针对Mirai僵尸网络测试和强化IoT设备
Testing And Hardening IoT Devices Against the Mirai Botnet
摘要：
绝大多数廉价的物联网（IoT）设备都是全新的，并且配置了开箱即用的设置，没有得到制造商的适当保护，并且容易受到潜伏在互联网上的现有恶意软件的攻击。其中包括Mirai僵尸网络，其源代码已泄露给全世界，允许任何恶意行为者配置和释放它。未安全有效地使用的软件资产组合使消费者面临全面妥协。我们使用Mirai库配置并攻击了4个不同的物联网设备。我们的实验得出结论，四个设备中有三个容易受到Mirai恶意软件的攻击，并且在使用默认配置部署时受到感染。这表明，原始的安全配置不足以为消费者提供可接受的保护级别，使他们的设备暴露和脆弱。通过分析Mirai库及其攻击向量，我们能够确定适当的设备配置对策，以加强设备对抗此僵尸网络，并通过实验成功验证。
英文摘要：
A large majority of cheap Internet of Things (IoT) devices that arrive brand new, and are configured with out-of-the-box settings, are not being properly secured by the manufactures, and are vulnerable to existing malware lurking on the Internet. Among them is the Mirai botnet which has had its source code leaked to the world, allowing any malicious actor to configure and unleash it. A combination of software assets not being utilised safely and effectively are exposing consumers to a full compromise. We configured and attacked 4 different IoT devices using the Mirai libraries. Our experiments concluded that three out of the four devices were vulnerable to the Mirai malware and became infected when deployed using their default configuration. This demonstrates that the original security configurations are not sufficient to provide acceptable levels of protection for consumers, leaving their devices exposed and vulnerable. By analysing the Mirai libraries and its attack vectors, we were able to determine appropriate device configuration countermeasures to harden the devices against this botnet, which were successfully validated through experimentation.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
