Authors:
Geancarlo Palavicini Jr
;
Josiah Bryan
;
Eaven Sheets
;
Megan Kline
and
John San Miguel
Affiliation:
SPAWAR Systems Center Pacific, United States
Keyword(s):
Industrial Internet of Things, Firmware Vetting, Internet of Things, Cybersecurity, Vulnerability Research, Embedded Systems, Security, Malware, Emerging Threats, Binary Analysis, Virtualization.
Abstract:
Embedded systems and Industrial Internet of Things (IIoT) devices are rapidly increasing in number and complexity. The subset IIoT refers to Internet of Things (IoT) devices that are used in manufacturing and industrial control systems actively being connected to larger networks and the public internet. As a result, cyber-physical attacks are becoming an increasingly common tactic employed to cause economic and physical damage. This work aims to perform near automated firmware analysis on embedded systems, Industrial Control Systems (focusing on Programmable Logic Controllers), Industrial Internet of Things devices, and other cyber-physical systems in search of malicious functionality. This paper explores the use of binary analysis tools such as angr, the cyber reasoning system (CRS) ’Mechanical Phish’, American Fuzzy Lop (AFL), as well as virtualization tools such as OpenPLC, firmadyne, and QEMU to uncover hidden vulnerabilities, find ways to mitigate those vulnerabilities, and enha
nce the security posture of the Industrial Internet of Things.
(More)