Firmware security assessment method and system
A security and firmware technology, applied in the field of information security, can solve problems such as failure of equipment to operate according to the predetermined method, threat to the safe and stable operation of the power system, huge time and resource consumption, etc., to alleviate the consumption of time and resources, reduce work, The effect of improving work efficiency
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0032] In one or more embodiments, a firmware security assessment method is disclosed. Considering that if the firmware is initially screened and the potentially threatening firmware is selected for further security analysis, the time spent on firmware security analysis can be greatly reduced. Work, effectively improve the overall work efficiency.
[0033] Since the extracted firmware code is usually binary assembly code, it is usually composed of operation instructions and their parameters. For example, MOV%eax,[%esp+8] means adding 8 bytes to the address in the ESP register to get a new address, and then take the data from this address and write it into the EAX register, the operation instruction of the assembly code. For example, the above MOV instruction, its arrangement structure reflects the operating logic of the program to a certain extent. The higher the similarity of the operation instructions of the two assembly codes, the more similar the code functions are. If one...
Embodiment 2
[0084] In one or more implementations, a firmware security assessment system is disclosed, referring to image 3 ,include:
[0085] The data extraction module 301 is used to analyze the firmware to be tested, and extract the assembly code of the firmware to be tested;
[0086] The data comparison module 302 is used to compare the assembly code of the firmware to be tested with the assembly code of known sample firmware to obtain the similarity between the firmware to be tested and the sample firmware;
[0087] The data evaluation module 303 is configured to evaluate the security of the firmware to be tested according to the similarity and the security score of the sample firmware.
[0088] It should be noted that the specific implementation manners of the above modules have been described in detail in Embodiment 1, and will not be described in detail here.
[0089] Optionally, since the firmware to be tested needs to be compared with the sample firmware in the subsequent ste...
Embodiment 3
[0101] In one or more embodiments, a terminal device is disclosed, including a server, the server includes a memory, a processor, and a computer program stored on the memory and operable on the processor, and the processor executes the The program implements the firmware security evaluation method in the first embodiment. For the sake of brevity, details are not repeated here.
[0102] It should be understood that in this embodiment, the processor can be a central processing unit CPU, and the processor can also be other general-purpose processors, digital signal processors DSP, application specific integrated circuits ASIC, off-the-shelf programmable gate array FPGA or other programmable logic devices , discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like.
[0103] The memory may include read-only memory and random access memory, and p...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More