Firmware version detection method and vulnerability repair rate evaluation method for Internet of Things devices

Abstract

The invention discloses a firmware version detection method and a loophole repair rate evaluation method of an Internet of Things device. The detection method includes: S1. Obtaining a firmware image file; S2. Extracting the file system after decompressing each firmware image file, and determining each file The Web root directory of the system; S3. Search for Web static resources, extract the feature values ​​of each Web static resource in various firmware versions under each device model, and build a corresponding firmware version feature table; S4. Obtain the required device type The IP address list and the firmware version feature table are scanned for fingerprints, the corresponding fingerprints are extracted, and the firmware version number of the device is identified; the evaluation method includes obtaining the model version information of the target vulnerability, and calculating the repair of the target vulnerability based on the results of the above detection method Rate. The invention has the advantages of simple implementation method, high detection accuracy and efficiency, and can realize the evaluation of the repair rate of the leak without triggering the leak.

Description

technical field [0001] The present invention relates to the technical field of Internet of Things devices, in particular to a method for detecting firmware versions of Internet of Things devices and a method for evaluating vulnerability repair rates. Background technique [0002] With the development of the Internet of Things, the number of Internet-connected devices has grown rapidly, with various types and manufacturers. Due to the loopholes in the devices, various security issues have also occurred frequently. Since networked devices are generally unattended, even if vulnerabilities are found, they cannot be repaired in time. Therefore, it is of great significance to evaluate the repair rate of known vulnerabilities in networked devices. If there is no version detection, the current traditional method is to use the vulnerability trigger code to write a scanning program, and use the vulnerability attack test to judge its repair status. However, it is illegal to conduct an ...

AI Technical Summary

Problems solved by technology

However, the fingerprint extraction of the web interface in this scheme must rely on the firmware simulation virtualization device, and the existing firmware simulation technology can only successfully simulate about 10% of the firmware, so it cannot be used for large-scale device firmware in the real network In fingerprint recognition, it is impossible to realize large-scale online identification of the firmware version number of networked devices, and the use of simulated devices for testing may not be consistent with the fingerprints of real devices, and its actual detection accuracy is not high

Images