物联网安全漏洞态势感知关键技术研究

Internet of Things (IoT) becomes the new driver of information technology revolution after the computer and the Internet. With the increase of IoT projects and industrial deployments, especially the expansion of equipment types, the surge in the number of hardware, rapid changes in hardware, firmware and system diversification, IoT faces the security threats of the unwariness of vulnerabilities situation and the difficult of security enhancements. ..The key technology in the security situational awareness is the analysis of heterogeneous equipment, operating system, communication protocol, typical application, etc. Therefore, firstly, this project aims at the complex environment of the IoT, studies mechanism of the device vulnerabilities, the intelligent extraction and abstraction model of the hard drivers and firmwares. Secondly, it will build a security vulnerability database, studies the program analysis and vulnerability mining technologies, and design detection approach to cover multi-type vulnerabilities. Thirdly, it also will research security situational awareness theory, build IoT vulnerability situation awareness platform and security protection system. Finally, it is expected to achieve the IoT vulnerability perception and security protection...This project is expected to achieve valuable results in the aspects of vulnerability mechanism, program analysis, detection method, vulnerability situational awareness and protection. It is also excepted to break through the safety and technical barriers to the security of the IoT, which has Has important strategic significance to the healthy development of IoT industry.

物联网凭借智慧互联的理念成为继计算机和互联网之后新的信息技术革命的推动力。随着物联网示范项目增加和产业落地，特别是设备类型扩大、数量激增、硬件快速更迭、固件与系统多样化，使其面临着安全状态难以掌握、安全漏洞难以感知防护等前所未有的安全威胁。.物联网安全态势研究的关键是对异构设备、操作系统、通信协议、典型应用等的程序安全性分析技术。因此，本项目针对物联网复杂环境，研究异构体系的设备漏洞机理，构建硬件驱动、固件智能提取与抽象模型；建设物联网设备安全漏洞库，研究程序分析及漏洞挖掘技术，发展覆盖多漏洞类型的检测方法；研究安全态势感知理论，建立物联网漏洞态势感知平台及安全防护体系，实现物联网环境的漏洞感知及安全防护。.本项目预计将在物联网环境安全漏洞机理、程序分析、检测方法、漏洞态势感知及防护体系等方面取得成果，突破安全可靠技术壁垒，对保障物联网生态安全及物联网产业健康发展具有重要的战略意义。

随着物联网示范项目增加和产业落地，其面临着安全状态难以掌握、安全漏洞难以感知防护等前所未有的安全威胁。物联网安全态势研究的关键是对异构设备、操作系统、通信协议、典型应用等的程序安全性分析技术。因此，本项目针对物联网复杂环境，从物联网异构体系下的漏洞机理分析、面向物联网设备的硬件驱动、固件智能提取、物联网漏洞库建设与漏洞建模研究、物联网环境下的漏洞分析检测方法、物联网安全漏洞态势感知及基于漏洞态势感知的物联网安全防护体系等方面进行研究。提出了基于知识图谱的物联网漏洞库管理机制，创新的设计实现物联网漏洞知识本体模型，通过自然语言处理技术自动化的实现物联网漏洞库实时更新与数据填充，结合树和神经网络实现不依赖专家知识的漏洞特征建模方式，为物联网漏洞感知、物联网漏洞检测等下游任务提供坚实的数据基础。基于物联网安全漏洞库，利用漏洞特征及物联网安全漏洞态势感知技术实现物联网安全防护体系架构。. 相关成果国内外重要物会议上发表/录用论文共计18篇，包含CCF-A类2篇 ，中文CCF-A文章6篇， CCF-B类1篇，CCF-C类1篇，SCI 收录 2 篇，EI收录16篇；申请发明专利13项，已授权8项；获得软件著作权12项，参与撰写标准7项，发现并提交安全漏洞82个，培养博士生、硕士生共计11名。共计向CNVD、CNNVD提交软件安全漏洞82个， Linux kernel累计合并补丁103个。相关成果进行了成果转化并得到了应用。物联网漏洞态势感知技术依托于底层物联网漏洞，覆盖多个安全漏洞情报源，实时与检测环境进行关联。该技术为华为OpenEuler进行实时漏洞感知，同时能够在代码托管平台自动提交ISSUE，辅助安全人员快速识别漏洞威胁，高效实现漏洞处置，实现创新型人机协同模式。此外，IoT固件分析技术由中科微澜进行成果转化和技术集成，形成了庖丁固件分析系统，该系统可实现固件的自动分析及安全检测，捕捉固件弱密码、弱口令等安全威胁，目前已用于支撑多家重点单位进行安全保障工作。