STM32F10x的启动文件跳转攻击方案设计

Jump-attack Scheme of Startup File Based on STM32F10x

如今嵌入式产品已广泛应用在人们的生活中,但由于嵌入式设备有限的硬件资源和简易的应用环境,会留下诸多可以攻击的漏洞。针对采用STM32F10x系列芯片作为控制器的嵌入式产品,通过软件烧录广泛使用的JTAG或SWD接口,设计了一种启动文件跳转攻击方案。分析了攻击原理,详细阐述了攻击过程,并利用开发板进行实验验证,实验结果表明,该方法具有简单可行、可靠性高、隐蔽性强的特点。

Now many embedded products have been widely applied in people＇s life,but due to the limited hardware resources and simple application environment,there are many loopholes that can be attacked. Aiming at the embedded products which adapt STM32 F10 x series chip as the controller,a startup file jump attack scheme is designed by the JTAG or SWD interface which are widely used in software burning. In addition,the attack principles and process are expounded. The experiment is carried out with the development board,and the results indicate that the method is simple,feasible,reliable and highly concealed.