복합 에뮬레이션을 이용한 효율적인 커버리지 가이드 IoT 펌웨어 퍼징 기법
Efficient Coverage Guided IoT Firmware Fuzzing Technique Using Combined Emulation
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
IoT 장비가 상용화되면서 IP카메라, 도어락, 자동차, TV 등 일반 생활기기에 블루투스나 유무선의 네트워크가 내재되어출시되고 있다. IoT 장비는 네트워크를 통해 많은 정보들을 공유하며 개인적인 정보들을 수집하여 시스템을 가동하기때문에 IoT 장비에 대한 보안은 더욱 중요해지고 있다. 또한, 현재 사이버 위협 중 웹 기반 공격과 애플리케이션 공격이상당히 많은 비중을 차지하고 있고, 이를 보안하기 위해 보안 전문가들이 수동 분석을 통해 사이버 공격의 취약점들을분석하고 있다. 그러나 수동 분석으로만 취약점을 분석하기에는 사실상 불가능하기 때문에 현재 시스템 보안을 연구하는연구원들은 자동화된 취약점 탐지 시스템을 연구하고 있고, 최근 USENIX에서 발표된 Firm-AFL은 커버리지 기반의퍼저를 사용하여 퍼징의 처리속도와 효율성에 대해 연구를 진행하여 시스템을 제안했다. 하지만, 기존 도구는 펌웨어의퍼징 처리속도에 초점을 두고 연구를 진행하다 보니 다양한 경로에서 취약점을 발견하지 못했다. 본 논문에서는 기존도구에서 찾지 못한 다양한 경로에서 취약점을 발견하고자 변이과정을 강화시켜 기존 도구가 찾은 경로보다 더 많은 경로를찾고, 제약조건을 해결하며 더 많은 크래시를 발견하는 IoTFirmFuzz를 제안한다.
Abstract
As IoT equipment is commercialized, Bluetooth or wireless networks will be built into general living devices such as IP cameras,door locks, cars and TVs. Security for IoT equipment is becoming more important because IoT equipment shares a lot of informationthrough the network and collects personal information and operates the system. In addition, web-based attacks and application attackscurrently account for a significant portion of cyber threats, and security experts are analyzing the vulnerabilities of cyber attacksthrough manual analysis to secure them. However, since it is virtually impossible to analyze vulnerabilities with only manual analysis,researchers studying system security are currently working on automated vulnerability detection systems, and Firm-AFL, publishedrecently in USENIX, proposed a system by conducting a study on fuzzing processing speed and efficiency using a coverage-basedfuzzer. However, the existing tools were focused on the fuzzing processing speed of the firmware, and as a result, they did notfind any vulnerability in various paths. In this paper, we propose IoTFirmFuzz, which finds more paths, resolves constraints, anddiscovers more crashes by strengthening the mutation process to find vulnerabilities in various paths not found in existing tools.
참고문헌 (20)
- N. Zhang, "Understanding IoT Security Thro ugh the Data Crystal Ball: Where We Are Now and Where We Are Going to Be", CoRR, vol. abs, 2017
- Barton P. Miller, "An empirical study of the reliability of UNIX utilities", Communications of the ACM (1990)
- J. Zaddach, "AVATAR: A Fram ework to Support Dynamic Security A nalysis of Embedded Systems’ Firmw ares", Proceedings of the 21st Annual Network and Distributed System Security Symposium (2014), NDSS
- Jiongyi Chen, "IoTFuzzer:Discovering memory corruptions in iot through app-based fuzzing", Networked and Distributed System Security Symposium (2018), NDSS
- Yaowen Zheng, "Firm-AFL: High-Through put Greybox Fuzzing of IoT Firmware via Augmented Process Emulation", Proceedings of the USENIX 2019 Ann ual Technical Conference (2019)
- Andrei Costin, "A Large-Scale Analysis of the Security of Embedded Firmwares", Proceedings of the 23rd USENIX Security Symposium (2014)
- Daming D. Chen, "Towards automated dynamic analysis for Linux-based embedded firmware", Network and Distributed System Security Symposium (2016), NDSS
- F. Bellard, "QEMU, a fast and portabl e dynamic translator", Proceedings of the USENIX 2005 Annual Technical Conference, pp.41~41 (2005)
- Andrew Henderson, "Make it work, make it right, make it fast: Building a platform-neutral whole-system dynam ic binary analysis platform", Interna tional Symposium on Software Testing and Analysis (ISSTA’14) (2014)
- Daming D. Chen, "Towards automated dynamic analysis for Linux-based embedded firmware", Network and Distributed System Security Symposium (2016), NDSS
- "FirmAFL" (2019)[URL]
- M. Bohme, "Coverage-based greyb ox fuzzing as markov chain", CCS (2016)
- C. Lyu, "MOPT:Optimized Mutation Scheduling for Fuzzers, Technical Report", Proceedings of the USENIX 2019 Ann ual Technical Conference (2019)
- "MOptAFL" (2019)[URL]
- James Kennedy, "Particle Swarm Optimization", IEEE International Conference (1995)
- "American fuzzy lop(AFL)"[URL]
- Smolinsky. L, "Discrete Power Law with Exponential Cutoff and Lotka’s Law", J. Assoc. Inf. Sci. Technol, 68, pp.1792~1795 (2017)
- Marcel Böhme, "Directed Greybox Fuzzing", CCS (2017)
- "AFLgo" (2017)[URL]
- "AFLfast" (2016)[URL]