A Research of Simple Firmware Vulnerabilities Analysis Mechanism on IoT Devices - Take IP Cameras as Examples

• Main Authors: CHEN,LI-FEI, 陳麗妃
• Other Authors: TSAI,DWEN-REN
• Format: Others
• Language: zh-TW
• Published: 2019
• Online Access: http://ndltd.ncl.edu.tw/handle/u3y9mg

碩士 === 中國文化大學 === 資訊管理學系碩士在職專班 === 107 === Among the different types of IoT products, IP camera can be applied to various fields such as smart retail, smart buildings, smart transportation, smart factories, smart medical and smart homes. It has become the most popular IoT electronic products pur-chased by consumers in recent years. First, according to research, there will be up to 98 million security cameras in the world in 2019. This research identifies the open source software used by firmware analysis tech-niques without comparing source code on 20 IP cameras. A total of 77 sets of open source software were identified by analyzing the 20 IP camera firmware files. A total of 66 high-risk, 130 medium-risk and 18 low-risk 214 were found by comparing the con-tents of the US National Vulnerability Database. This testing method proposed by this research is a fast vulnerability detection mechanism, which aims to provide a reference for product security assessment of gen-eral consumer users. If the user finds a known security vulnerability in the currently used network camera, it should avoid directly connecting IP cameras to the Internet without any security protection mechanism.