基于N-Gram算法的智能家居设备固件安全检测方案

Firmware security detection scheme of smart home devices based on N-Gram algorithm

本文提出基于N-Gram的智能家居设备固件安全检测方案。该方案主要采用N-Gram算法提取设备固件中可以代表智能家居设备固件的特征子序列,将单个设备固件特征向量化,在向量空间里将安全的设备固件与存在漏洞的设备固件进行特征比对,从而实现了利用智能家居市场上已知漏洞去检测其它智能家居设备的相似漏洞的功能,同时提高了安全工程师对设备固件的漏洞发现效率。

This paper proposes N-Gram-based smart home device fi rmware security detection program.The program mainly uses the N-Gram algorithm to extract the feature sub-sequences in the device fi rmware that can represent the smart home device fi rmware,and vectorize the features of a single device fi rmware.In the space,the secure device firmware is compared with the device firmware with vulnerabilities,thereby realizing the function of using the known vulnerabilities in the smart home market to detect similar vulnerabilities of other smart home devices,and at the same time improving the security engineers’understanding of the device fi rmware.