Determining Home Users' Vulnerability to Universal Plug and Play (UPnP) Attacks
Determining Home Users' Vulnerability to Universal Plug and Play (UPnP) Attacks
复制标题
确定家庭用户对通用即插即用 (UPnP) 攻击的脆弱性
DOI：
10.1109/waina.2013.225
复制
发表时间：
2013
期刊：
影响因子：
--
通讯作者：
P. Komisarczuk
中科院分区：
文献类型：
--
作者：
Shadi Esnaashari;I. Welch;P. Komisarczuk
通用即插即用（UPnP）技术在全球范围内使用，因为它简化了设备的安装和管理。因此，许多设备现在都配备了UPnP功能。不幸的是，在家用路由器中使用UPpersonal会使路由器面临滥用的风险。例如，黑客更容易发现设备并利用设备漏洞进行恶意攻击，从而对用户造成财务或声誉损失。在本文中，我们分析了UPPERT协议及其不同的漏洞。此外，我们强调了家庭用户设备的问题有多普遍。因此，我们建议一个工具，以实现透明的健康的互联网检测UPnP启用的设备，可能会受到攻击的家庭网络。当人们的路由器受到威胁时，该工具将查找基于UPnP的攻击。该工具易于安装和使用的新手家庭用户和维护他们的隐私太。该项目的目的不仅是为用户提供一个工具，以确定其系统是否易受特定攻击，而且还衡量国家或全球一级的脆弱性普遍程度。因此，需要一个更大的框架来收集和管理来自各个用户的结果。
Universal Plug and Play (UPnP) technology is used worldwide since it has simplified the installation and management of the devices. As a result, many devices are now equipped with UPnP capabilities. Unfortunately using UPnP in home routers puts routers at risk of abuse. For example, it is easier for hackers to discover the devices and use device vulnerabilities in order to make malicious attacks to cause financial or reputation damage to the users. In this paper, we have analyzed the UPnP protocol and its different vulnerabilities. Furthermore, we have emphasized how common the problem is with the home users' devices. Hence, we suggest a tool to achieve transparency in the health of the Internet by detecting UPnP enabled devices which are likely to be attacked on home networks. The tool will look for UPnP based attacks when people's routers have been compromised. The tool is easy to install and use for novice home users and maintains their privacy too. This project aims not only to implement a tool for a user to determine whether his/her system is vulnerable to a particular attack, but also to measure the prevalence of vulnerabilities at national or global level. Thus a larger framework is required to collect and manage the results from individual users.