Fuzzy Test Guidance Technology for Power Internet of Things Firmware Vulnerability Detection

The power Internet of Things has become an important part of the energy Internet, and firmware is its enabling software. The existence of firmware vulnerability is one of the fundamental reasons for smart grid to face network attacks, so detecting firmware vulnerability is the key to smart grid security. Fuzzy testing is one of the hotspots of cyberspace security research, but for firmware vulnerability detection, there are still some problems in current fuzzy testing technology, such as poor compatibility of heterogeneous firmware program simulation, firmware state space explosion and blind testing, which lead to poor efficiency and effectiveness of vulnerability detection. In order to solve the above problems, this paper proposes the technology of static instruction translation and program reconfiguration for heterogeneous firmware programs, and reconstructs heterogeneous firmware programs into cross platform executable programs through intermediate language translation. At the same time, a fuzzy test method based on static targeting model and dynamic symbol execution is proposed to further improve the guidance, intelligence, accuracy and automation of firmware vulnerability fuzzy test technology.