A defect detection method and system for cross-architecture firmware heap memory

Abstract

Embodiments of the present invention provide a defect detection method and system for cross-architecture firmware heap memory. The method includes: obtaining the application program in the emulator and firmware, and analyzing the application program in the emulator based on the binary translation technology, so that the application program is adapted to the system architecture of the preset test environment; and performing register heap memory reading and writing by traversing The hook function and the heap memory allocation hook function map to generate shadow memory, execute the preset memory defect detection algorithm based on the shadow memory, and obtain the heap memory defect detection result. The embodiment of the present invention eliminates the need to deploy detection tools to the device where the firmware is located by simulating the cross-platform characteristics of the execution module, which greatly overcomes the unrealistic demand that traditional memory detection tools need to be deployed in the device, and improves the efficiency of firmware testing , to solve the problem of limited storage space of IoT devices, and the memory defect detection module also provides an effective solution for detecting various heap memory defects in cross-architecture firmware scenarios.

Description

technical field [0001] The invention relates to the technical field of defect detection, in particular to a defect detection method and system for a cross-architecture firmware heap memory. Background technique [0002] With the rapid growth of the number of IoT devices, the number of IoT devices is expected to reach 9.9 billion by the end of 2020. Today, the technical threshold for attacking is getting lower and lower, and IoT terminal devices have become new attack targets. Routers, cameras, refrigerators, sweeping robots, water meters, and smart street lights will all become potential attack targets. Kaspersky IoT Security Report "New trends in the world of IoT threats" pointed out that the number of IoT malicious samples captured has exploded in recent years. According to Gartner's forecast, by the end of 2020, more than 25% of cyber attacks detected by enterprises will involve IoT devices. [0003] Memory security flaws such as buffer overflows have always been the lo...

AI Technical Summary

Problems solved by technology

[0006] Embodiments of the present invention provide a defect detection method and system for cross-architecture firmware heap memory, which are used to solve the problems of insufficient processor architecture support, difficult implementation, and low efficiency after implementation in the cross-architecture firmware memory defect detection method in the prior art.

Images