摘要
随着智能家居技术的广泛应用,智能家居作为物联网技术在家居领域的典型应用得到了迅速的发展。然而,智能家居设备中存在的安全缺陷将直接威胁用户的隐私安全甚至是生命财产安全,因此,针对智能家居的安全分析技术逐渐成为当前研究热点。在介绍了智能家居概念及其系统组成的基础上,分析了智能家居系统安全需求、安全风险以及风险来源,从固件获取及解析、静态分析、动态分析以及同源性分析等方面介绍了智能家居设备安全分析常规的流程及方法。
With the wide application of smart home technology,smart home,as a typical application of Internet of things technology in the field of home,develops rapidly.However,the security defects existing in smart home devices will directly threaten the privacy security of users and even the safety of life and property.Therefore,the security analysis technology for smart home has gradually become a hot issue.Based on the introduction of the concept of smart home and its system composition,this paper analyzes the security requirements,security risks and risk sources of smart home system.Finally,it describes the conventional processes and methods of security analysis of smart home devices from the aspects of firmware acquisition and analysis,static analysis,dynamic analysis and homology analysis.
作者
韩志军
胡华鹏
孙凯
HAN Zhijun;HU Huapeng;SUN Kai(No.30 Institute of CETC,Chengdu Sichuan 610041,China)
出处
《信息安全与通信保密》
2022年第6期144-153,共10页
Information Security and Communications Privacy
关键词
物联网
智能家居设备
安全缺陷
固件
安全分析
IoT
smart home device
security vulnerability
firmware
security analysis
