL]
- C. Kolias, "DDoS in the IoT : Mirai and other botnets", IEEE Computer, 50(7), pp.80~84 (2017)
- M. Antonakakis, "Understanding the Mirai botnet", Proceedings of the 26th USENIX Security Symposium, pp.1093~1110 (2017)
- Eul-gyuIm, "Firmware Analysis of Embedded Devices", Journal of Korean Institute of Information Scientists and Engineers, 34(1), pp.16~21 (2016)
- S.U. Haq, "A survey on IoT & embedded device f irmware security: architecture, extrac tion techniques, and vulnerability ana lysis frameworks", Discover Internet o f Things, 3(17), pp.1~18 (2023)
- D.D. Chen, "Towards Automated Dynamic Analysis for Linux-based Embedded Firmware", Proceedings of the Network and Distri buted System Security Symposium, pp.1~10 (2016)
- Mingeun Kim, "FirmAE: Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis", Proceedings of the 36th Annual Computer Security Appli cations Conference, pp.733~745 (2020)
- "Flashrom"[URL]
- "Binwalk"[URL]
- "Firmware-Mod-Kit"[URL]
- A. Ukil, "Embedded security for Internet of Things", Proceedings of the 2011 2nd National Conference on Emerging Trends and Applications in Computer Science, pp.1~6 (2011)
- Siva Bala Chandar M, "Implementation and Verification of Secure Boot in Embedded Systems", Proceedings of the 2024 International Conference on Advances in Modern Age Technologies for Health and Engine ering Science, pp.1~4 (2024)
- C. Profentzas, "Performance of secure boo t in embedded systems", Proceedings of the 2019 15th International Confere nce on Distributed Computing in Sens or Systems, pp.198~204 (2019)
- B. Yuce, "Fault attacks on secure embedded software: Threats, design, and evaluation", Journal of Hardware and Systems Security, 2, pp.111~130 (2018)
- A. Cui, "BADFET:Defeating modern secure boot using Second-Order pulsed electromagnetic fault injection", Proceedings of the 11th USENIX Conference on Offensive Technologies, pp.3~ (2017)