Firmware version detection method and vulnerability repair rate evaluation method of internet of things device

Abstract

The invention discloses a firmware version detection method and a vulnerability repair rate evaluation method of an Internet of Things device. The detection method comprises the following steps: S1, acquiring a firmware image file; 2, extracting that file system after decompressing the firmware image files, and determining the Web root directory of each file system; 3, searching Web static resources, respectively extracting eigenvalues of each Web static resource in various firmware versions under each device model, and constructing correspond firmware version characteristic tables; S4, obtaining the IP address list and firmware version characteristic table of the required device type, scanning fingerprint, extracting corresponding fingerprint, and identifying the firmware version number of the device; The evaluation method includes obtaining model version information of the target vulnerability, and calculating the repair rate of the target vulnerability according to the result of thedetection method. The invention has the advantages of simple realization method, high detection accuracy and efficiency, and the vulnerability repair rate evaluation without triggering the vulnerability.

Description

technical field [0001] The present invention relates to the technical field of Internet of Things devices, in particular to a method for detecting firmware versions of Internet of Things devices and a method for evaluating vulnerability repair rates. Background technique [0002] With the development of the Internet of Things, the number of Internet-connected devices has grown rapidly, with various types and manufacturers. Due to the loopholes in the devices, various security issues have also occurred frequently. Since networked devices are generally unattended, even if vulnerabilities are found, they cannot be repaired in time. Therefore, it is of great significance to evaluate the repair rate of known vulnerabilities in networked devices. If there is no version detection, the current traditional method is to use the vulnerability trigger code to write a scanning program, and use the vulnerability attack test to judge its repair status. However, it is illegal to conduct an ...

AI Technical Summary

Problems solved by technology

However, the fingerprint extraction of the web interface in this scheme must rely on the firmware simulation virtualization device, and the existing firmware simulation technology can only successfully simulate about 10% of the firmware, so it cannot be used for large-scale device firmware in the real network In fingerprint recognition, it is impossible to realize large-scale online identification of the firmware version number of networked devices, and the use of simulated devices for testing may not be consistent with the fingerprints of real devices, and its actual detection accuracy is not high

Images