面向新攻击面的物联网终端固件安全威胁模型

doi:10.19678/j.issn.1000-3428.0059386

计算机工程 ›› 2021, Vol. 47 ›› Issue (7): 126-134. doi: 10.19678/j.issn.1000-3428.0059386

面向新攻击面的物联网终端固件安全威胁模型

朱新兵^1,2,3, 李清宝^1,2, 张平^1,2, 陈志锋^1,2, 顾艳阳^1,2

1. 中国人民解放军战略支援部队信息工程大学网络空间安全学院, 郑州 450003;
2. 数学工程与先进计算国家重点实验室, 郑州 450003;
3. 中国人民解放军河南省军区数据信息室, 郑州 450003

收稿日期:2020-08-28 修回日期:2020-09-29 发布日期:2020-10-15
作者简介:朱新兵(1981-),男,工程师、博士,主研方向为信息安全、物联网;李清宝、张平,教授、博士;陈志锋,讲师、博士;顾艳阳,硕士。
基金资助:
国家自然科学基金（61802432）。

Security Threat Model for IoT Terminal Firmware with a New Attack Surface

ZHU Xinbing^1,2,3, LI Qingbao^1,2, ZHANG Ping^1,2, CHEN Zhifeng^1,2, GU Yanyang^1,2

1. Cyberspace Security College, PLA Strategic Support Force Information Engineering University, Zhengzhou 450003, China;
2. State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou 450003, China;
3. Data Information Office, PLA Henan Province Military Region, Zhengzhou 450003, China

Received:2020-08-28 Revised:2020-09-29 Published:2020-10-15

摘要/Abstract

摘要： 物联网终端的显著特点是对外部世界进行感知与控制，但是传统安全威胁分析模型无法有效评估来自外部的攻击数据对物联网终端固件造成的危害。将新攻击面引入的攻击数据作为分析对象，通过对攻击数据在固件中的完整传播路径和交互过程进行建模，构建面向新攻击面的物联网终端固件安全威胁模型FSTM，从而分析物联网终端固件所面临的潜在威胁。分析结果表明，FSTM模型能有效描述物联网与物理世界紧耦合、与业务强相关的特性，为面向新攻击面的物联网终端安全检测技术研究提供理论指导。

关键词: 物联网, 固件, 新攻击面, 攻击数据, 安全威胁模型

Abstract: Internet of Things(IoT) terminals can perceive and control the external environment.However,the traditional security threat analysis models fail to accurately evaluate the harm of external attacks on IoT terminal firmware.This paper takes the attack data introduced by the new attack surface as the analysis object,and builds the model of the complete propagation path and interactions of the attack data in firmware.On this basis,a security threat model called FSTM for IoT terminal firmware with a new attack surface is constructed to support the analysis of potential threats faced by IoT terminal firmware.The analysis results show that FSTM can accurately describe the tight coupling between IoT and the physical world,as well as the strong correlation between IoT and the services.The proposed model provides theoretical guidance for the research of IoT terminal security and detection technology based on the new attack surface.

Key words: Internet of Things(IoT), firmware, new attack surface, attack data, security threat model

中图分类号:

TP393.08

朱新兵, 李清宝, 张平, 陈志锋, 顾艳阳. 面向新攻击面的物联网终端固件安全威胁模型[J]. 计算机工程, 2021, 47(7): 126-134.

ZHU Xinbing, LI Qingbao, ZHANG Ping, CHEN Zhifeng, GU Yanyang. Security Threat Model for IoT Terminal Firmware with a New Attack Surface[J]. Computer Engineering, 2021, 47(7): 126-134.

