基于D-S证据理论的嵌入式固件Web代码静态漏洞检测技术

doi:10.13190/j.jbupt.2018-212

北京邮电大学学报 ›› 2019, Vol. 42 ›› Issue (5): 91-99.doi: 10.13190/j.jbupt.2018-212

基于D-S证据理论的嵌入式固件Web代码静态漏洞检测技术

王思琪^1,2, 缪思薇³, 张小玲^1,2, 石志强^1,2, 卢新岱⁴

1. 中国科学院信息工程研究所, 北京 100093;
2. 中国科学院大学网络空间安全学院, 北京 100049;
3. 中国电力科学研究院有限公司, 北京 100192;
4. 国网浙江省电力有限公司电力科学研究院, 杭州 310014

收稿日期:2018-11-10 出版日期:2019-10-28 发布日期:2019-10-28
通讯作者: 石志强(1970-),男,正研级高工,博士生导师,E-mail:shizhiqiang@iie.ac.cn. E-mail:shizhiqiang@iie.ac.cn
作者简介:王思琪(1992-),女,硕士生.
基金资助:
国家电网有限公司总部科技项目（52110418001K）

Static Vulnerability Detection Technology for the Embedded Firmware Web Code Based on D-S Evidence Theory

WANG Si-qi^1,2, MIAO Si-wei³, ZHANG Xiao-ling^1,2, SHI Zhi-qiang^1,2, LU Xin-dai⁴

1. Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China;
2. School of Cyber Security, University of Chinese Academy of Sciences, Beijing 100049, China;
3. China Electric Power Research Institute, Beijing 100192, China;
4. State Grid Zhejiang Electric Power Research Institute, Hangzhou 310014, China

Received:2018-11-10 Online:2019-10-28 Published:2019-10-28

摘要/Abstract

摘要： 固件的漏洞挖掘和检测主要包含基于虚拟仿真的动态漏洞挖掘与检测技术和基于逆向工程的静态白盒审计技术等，其存在仿真率低或误报率高等问题，为此，提出了一种基于多维度特征的固件Web漏洞检测方法，利用多维度特征、多层级处理技术和基于D-S证据理论的漏洞推理规则，针对固件Web中常见的各类漏洞进行有效检测，并能降低漏洞检测误报率.

关键词: 固件web, 静态分析, 漏洞检测, 多维度特征, D-S证据理论

Abstract: Currently, vulnerabilities mining and detection for firmware mainly include dynamic analysis which based on virtual simulation and static auditing which based on reverse engineering. These techniques may have low simulation rate and high false positive rate. Proposing a method based on multi-dimensional features for detection of firmware web vulnerabilities. This method can detect common Web vulnerabilities in firmware effectively and lower the false positive rate by using multi-dimensional features, multi-level preprocessing and vulnerabilities reasoning models based on D-S evidence theory.

Key words: firmware web, static analysis, vulnerability detection, multi-dimensional feature, D-S evidence theory

中图分类号:

TP309.1

王思琪, 缪思薇, 张小玲, 石志强, 卢新岱. 基于D-S证据理论的嵌入式固件Web代码静态漏洞检测技术[J]. 北京邮电大学学报, 2019, 42(5): 91-99.

WANG Si-qi, MIAO Si-wei, ZHANG Xiao-ling, SHI Zhi-qiang, LU Xin-dai. Static Vulnerability Detection Technology for the Embedded Firmware Web Code Based on D-S Evidence Theory[J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2019, 42(5): 91-99.

参考文献

[1] Standard I. IEEE standard glossary of software engineering terminology[J]. IEEE Std, 1990, 610(12):1-84.
[2] Costin A, Zarras A, Francillon A, et al. Automated dynamic firmware analysis at scale:a case study on embedded web interfaces[C]//ACM on Asia Conference on Computer and Communications Security.[S.l.]:ACM, 2016:437-448.
[3] Exploit-db. TP-Link IP cameras firmware 1. 6. 18P12-multiple vulnerabilities[EB/OL]. (2013-05-28)[2018-09-01]. https://www.exploit-db.com/exploits/25812/.
[4] Costin A, Zaddach J, Francillon A, et al. A large-scale analysis of the security of embedded firmwares[C]//USENIX Security.[S.l.]:[s.n.], 2014:95-110.
[5] Miller B P, Fredriksen L, So B. An empirical study of the reliability of UNIX utilities[J]. Communications of the ACM, 1990, 33(12):32-44.
[6] Aitel D. An introduction to SPIKE, the fuzzer creation kit, presented at the BlackHat USA conference[EB/OL]. (2011-05-20)[2018-06-10]. https://www.blackhat.com/html/bh-usa-02/bh-usa-02-speakers.html.
[7] GitHub. Sulley:a pure-python fully automated and unattended fuzzing framework[EB/OL]. (2016-10-18)[2018-09-01]. https://github.com/OpenRCE/sulley.
[8] GitHub. A fuzzing framework which uses a DSL for building fuzzers and an observer based architecture to execute and monitor them[EB/OL]. (2017-08-08)[2018-09-01]. https://github.com/MozillaSecurity/peach.
[9] Chess B, West J. Dynamic taint propagation:finding vulnerabilities without attacking[J]. Information Security Technical Report, 2008, 13(1):33-39.
[10] Pistoia M, Chandra S, Fink S J, et al. A survey of static analysis methods for identifying security vulnerabilities in software systems[J]. IBM Systems Journal, 2007, 46(2):265-288.
[11] Li P, Cui B. A comparative study on software vulnerability static analysis techniques and tools[C]//Information Theory and Information Security (ICITIS).[S.l.]:IEEE, 2010:521-524.
[12] Liu B, Shi L, Cai Z, et al. Software vulnerability discovery techniques:a survey[C]//Multimedia Information Networking and Security (MINES).[S.l.]:IEEE, 2012:152-156.
[13] Agosta G, Barenghi A, Parata A, et al. Automated security analysis of dynamic web applications through symbolic code execution[C]//Information Technology:New Generations (ITNG).[S.l.]:IEEE, 2012:189-194.
[14] Zheng Y, Zhang X. Path sensitive static analysis of web applications for remote code execution vulnerability detection[C]//International Conference on Software Engineering.[S.l.]:[s.n.], 2013:652-661.
[15] Gupta M K, Govil M C, Singh G. Static analysis approaches to detect SQL injection and cross site scripting vulnerabilities in web applications:a survey[C]//Recent Advances and Innovations in Engineering.[S.l.]:IEEE, 2014:1-5.

基于D-S证据理论的嵌入式固件Web代码静态漏洞检测技术

Static Vulnerability Detection Technology for the Embedded Firmware Web Code Based on D-S Evidence Theory

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 3

编辑推荐

Metrics

本文评价

[1]	刘金铭张碧玲张玉艳. 基于多传感器协同的自适应联邦滤波跟踪算法[J]. 北京邮电大学学报, 2023, 46(4): 21-26.
[2]	王雅文宫云战肖庆杨朝红. 扩展区间运算的变量值范围分析技术[J]. 北京邮电大学学报, 2009, 32(3): 36-41.
[3]	杨朝红1,2 , 宫云战2 , 肖庆1,2 , 王雅文2. 基于软件缺陷模型的测试系统[J]. 北京邮电大学学报, 2008, 31(5): 1-4.