报告题目：On Manually Reverse Engineering Communication Protocols of Linux Based IoT Systems

报告人：凌振副教授，东南大学

报告时间：2020年12月12日21:30-22:10

报告地点：第三会议室

报告摘要：IoT security and privacy has raised grave concerns. Efforts have been made to design tools to identify and understand vulnerabilities of IoT systems. Most of the existing protocol security analysis techniques rely on a well understanding of the underlying communication protocols. In this talk, we systematically present the first manual reverse engineering framework for discovering communication protocols of embedded Linux based IoT systems. We have successfully applied our framework to reverse engineer a number of IoT systems. The discovered protocols expose severe design flaws that allow attackers to control or deny the service of victim IoT devices. Our manual reverse engineering framework is generic and can be applied to both read-only and writable Embedded Linux filesystems.

邀请人：鲁剑锋