UFO - Hidden Backdoor Discovery and Security Verification in IoT Device Firmware

Tien, Chin‐Wei; Tsai, Tsung-Ta; Chen, Ing-Yi; Kuo, Sy‐Yen

doi:10.1109/issrew.2018.00-37

Cited by 19 publications

(11 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The telnet assign with a Alpha networks: $image_sign in etc/init0.d/S80telnetd.sh file. And image_sign has the known string is wrgn28_dlob_dir412 in usr/sbin/login [7], [9]. Figure 4 shows the manual detection of telnetd, code of etc/init0.d/S80telnetd.sh and the unknown string.…”

Section: Resultsmentioning

confidence: 99%

“…Firmware vulnerability analysis using security penetration testing. Which includes reverse engineering, static analysis and dynamic analysis to find vulnerabilities, password leaks and hidden backdoors [7].…”

Section: Firmware Vulnerability Analysismentioning

confidence: 99%

“…Reverse engineering: The embedded firmware reverse engineering with open source tools are Binwalk and Firmwaremod-kit(FMK)are used for extract embedded firmware files. The extracting firmware includes firmware headers, Linux kernels, boot loaders and signatures of filesystems [7].…”

Section: Firmware Vulnerability Analysismentioning

confidence: 99%

“…Static analysis using firmwalker, Johnny, Interactive Disassembler (IDA Pro). Firmwalker is a bash script run on extracted firmware of root folder and it gives information about password files, system configuration files, ssh key files, DB files, keywords, strings( are URLS,IP addresses and emails) and executables [7]. Johnny is a GUI for john the ripper tool for identifying passwords of password hash codes.…”

Section: Firmware Vulnerability Analysismentioning

confidence: 99%

See 3 more Smart Citations

Security Threats and Concerns, Firmware Vulnerability Analysis in Industrial Internet of Things

2020

IJETER

View full text Add to dashboard Cite

This paper includes Internet of Things(IOT), Industry 4.0, Industrial Internet of Things (IIOT).Industrial IOT applications and sectors which are used them. The basic architecture of Industrial IOT. The protocols are used in these wireless sensor networks using machine to machine communication. The communication or data transfer among these industrial devices using Industrial Internet. This paper characterize security concerns and threats in Industrial IOT. This paper also presents identification of vulnerabilities, backdoors and password leaks or weak passwords are in the IOT devices. These IOT devices are used in the smart factories or industries which are used for efficient Human to machine communication. This paper represents firmware vulnerability analysis. This analysis includes the firmware unpacking and reverse engineering. This analysis using the specified tools. This paper includes possible attack surfaces are based on vulnerabilities of the Industrial Internet of Things with in the security standards. The security standard is the IOT attack surface area of OWAPS Internet of things project.

show abstract

Section: Resultsmentioning

confidence: 99%

Section: Firmware Vulnerability Analysismentioning

confidence: 99%

Section: Firmware Vulnerability Analysismentioning

confidence: 99%

Section: Firmware Vulnerability Analysismentioning

confidence: 99%

See 2 more Smart Citations

Security Threats and Concerns, Firmware Vulnerability Analysis in Industrial Internet of Things

2020

IJETER

View full text Add to dashboard Cite

show abstract

“…They classify these vulnerabilities by test routine groups. In this context, Tien et al [12] presents the Universal Firmware vulnerability Observer (UFO). UFO is a system that discovers vulnerabilities in the firmware of IoT devices.…”

Section: Businessmentioning

confidence: 99%

Cybersecurity Model Based on Hardening for Secure Internet of Things Implementation

et al. 2021

View full text Add to dashboard Cite

The inclusion of Internet of Things (IoT) for building smart cities, smart health, smart grids, and other smart concepts has driven data-driven decision making by managers and automation in each domain. However, the hyper-connectivity generated by IoT networks coupled with limited default security in IoT devices increases security risks that can jeopardize the operations of cities, hospitals, and organizations. Strengthening the security aspects of IoT devices prior to their use in different systems can contribute to minimize the attack surface. This study aimed to model a sequence of seven steps to minimize the attack surface by executing hardening processes. Conducted a systematic literature review using Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) techniques. In this way, we were able to define a proposed methodology to evaluate the security level of an IoT solution by means of a checklist that considers the security aspects in the three layers of the IoT architecture. A risk matrix adapted to IoT is established to evaluate the attack surface. Finally, a process of hardening and vulnerability analysis is proposed to reduce the attack surface and improve the security level of the IoT solution.

show abstract

The 5G Debate in New Zealand – Government Actions and Public Perception

Hasan

2019

Ad Hoc Networks

View full text Add to dashboard Cite

UFO - Hidden Backdoor Discovery and Security Verification in IoT Device Firmware

Cited by 19 publications

References 3 publications

Security Threats and Concerns, Firmware Vulnerability Analysis in Industrial Internet of Things

Security Threats and Concerns, Firmware Vulnerability Analysis in Industrial Internet of Things

Cybersecurity Model Based on Hardening for Secure Internet of Things Implementation

The 5G Debate in New Zealand – Government Actions and Public Perception

Contact Info

Product

Resources

About