| 面向大规模嵌入式设备固件的自动化分析方法 |
| |
| 引用本文： | 王猛涛,刘中金,常青,陈昱,石志强,孙利民.面向大规模嵌入式设备固件的自动化分析方法[J].北京邮电大学学报,2017,40(z1):98-102. |
| |
| 作者姓名： | 王猛涛 刘中金 常青 陈昱 石志强 孙利民 |
| |
| 作者单位： | 中国科学院信息工程研究所,北京100093;中国科学院大学网络空间安全学院,北京100049;国家计算机网络应急技术处理协调中心,北京,100029 |
| |
| 基金项目： | 国家自然科学基金项目，国家重点研发计划项目，中国科学院国防科技创新基金项目面上基金项目，工信部重点科研项目，北京市科委重点课题 |
| |
| 摘 要： | 设计了一种面向大规模嵌入式设备固件的自动化分析方法,该方法能够对固件进行自动化分析,提取其文件系统、操作系统、中央处理器指令架构等关键信息.针对固件解码成功的自动化判定难题,提出了一种基于分类回归树的固件解码状态检测算法,并选取收集的6 160个固件和固件自动化解码后得到的1 823个可反汇编二进制文件作为样本进行实验.实验结果表明,该算法相对其他分类器具有更好的分类效果,其分类准确率、召回率均在96％以上.
|
| 关 键 词： | 嵌入式设备固件 分类回归树 状态检测 |
An Automated Analysis Method for Large-Scale Embedded Device Firmware |
| |
| Abstract: | An automated analysis method for large-scale embedded firmware was designed to get device information,such as file system type,operating system type,or CPU instruction set.But it was difficult to know whether it was decoded successfully during automated firmware analysis.To solve this problem,a firmware decoding status detection method was proposed based on classification and regression tree algorithm.The dataset contained 6 160 firmware samples and 1 823 disassembled binary files that were collected from firmware decoding.The experiments conducted on the dataset demonstrated that the proposed method had a considerable performance comparing with other classifiers,whose precision and recall rate are both above 96％. |
| |
| Keywords: | embedded device firmware classification and regression tree status detection |
| 本文献已被 万方数据 等数据库收录！ |
|
