Firmware vulnerability scanning system and method based on software gene

A vulnerability scanning and firmware technology, which is applied in the direction of instruments, electronic digital data processing, platform integrity maintenance, etc., can solve problems such as no solution proposed, low accuracy of vulnerability detection, poor applicability, etc.

Pending Publication Date: 2021-04-23
上海戎磐网络科技有限公司
View PDF0 Cites 2 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

For example, "a firmware vulnerability detection method, device, storage medium, and electronic device", which builds a firmware vulnerability information database and a firmware vulnerability rule library, uploads firmware in a preset way, decompresses the firmware, and the vulnerability rule library matches the vulnerability plug-in analysis file The system obtains the vulnerability information and finally displays a series of steps to obtain the possible vulnerability information of the firmware, but the above method has low accuracy and poor applicability to the vulnerability detection of the firmware file system
[0004] For the above problems, no effective solution has been proposed

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Firmware vulnerability scanning system and method based on software gene
  • Firmware vulnerability scanning system and method based on software gene
  • Firmware vulnerability scanning system and method based on software gene

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0026] According to an embodiment of the present invention, an embodiment of a firmware vulnerability scanning system based on software genes is provided, figure 1 is a schematic diagram of a software gene-based firmware vulnerability scanning system according to an embodiment of the present invention, such as figure 1 As shown, the system includes: a firmware analysis module 10 , a software gene analysis module 20 and a vulnerability analysis module 30 .

[0027] The firmware parsing module 10 is configured to parse and extract the firmware file of the firmware to be scanned to obtain the data file of the firmware to be scanned;

[0028] It should be noted that the types of firmware to be scanned at least include: compressed firmware and target firmware, where the target firmware is a file in a file system whose file type is data.

[0029] Therefore, the firmware parsing module has parsers of different versions corresponding to different types of device firmware.

[0030] F...

Embodiment 2

[0054] The embodiment of the present invention also provides a software gene-based firmware vulnerability scanning method. The software gene-based firmware vulnerability scanning device described in the first embodiment above is used to execute the firmware vulnerability scanning method provided in the embodiment of the present invention, as follows It is a specific introduction of the software gene-based firmware vulnerability scanning method provided by the embodiment of the present invention.

[0055] Such as Figure 4 as shown, Figure 4 It is a flowchart of the above-mentioned firmware vulnerability scanning method based on software genes, and the firmware vulnerability scanning method includes:

[0056] Step S102, obtaining the firmware to be scanned, and parsing and extracting the firmware file of the firmware to be scanned to obtain the data file of the firmware to be scanned;

[0057] Step S104, performing software gene extraction on the data file to obtain the soft...

Embodiment 3

[0061] An embodiment of the present invention also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is run by a processor, the steps of the method described in the second embodiment above are executed.

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a firmware vulnerability scanning system and method based on a software gene, and relates to the technical field of firmware detection. The firmware vulnerability scanning system comprises a firmware analysis module, a software gene analysis module and a vulnerability analysis module; the firmware analysis module is used for analyzing and extracting a firmware file of to-be-scanned firmware, and obtaining a data file of the firmware to be scanned; the software gene analysis module is used for performing software gene extraction on the data file to obtain a software gene of the data file; the vulnerability analysis module is used for comparing the software gene of the data file with a preset software gene in a database to determine a target software gene, and determining a vulnerability corresponding to the target software gene as the vulnerability of the firmware to be scanned, the target software gene is the software gene with the highest similarity with the software gene of the data file in the preset software genes, and the technical problem that in the prior art, the vulnerability detection accuracy of the firmware file system is low is solved.

Description

technical field [0001] The invention relates to the technical field of firmware detection, in particular to a firmware vulnerability scanning system and method based on software genes. Background technique [0002] With the development of science and technology, industrial control equipment and Internet of Things equipment are becoming more and more popular in people's daily work activities at this stage. This trend makes the security of current industrial control and Internet of Things equipment a topic of concern. Firmware is a software embedded in a hardware device. Usually it is in flash memory or EEPROM or PROM in an application-specific integrated circuit (ASIC) or programmable logic device (PLD), and some can be updated by the user. It can be used in a wide range of electronic products, from remote controls, calculators to keyboards in computers, hard drives, and even industrial robots. As the name suggests, firmware resides between software and hardware. Like soft...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/57
CPCG06F21/577G06F2221/033
Inventor 刘旭章丽娟胡逸漪陈鹏张汪洋
Owner 上海戎磐网络科技有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products