IoT Firmware Vulnerability Filtering by Device-Specific Prerequisites

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for identifying vulnerabilities in IoT device firmware are inefficient and time-consuming, often leading to false positives due to the lack of consideration for device-specific prerequisites, and there is no systematic approach for evaluating the relevance of vulnerabilities in non-Linux kernel-based IoT devices.

Innovation Solution

A method and system that utilize internal and external databases to filter vulnerability details based on device-specific properties and prerequisites, reducing the analysis time by disregarding non-exploitable vulnerabilities and using an internal database for continuous updates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If version-based vulnerability detection is used to identify vulnerabilities in IoT devices, then the coverage of detected vulnerabilities increases, but the number of false positives increases due to lack of device-specific prerequisite verification

Engineering Contradiction:
Improvevulnerability detection accuracyVSAvoidfalse positive vulnerability information
Core Design Contradiction:
Measurement precisionVSLoss of information

Solution Approach 1:

The system performs preliminary extraction of device properties (firmware version, hardware architecture, enabled features) before vulnerability matching. This preliminary action enables subsequent filtering of vulnerabilities based on device-specific prerequisites, reducing false positives while maintaining comprehensive vulnerability coverage.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The vulnerability assessment process is segmented into distinct stages: device property extraction, vulnerability database querying, prerequisite-based filtering, and final vulnerability identification. This segmentation allows each stage to focus on specific tasks, improving overall accuracy by systematically eliminating false positives through intermediate filtering steps.

Inventive Principle:
Principle #1Segmentation

2Reliability

If comprehensive vulnerability testing is performed against multiple standards to ensure security, then the security reliability improves, but the time and resources required increase significantly

Engineering Contradiction:
Improvesecurity reliabilityVSAvoidvulnerability assessment time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs partial vulnerability assessment by focusing only on vulnerabilities that match the device's actual properties and enabled features. Instead of testing against all possible vulnerabilities and standards comprehensively, it selectively assesses only the relevant subset, reducing time and resource consumption while maintaining security reliability for the specific device context.

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The system changes the assessment parameters dynamically based on device properties. By adjusting the vulnerability filtering criteria according to extracted device characteristics (firmware version, hardware architecture, enabled features), the system optimizes the assessment process to focus on relevant vulnerabilities, thereby reducing overall assessment time while maintaining reliability.

Inventive Principle:
Principle #35Parameter changes

3Manufacturing precision

If extensive security testing is performed before IoT device release to identify vulnerabilities, then the manufacturing precision of secure devices improves, but the release cycle time increases

Engineering Contradiction:
Improvesecurity testing thoroughnessVSAvoiddevice release speed
Core Design Contradiction:
Manufacturing precisionVSProductivity

Solution Approach 1:

The system uses a pre-built vulnerability database that contains detailed information about known vulnerabilities, their prerequisites, and affected software versions. This copied knowledge base enables rapid vulnerability assessment without requiring extensive original testing, thus maintaining security thoroughness while accelerating the release process.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

Device properties are extracted and stored in advance during the firmware analysis phase, before vulnerability matching occurs. This preliminary preparation of device property data enables faster vulnerability assessment in subsequent releases, improving release speed while maintaining comprehensive security testing through systematic property-based filtering.

Inventive Principle:
Principle #10Preliminary action

4Reliability

If all detected vulnerabilities are addressed to ensure complete security coverage, then the security reliability improves, but the complexity of the remediation process increases due to false positives

Engineering Contradiction:
Improvesecurity coverageVSAvoidremediation process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system extracts and removes false positive vulnerability information through prerequisite-based filtering. By taking out vulnerabilities that do not match device-specific properties (such as disabled features or incompatible hardware architectures), the system reduces remediation complexity while maintaining complete security coverage for actually exploitable vulnerabilities.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentEP4411580B1Method for identifying one or more exploitable vulnerabilities in device firmware of an IoT device
Publication Date: 2025.12.03 ONEKEY GMBH
  • EP4411580B1 patent drawingFigure 1
  • EP4411580B1 patent drawingFigure 2

AI summary

A computer-implemented method for identifying one or more vulnerabilities in device firmware of an loT device is described. The method comprises receiving an image of the device firmware and analyzing the image to determine software components of the device firmware, and associated properties of the firmware. The method further comprises accessing at least one of an external database or an internal database, wherein the at least one of an external database or an internal database comprise recorded details of the one or more vulnerabilities of the software components. The method further comprises filtering the recorded details using the associated properties, and downloading the filtered ones of the recorded details.