arrow
Return

Reverse Engineering IoT Devices: Effective Techniques and Methods

delete2018-12-01
delete24
PRE
AI
O
Omer Shwartz *
M
Michael Bohadana
Y
Yuval Elovici
Y
Yossi Oren
DOI:10.1109/JIOT.2018.2875240delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Recent Internet of Things (IoT) botnet attacks have called the attention to the fact that there are many vulnerable IoT devices connected to the Internet today. Some of these Web-connected devices lack even basic security practices such as strong password authentication. As a consequence, many IoT devices are already infected with malware and many more are vulnerable to exploitation. In this paper we analyze the security level of 16 popular IoT devices. We evaluate several low-cost black-box techniques for reverse engineering these devices, including software and fault injection-based techniques used to bypass password protection. We use these techniques to recover device firmware and passwords. We also discover several common design flaws which lead to previously unknown vulnerabilities. We demonstrate the effectiveness of our approach by modifying a laboratory version of the Mirai botnet to automatically add these devices to a botnet. We also discuss how to improve the security of IoT devices without significantly increasing their cost or affecting their usability.
Keywords:
Computer security
Internet of Things (IoT)
IoT application design
IoT standardization
IoT system architecture
IoT test-bed
privacy
reverse engineering
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

IEEE Internet of Things Journal cover
IEEE Internet of Things Journal
IF:
8.9
Papers:
1.4W
Citations:
7.8W

Organization

B
ben-gurion university of the negev
Scholars:
8.4K
Papers: 5.1K
Citations: 1
Cited Papers

Cited Papers

L'évaluation des difficultés et des besoins des patients psychiatriques
err2008-12-01
err0
PREAI
errValentino Pomini; Philippe Golay; Christine Reymond
errShare
errSave
A Survey on Security and Privacy Issues in Internet-of-Things
err2017-10-01
err746
PREAI
errYang, Yuchen; Wu, Longfei; Yin, Guisheng; Li, Lijie; Zhao, Hongbin
errShare
errSave
Noninvasive Diagnosis of Gastric Cancer Based on Breath Analysis with a Tubular Surface-Enhanced Raman Scattering Sensor
err2022-05-13
err0
PREAI
errLiping Huang; Yajie Zhu; Changshun Xu; Yu Cai; Yongdong Yi; Kang Li; Xueqian Ren; Danfeng Jiang; Yuancai Ge; Xiaohu Liu; Weijian Sun; Qingwen Zhang; Yi Wang
errShare
errSave
Security Vulnerabilities of Internet of Things: A Case Study of the Smart Plug System
err2017-12-01
err131
errOAAI
errLing, Zhen; Luo, Junzhou; Xu, Yiling; Gao, Chao; Wu, Kui; Fu, Xinwen
errShare
errSave
Roadmap Methods
err1991-01-01
err0
PREAI
errJean-Claude Latombe
errShare
errSave
The structural determinants of checkpoint activation
err2007-04-16
err0
errOAAI
errChristina A. MacDougall; Tony S. Byun; Christopher Van; Muh-ching Yee; Karlene A. Cimprich
errShare
errSave
TCR‐like antibodies distinguish conformational and functional differences in two‐ versus four‐domain auto reactive MHC class II–peptide complexes
err2011-04-12
err0
errOAAI
errRony Dahan; Moran Tabul; Yuan K. Chou; Roberto Meza‐Romero; Shayne Andrew; Adolph J. Ferro; Gregory G. Burrows; Halina Offner; Arthur A. Vandenbark; Yoram Reiter
errShare
errSave
Lest We Remember: Cold-Boot Attacks on Encryption Keys
err2009-05-01
err752
PREAI
errHalderman, J. Alex; Schoen, Seth D.; Heninger, Nadia; Clarkson, William; Paul, William; Calandrino, Joseph A.; Feldman, Ariel J.; Appelbaum, Jacob; Felten, Edward W.
errShare
errSave
researcher View more