SEESAW: a tool for detecting memory vulnerabilities in protocol stack implementations
SEESAW: a tool for detecting memory vulnerabilities in protocol stack implementations
复制标题
SEESAW：用于检测协议栈实现中内存漏洞的工具
DOI：
10.1145/3487212.3487345
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Yavuz, Tuba
中科院分区：
文献类型：
--
作者：
Fowze, Farhaan;Yavuz, Tuba
随着物联网(IoT)设备数量激增，深入了解IoT攻击面已成为应对安全和可靠性风险的关键。物联网设备和组件执行各种通信协议的实现。协议栈实施中的漏洞构成了物联网攻击面的重要组成部分。因此，发现此类实施中的内存错误对于提高物联网的安全性和可靠性至关重要。本文提出了一个建立在静态分析工具和符号执行引擎之上的工具--SESAW，以实现对协议栈实现的可扩展分析。SESAW利用分析的代码库的API模型来执行组件级别的分析。拉锯法已经应用于Linux内核中的USB和蓝牙模块。与基线符号执行相比，跷跷板可以以更具伸缩性的方式重现已知的内存漏洞。
As the number of Internet of Things (IoT) devices proliferate, an in-depth understanding of the IoT attack surface has become quintessential for dealing with the security and reliability risks. IoT devices and components execute implementations of various communication protocols. Vulnerabilities in the protocol stack implementations form an important part of the IoT attack surface. Therefore, finding memory errors in such implementations is essential for improving the IoT security and reliability. This paper presents a tool, SEESAW, that is built on top of a static analysis tool and a symbolic execution engine to achieve scalable analysis of protocol stack implementations. SEESAW leverages the API model of the analyzed code base to perform component-level analysis. SEESAW has been applied to the USB and Bluetooth modules within the Linux kernel. SEESAW can reproduce known memory vulnerabilities in a more scalable way compared to baseline symbolic execution.