Tools and Techniques to Perform Comprehensive Security Assessments

点击翻译按钮获取中文摘要

As the age of the Internet of Things ("IoT") dawns, we face a growing legion of embedded, intelligent, and internet-capable devices. Although these devices provide significant utility for end-users, they also come with the potential of significant security flaws, which can exploit the vulnerabilities in IoT devices. The intellectual property contained in our patent offers a solution to the potential security flaws in IoT devices. In lab tests, our tool and method can check for correspondence between source code and binaries with 75% accuracy, thus significantly limiting the threat of and risk of a security compromise resulting from a mismatched binary. Our techniques have proven to be more effective than existing tools at findings vulnerabilities. So far, our techniques have discovered several vulnerabilities during testing, including previously unknown vulnerabilities in popular web applications and Android devices. Compared to existing tools, ours require far less effort on the part of the end user. All vulnerabilities within a particular device were uncovered using our product by single graduate student. In comparison, using existing tools in the marketplace would require a large team to uncover the same vulnerabilities.