Vulnerability mining method of mips architecture based on control flow and data flow analysis

Abstract

The present invention provides a method for mining vulnerabilities in the MIPS architecture based on control flow and data flow analysis. The method includes: determining a potentially dangerous function based on the backtracking level; converting the potentially dangerous function into a control flow graph, and each of the potentially dangerous functions The dangerous function corresponds to one of the control flow graphs; set the taint inspection rules based on the vex language; judge whether there is an accessible path from the taint introduction function to the vulnerability trigger function, and if there is an accessible path, introduce the taint Function parameters are marked; through data flow analysis, it is detected whether the parameters of the vulnerability trigger function are marked with taint. According to the method of the present invention, the efficient, accurate, and low-manual intervention MIPS architecture Internet of Things vulnerability mining can detect buffer overflow and command injection risk functions existing in the binary program of the Internet of Things device, reducing the complexity of the analysis process.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for mining vulnerabilities of the MIPS architecture based on control flow and data flow analysis. Background technique [0002] With the advent of the Internet of Everything (IoT), the scale of the Internet of Things industry continues to expand, but the relevant security standards have not kept up with the pace of development, coupled with manufacturers' weak awareness of equipment security, leading to serious security risks in the Internet of Things . [0003] According to the statistical report of the CNVD vulnerability platform operated by CNCERT, the number of general-purpose IoT device vulnerabilities recorded in 2020 reached 3,047 (a year-on-year increase of 28%), and event-type vulnerabilities were 2,141, including improper processing of data transmitted from the client by the device program. The resulting buffer overflow vulnerabilities and command inj...

AI Technical Summary

Problems solved by technology

[0009] In order to solve the above technical problems, the present invention proposes a method for mining vulnerabilities in the MIPS architecture based on control flow and data flow analysis, to solve the problems of low manual mining efficiency and difficult fuzzy test simulation in the prior art

Images