Research on Intelligent Reverse Analysis Technology of Firmware of Internet of Things

With the rapid development of the IoT, the number of connected devices and the frequency of attacks are also increasing. For the uniqueness of technology, various firmware manufacturers use various file systems and nonstandard compression algorithms to make the existing firmware scanning tools cannot effectively identify and extract important information from firmware, such as the kernel, file system and so on, which make it difficult to perform further firmware security analysis. In order to scan and analyze the real world device firmware effectively, we propose a scalable and intelligent firmware analysis technology. This technology analyzes more than forty firmware file system formats, summarizes and extracts file system features, and builds a firmware feature library. This technology can meet the needs of firmware scanning and security analysis of mainstream devices in the market. In order to verify the effectiveness of the proposed method, we test on more than 100 kinds of real device firmware. Pass our test, the improved tool can effectively analyze more than forty file systems, greatly improving the ability of the firmware reverse analysis tool.