Abstract:To reduce the development costs, IoT vendors tend to construct IoT kernels by customizing the Linux kernel. Code pruning is common in this customization process. However, due to the intrinsic complexity of the Linux kernel and the lack of long-term effective maintenance, IoT vendors may mistakenly delete necessary security operations in the pruning process, which leads to various bugs such as memory leakage and NULL pointer dereference. Yet detecting bugs caused by code pruning in IoT kernels is difficult. Specifically, (1) a significant structural change makes precisely locating the deleted security operations (DSO ) difficult, and (2) inferring the security impact of a DSO is not trivial since it requires complex semantic understanding, including the developing logic and the context of the corresponding IoT kernel. In this paper, we present CPscan, a system for automatically detecting bugs caused by code pruning in IoT kernels. First, using a new graph-based approach that iteratively conducts a structure-aware basic block matching, CPscan can precisely and efficiently identify theDSOs in IoT kernels. Then, CPscan infers the security impact of a DSO by comparing the bounded use chains (where and how a variable is used within potentially influenced code segments) of the security-critical variable associated with it. Specifically, CPscan reports the deletion of a security operation as vulnerable if the bounded use chain of the associated security-critical variable remains the same before and after the deletion. This is because the unchanged uses of a security-critical variable likely need the security operation, and removing it may have security impacts. The experimental results on 28 IoT kernels from 10 popular IoT vendors show that CPscan is able to identify 3,193DSO s and detect 114 new bugs with a reasonably low false-positive rate. Many such bugs tend to have a long latent period (up to 9 years and 5 months). We believe CPscan paves a way for eliminating the bugs introduced by code pruning in IoT kernels. We will open-source CPscan to facilitate further research.

Cloning Vulnerability Detection In Driver Layer Of Iot Devices

On the Effectiveness of Clone Detection for Detecting IoT-related Vulnerable Clones

Code Clone Detection: A Literature Review

You Can Clone but You Cannot Hide: A Survey of Clone Prevention and Detection for RFID

Clone detection in 5G-enabled social IoT system using graph semantics and deep learning model

Research on code clone analysis approach

Software Vulnerability Code Clone Detection Method Based on Characteristic Metrics

Toward Fast and Deterministic Clone Detection for Large Anonymous RFID Systems.

DroidCC: A Scalable Clone Detection Approach for Android Applications to Detect Similarity at Source Code Level.

Real-Time Detection of Clone Attacks in Wireless Sensor Networks.

Unreconciled Collisions Uncover Cloning Attacks in Anonymous RFID Systems

One Exploit to Rule them All? On the Security of Drop-in Replacement and Counterfeit Microcontrollers

Collective Memory for Detecting Nonconcurrent Clones: A Localized Approach for Global Topology and Identity Tracing in IoT Networks

Machine Learning based IoT Edge Node Security Attack and Countermeasures

Staged Method of Code Similarity Analysis for Firmware Vulnerability Detection

CPscan: Detecting Bugs Caused by Code Pruning in IoT Kernels

Combating Tag Cloning with COTS RFID Devices

Cyber Vulnerability Intelligence for Internet of Things Binary

On The Performance Of Tdd And Ldd Based Clone Attack Detection In Mobile Ad Hoc Networks

Detection System of Clone Attacks based on RSSI in Wireless Sensor Networks.

Are our clone detectors good enough? An empirical study of code effects by obfuscation