Anzeige
Erschienen in:
2019 | OriginalPaper | Buchkapitel
XOR
A Web Application Framework for Automated Security Analysis of Firmware Images of Embedded Devices
verfasst von : Christoph Vorhauer, Klaus Gebeshuber
Erschienen in: Smart Industry & Smart Education
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Abstract
Embedded Linux devices are very popular today and due their simple implementation they have become ubiquitous in our daily lives. Manufactures provide firmware updates online to enhance software security and quality of their products. In this context, software updates and firmware versions represent an enormous potential for security analysts to perform vulnerability analyses, because no real device is needed to gain valuable insights into systems. Previous solutions show the enormous advantages of automatically performing vulnerability research, but do not correlate program versions with ‘Common Vulnerabilities and Exposures’ (CVE) entries. Our solution provides a remote debugging interface to analyse extracted programs.
Therefore, in this paper we present XOR, an expandable web application framework, which supports the manual reverse engineering process of embedded Linux firmware images. In addition, an internal correlation database offers valuable insights for further research. XOR features detect system services, provides a remote debugging interface and allow the correlation between program version and CVE entries. We analysed 47 firmware images of 20 different vendors and found 487 related CVE entries.