On Manually Reverse Engineering Communication Protocols of Linux-Based IoT Systems

摘要: IoT security and privacy has raised grave concerns. Efforts have been made to design tools identify understand vulnerabilities of systems. Most the existing protocol analysis techniques rely on a well understanding underlying communication protocols. In this article, we systematically present first manual reverse engineering framework for discovering protocols embedded Linux-based We successfully applied our engineer number As an example, detailed use WeMo smart plug by extracting firmware from flash, performing static dynamic firmware, analyzing network traffic. The discovered exposes severe flaws that allow attackers control or deny service victim plugs. Our is generic can be both read-only writable Linux filesystems.