임베디드 디바이스 펌웨어의 웹 인터페이스 취약점 식별을 위한 에뮬레이션 기반 퍼징 기법
Emulation-Based Fuzzing Techniques for Identifying Web Interface Vulnerabilities in Embedded Device Firmware
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
임베디드 디바이스의 대중화로 인해 펌웨어의 보안은 더욱 중요해지고 있다. 유무선 공유기와 같은 네트워크 장비는 내재된 펌웨어의 웹 인터페이스 취약점을 통해 외부의 공격자로부터 피해를 받을 수 있기 때문에 빠르게 찾아내어제거해야 한다. 이전 연구인 Firmadyne 프레임워크는 펌웨어를 에뮬레이션 한 뒤 취약점을 찾아내기 위한 동적 분석 방법을 제안한다. 그러나 이는 도구에서 정의된 분석 방법대로만 취약점 점검을 수행하므로 찾을 수 있는 취약점의 범위가 한정되어 있다. 본 논문에서는 소프트웨어 보안 테스트 기술 중 하나인 퍼징을 통해 에뮬레이션 기반 환경에서의 퍼징 테스트를 수행한다. 또한 효율적인 에뮬레이션 기반 퍼징을 위해 Fabfuzz 도구를 제안한다. 실험을 통해 확인한 결과 기존 도구에서 식별했던 취약점뿐만 아니라 다른 유형의 취약점도 발견할 수 있다.
Abstract
The security of the firmware is more important because embedded devices have become popular. Network devices suchas routers can be attacked by attackers through web application vulnerabilities in embedded firmware. Therefore, they mustbe found and removed quickly. The Firmadyne framework proposes a dynamic analysis method to find vulnerabilities afteremulating firmware. However, it only performs vulnerability checks according to the analysis methods defined in the tool,thus limiting the scope of vulnerabilities that can be found. In this paper, fuzzing is performed in emulation-basedenvironment through fuzzing, one of the software security test techniques. We also propose a Fabfuzz tool for efficientemulation based fuzzing. Experiments have shown that in addition to the vulnerabilities identified in existing tools, othertypes of vulnerabilities have been found.
참고문헌 (25)
- "Internet of Things (IoT) Market" (2017)[URL]
- "Breaking Down Mirai: An IoT DDoS Botnet Analysis" (2017)[URL]
- J. Zaddach, "AVATAR: A Framework to Support Dynamic Security Analysis of Embedded Systems’ Firmwares", Proceedings of the 21st Annual Network and Distributed System Security Symposium (2014), NDSS
- Jiongyi Chen, "IoTFuzzer: Discovering memory corruptions in iot through app-based fuzzing", Networked and Distributed System Security Symposium (2018), NDSS
- Daming D. Chen, "Towards automated dynamic analysis for Linux-based embedded firmware", Network and Distributed System Security Symposium, NDSS (2016)
- "boofuzz Documentation" (2019)[URL]
- "Peach fuzzing platform" (2014)[URL]
- D. Aitel, "An introduction to SPIKE, the fuzzer creation kit", Proceedings of the Black Hat USA (2001)
- Yaowen Zheng, "Firm-AFL: High-Through put Greybox Fuzzing of IoT Firmware via Augmented Process Emulation", Proceedings of the USENIX 2019 Annual Technical Conference (2019)
- F. Bellard, "QEMU, a fast and portable dynamic translator", Proceedings of the USENIX 2005 Annual Technical Conference, pp.41~41 (2005)
- "CVE" (2017)[URL]
- "CVE" (2017)[URL]
- "CVE" (2017)[URL]
- "CVE" (2017)[URL]
- "CVE" (2017)[URL]
- "Metasploit" (2019)[URL]
- "American fuzzy lop"[URL]
- Serge Gorbunov, "AutoFuzz: Automated Network Protocol Fuzzing Framework", International Journal of Computer Science and Network Security, 10(8), pp.239~245 (2010)
- Xing Han, "A Mutation-based Fuzz Testing Approach for Network Protocol Vulnerability Detection", Proceedings of 2012 2nd International Conference on Computer Science and Network Technology, pp.1018~1022 (2012)
- "Fuzz testing of web applications" (2008)[URL]
- "tshark version 3.1.1"[URL]
- "wireshark version 3.1.1"[URL]
- "selenium(python) version 3.14.0" (2018)[URL]
- Ivan Andrianto, "Web Application Fuzz Testing", 2017 International Conference on Data and Software Engineering, ICoDSE (2017)
- "pyshark version 0.3.8" (2019)[URL]