http://www.ecice06.com/CN/Y2021/V47/I7/126

图/表 6

20210721090449

20210721090452

20210721090455

20210721090459

20210721090502

20210721090506

参考文献

[1] 物联网安全创新实验室.物联网终端安全白皮书(2019)[EB/OL].[2020-07-05].https://baijiahao.baidu.com/s?id=1650552509318730842픴=spider&for=pc. IoT Security Innovation Laboratory.IoT terminal security white paper(2019)[EB/OL].[2020-07-05].https://baijiahao.baidu.com/s?id=1650552509318730842픴=spider&for=pc.(in Chinese)
[2] 中国信息通信研究院.物联网安全白皮书[EB/OL].[2020-07-05].http://www.cbdio.com/BigData/2018-09/25/content_5847152.htm. China Institute of Information and Communication.White paper on Internet of things security[EB/OL].[2020-07-05].http://www.cbdio.com/BigData/2018-09/25/content_5847152.htm.(in Chinese)
[3] 2018年物联网安全及应用领域深度分析报告[EB/OL].[2020-07-05].https://wenku.baidu.com/view/40b64e8329ea81c758f5f61fb7360b4c2e3f2ad8.html. In depth analysis report on security and application field of Internet of things in 2018[EB/OL].[2020-07-05].https://wenku.baidu.com/view/40b64e8329ea81c758f5f61fb7360b4c2e3f2ad8.html.(in Chinese)
[4] 2019物联网安全年报[EB/OL].[2020-07-05].http://vr.sina.com.cn/2020-05-12/doc-iircuyvi2649144.shtml. 2019 Internet of things security annual report[EB/OL].[2020-07-05].http://vr.sina.com.cn/2020-05-12/doc-iircuyvi2649144.shtml.(in Chinese)
[5] SAEED N,TAREQ Y,AL-NAFFOURI,et al.Toward the Internet of underground things:a systematic survey[J].IEEE Communications Surveys & Tutorials 2019,21:3443-3466.
[6] Talking about the safety of camera[EB/OL].[2020-07-05].https://mp.weixin.qq.com/s/xY6W-zq2dzgeH4N6t6-ouQ.
[7] WEI Z,YAN J,ANNI P,et al.The effect of IoT new features on security and privacy:new threats,existing solutions,and challenges yet to be solved[J].IEEE Internet of Things Journal,2019,6(2):1606-1616.
[8] VASHI S,RAM J,MODI J,et al.Internet of Things (IoT):a vision,architectural elements,and security issues[C]//Proceedings of International Conference on I-SMAC.Washington D.C.,USA:IEEE Press,2017:15-36.
[9] ZHU X,LI Q,ZHANG P,et al.A firmware code gene extraction technology for IoT terminal[J].IEEE Access,2019,7:179591-179604.
[10] ZHU X,LI Q,CHEN Z,et al.Research on security detection technology for Internet of things terminal based on firmware code genes[J].IEEE Access,2020,8:150226-150241.
[11] 张冀英,杨巨成,李晓卉.物联网导论[M].北京:中国水利水电出版社,2012. ZHANG J Y,YANG J C,LI X H.Introduction to Internet of things[M].Beijing:China Water and Power Press,2012.(in Chinese)
[12] ZADDACH J,COSTIN A.Embedded devices security and firmware reverse engineering[EB/OL].[2020-07-05].http://s3.eurecom.fr/slides/bh13us_zaddach.slides.pdf.
[13] 刁兆坤,曹世强,孟繁丽.物联网"云管端"的技术发展与应用[J].电信工程技术与标准化,2012,25(6):36-41. DIAO Z K,CAO S Q,MENG F L.Technology development and application profiling of Internet of things based on "cloud,pipe,terminal"[J].Telecommunication Engineering Technology and Standardization,2012,25(6):36-41.(in Chinese)
[14] MOHSIN M,ANWAR Z,HUSARI G,et al.IoTSAT:a formal framework for security analysis of the Internet of things[C]//Proceedings of 2016 IEEE Conference on Communications and Network Security.Washington D.C.,USA:IEEE Press,2017:122-136.
[15] FreeBuf.Depth:the secret of ZHENWANG virus[EB/OL].[2020-07-05].https://www.freebuf.com/articles/system/19059.html.
[16] REDINI N,MACHIRY A,DAS D,et al.BootStomp:on the security of bootloaders in mobile devices[C]//Proceedings of 2017 USENIX Security Symposium.San Diego,USA:USENIX Association,2017:125-139.
[17] RAMOS D A,ENGLER D.Under-constrained symbolic execution:correctness checking for real code[EB/OL].[2020-07-05].https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-ramos.pdf.
[18] STEVENS,RICHARD W.UNIX网络编程.卷2,进程间通信[M].北京:人民邮电出版社,2009. STEVENS,RICHARD W.UNIX network programming.Volume 2,Interprocess communications[M].Beijing:People's Posts and Telecommunications Press,2009.(in Chinese)
[19] PARKER D B.Fighting computer crime:a new framework for protecting information[M].Washington D.C.,USA:John Wiley & Sons.,Inc.,1998.
[20] HERNAN S,LAMBERT S,OSTWALD T,et al.Threat modeling-uncover security design flaws using the stride approach[J].MSDN Magazine-Louisville,2006,9:68-75.
[21] SCHNEIER B.Attack trees-modeling security threats[EB/OL].[2020-07-05].http://hackerproof.org/wwwb/data/hacker/attacktrees-ddj-ft.pdf.
[22] MAVROPOULOS O,MOURATIDIS H,FISH A,et al.A conceptual model to support security analysis in the internet of things[J].Computer Ence & Information Systems,2017,14(2):557-578.
[23] 李明哲,金俊,石端银.图论及其算法[M].北京:机械工业出版社,2010. LI M Z,JIN J,SHI D Y.Graph theory and its algorithm[M].Beijing:China Machine Press,2010.(in Chinese)
[24] MICHAEL S.计算理论导引[M].2版.唐常杰,译.北京:机械工业出版社,2006. MICHAEL S.Introduction to theory of computation[M].2nd ed.Translation by TANG C J.Beijing:China Machine Press,2006.(in Chinese)

