| 基于数字证书识别及校验的物联网固件安全检测系统的设计与实现 |
| |
| 引用本文： | 基于数字证书识别及校验的物联网固件安全检测系统的设计与实现.基于数字证书识别及校验的物联网固件安全检测系统的设计与实现[J].山东科学,2010,33(4):131-135. |
| |
| 作者姓名： | 基于数字证书识别及校验的物联网固件安全检测系统的设计与实现 |
| |
| 作者单位： | 齐鲁工业大学（山东省科学院） 山东省计算中心（国家超级计算济南中心）山东省计算机网络重点实验室，山东 济南 250014; |
| |
| 基金项目： | 山东省重大科技创新工程（2019JZZY020128）；山东省科学院基础研究基金（科基合字（2018）12号—16号）；山东省科学院创新工程专项 |
| |
| 摘 要： | 设计并实现了一种基于数字证书识别及校验的物联网固件安全检测系统。针对下载的不同厂商的固件，研究了在固件中识别公钥、私钥、签名等数字证书文件的方法，设计了对证书内容进行有效性校验的模型，构建了证书管理数据库，在此基础上实现了完整的固件安全检测系统。实验结果表明，该系统可对固件中的证书进行高效识别和有效性校验，并对样本外存在数字证书安全缺陷的固件进行了成功检测。
|
| 关 键 词： | 物联网 固件 数字证书 检测 |
| 收稿时间： | 2020-01-10 |
Design and implementation of Internet of Things firmware security detection system based on digital certificate identification and verification |
| |
| MU Chao,YANG Ming,YANG Ming-zhao,WANG Biao,WANG Ji-zhi.Design and implementation of Internet of Things firmware security detection system based on digital certificate identification and verification[J].Shandong Science,2010,33(4):131-135. |
| |
| Authors: | MU Chao YANG Ming YANG Ming-zhao WANG Biao WANG Ji-zhi |
| |
| Affiliation: | Shandong Provincial Key Laboratory of Computer Networks, Shandong Computer Science Center (National Supercomputer Center in Jinan),Qilu University of Technology (Shandong Academy of Sciences), Jinan 250014, China; |
| |
| Abstract: | A security detection system for Internet of Things firmware based on digital certificate identification and verification is designed and implemented. For the firmware download from different vendors, this paper studies the method of identifying digital certificate files such as public key, private key and signature file in firmware, designs a model to verify the validity of certificate contents, builds a certificate management database, and implements a complete firmware security detection system. The experimental results show that the system can effectively identify and validate the certificates in the firmware, and successfully detect the firmware with security defects of digital certificates outside the samples. |
| |
| Keywords: | Internet of Things firmware digital certificate detection |
|
| 点击此处可从《山东科学》浏览原始摘要信息 |
|
点击此处可从《山东科学》下载全文 |
