嵌入式终端固件漏洞挖掘方法及框架实现

Vulnerability Mining Method and Framework Implementation for Embedded Terminal Firmware

嵌入式终端的固件可直接连接底层硬件等特性决定了其漏洞的严重性。为提高电网嵌入式终端固件的安全水平,文章通过分析嵌入式终端固件的组织结构,研究对比了固件漏洞挖掘的常用方法,以电力工控领域为研究对象,针对性地分析了工控固件漏洞挖掘的关键技术,包括固件解压缩技术和深度分析技术,设计并实现了一套针对电力工控嵌入式终端固件的漏洞挖掘框架,并通过实际固件验证了框架的有效性。

Firmware of embedded terminal can be directly connected to the underlying hardware,in company with other characteristics determine the severity of its vulnerability.In order to improve the safety level of embedded terminal firmware in power grid,this paper analyzes the organization structure of the embedded terminal firmware,compares the common methods of firmware vulnerability mining,then takes the electric power industrial control system as the research object,the key technologies of industrial control firmware vulnerability mining are studied,including firmware decompression technology and in-depth analysis technology.Next,this paper designs and implements a set of firmware vulnerability mining framework for embedded terminals in electric power industrial control system,and verifies the effectiveness of the framework through actual firmware.