选择文件类型/文献管理软件名称

选择包含的内容

面向新攻击面的物联网终端固件安全威胁模型

Security Threat Model for IoT Terminal Firmware with a New Attack Surface

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 6

参考文献

相关文章 15

编辑推荐

Metrics

本文评价

[1]	余长宏, 陆雅, 王海鑫, 高明. 基于滑动时间窗的物联网设备流量分类算法[J]. 计算机工程, 2023, 49(7): 259-268.
[2]	潘雪, 袁凌云, 黄敏敏. 基于区块链和域信任度的物联网跨域信任评估模型[J]. 计算机工程, 2023, 49(5): 181-190.
[3]	田秀霞, 杨明夷. 家庭物联网中基于智能合约的访问控制机制[J]. 计算机工程, 2023, 49(3): 18-28.
[4]	苏瑞国, 阳建, 秦继伟, 武晓雄, 贾振红. 基于物联网区块链的轻量级共识算法研究[J]. 计算机工程, 2023, 49(2): 175-180.
[5]	顾智敏, 王梓莹, 郭静, 郭雅娟, 冯景瑜. 雾化零信任组件的5G电力失陷终端威胁检测[J]. 计算机工程, 2023, 49(2): 161-168.
[6]	丁庆丰, 李晋国. 一种物联网环境下的分布式异常流量检测方案[J]. 计算机工程, 2022, 48(8): 152-159.
[7]	刘晶, 朱炳旭, 梁佳杭, 任女尔, 季海鹏. 基于主侧链合作的区块链访问控制策略[J]. 计算机工程, 2022, 48(3): 10-16,22.
[8]	黄志清, 解鲁阳, 张严心, 尹泽明. 基于区块链的物联网数据服务信誉评估模型[J]. 计算机工程, 2022, 48(1): 33-42.
[9]	李忠成, 解滨, 张文祥. 基于多元分层感知的移动物联网区域分割算法[J]. 计算机工程, 2021, 47(9): 51-58.
[10]	张建国, 胡晓辉. 基于以太坊的改进物联网设备访问控制机制研究[J]. 计算机工程, 2021, 47(4): 32-39,47.
[11]	张江徽, 崔波, 李茹, 史锦山. 基于智能合约的物联网访问控制系统[J]. 计算机工程, 2021, 47(4): 21-31.
[12]	闫华钰, 陈岚, 佟鑫, 李莹. 面向物联网应用的SoC安全检查架构设计[J]. 计算机工程, 2021, 47(2): 152-159.
[13]	任智, 吴本源, 周舟, 苏新. 基于CoAP协议的泛在电力物联网拥塞控制算法[J]. 计算机工程, 2021, 47(10): 166-173.
[14]	黄廷辉, 丁勇, 李思骏. 基于MT6D的物联网轻量级安全协议研究[J]. 计算机工程, 2020, 46(9): 117-122.
[15]	王汝言, 刘宇哲, 张普宁, 亢旭源, 李学芳. 面向物联网的边云协同实体搜索方法[J]. 计算机工程, 2020, 46(8): 43-49.

模态框（Modal）标题

选择文件类型/文献管理软件名称

选择包含的内容

面向新攻击面的物联网终端固件安全威胁模型

Security Threat Model for IoT Terminal Firmware with a New Attack Surface

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 6

参考文献

相关文章 15

编辑推荐

Metrics

本文评价