arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2201.07462cs.CR
收藏

把你的东西放在无人看管的地方可不是开玩笑的!内存总线监听和开放式PCI接口利用

Leaving Your Things Unattended is No Joke! Memory Bus Snooping and Open Debug Interface Exploits

Yang Su, Damith C. Ranasinghe

摘要:

物联网设备被普通人群广泛采用。今天的人们比以往任何时候都更加紧密地联系在一起。这些设备在竞争激烈的市场中的广泛使用和低成本驱动的构造使得互联网连接的设备成为恶意行为者的更容易和有吸引力的目标。本文以教程格式在两个案例研究中演示了对物联网设备的非侵入性物理攻击。这项研究的重点是演示:i)开发调试接口,通常在制造后开放; ii)开发暴露的内存总线。我们说明了一个人可以用入门级的知识,廉价的设备和有限的时间(8到25分钟)进行这种攻击。

英文摘要:

Internet of Things devices are widely adopted by the general population. People today are more connected than ever before. The widespread use and low-cost driven construction of these devices in a competitive marketplace render Internet-connected devices an easier and attractive target for malicious actors. This paper demonstrates non-invasive physical attacks against IoT devices in two case studies in a tutorial style format. The study focuses on demonstrating the: i)exploitation of debug interfaces, often left open after manufacture; and ii)the exploitation of exposed memory buses. We illustrate a person could commit such attacks with entry-level knowledge, inexpensive equipment, and limited time (in 8 to 25 minutes).

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