Method for constructing firmware security detection of Internet of Things terminal equipment

Abstract

The invention relates to the field of firmware package detection of internet-of-things terminal equipment, and provides a method for constructing firmware security detection of the internet-of-thingsterminal equipment in oder to overcome the defects of an existing security detection mode for a firmware package of the internet-of-things terminal equipment. The method comprises the following steps:step 1, collecting metadata of the internet-of-things terminal, and establishing a firmware list according to the metadata; establishing a firmware unpacking engine library, and establishing a mapping relationship between the firmware list and the firmware unpacking engine library; 2, obtaining a firmware package to be tested, extracting metadata, matching a corresponding firmware unpacking engine, and converting the firmware package to be tested into a machine language code; 3, converting the machine language code of the firmware package to be tested into an assembly language code; 4, scanning and detecting the assembly language code; 5, generating a detection report, wherein the metadata is multi-dimensional data. According to the invention, a basis is provided for reasonable planning of an Internet of Things operation and maintenance scheme, and possibility is provided for reducing the security risk of Internet of Things terminal equipment.

Description

technical field [0001] The invention relates to the technical field of security detection of firmware packages of IoT devices, and more specifically relates to a method for building firmware security detection of IoT terminal devices. Background technique [0002] IoT terminal devices are usually closed embedded systems, and both function upgrades and system updates are performed through firmware. As the lowest-level software of the system, the security of the firmware directly determines the security of the device, and firmware has become one of the main means for hackers to attack IOT devices and systems. [0003] According to a report by an organization, it is predicted that the number of global IOT devices (Internet of Things terminal devices) will reach 26 billion in 2020, and there will be about 6 devices per capita in the future. However, due to the lack of security awareness of the current R&D personnel and the low transparency of the firmware, it is difficult to ch...

AI Technical Summary

Problems solved by technology

[0005] The technical problem to be solved by the present invention is to overcome the defect of low efficiency caused by complex firmware stripping in the above-mentioned prior art, and provide a method for building firmware security detection of IoT terminal equipment, which can quickly and efficiently perform security detection on firmware

Images