mirror of
https://github.com/LCTT/TranslateProject.git
synced 2026-08-26 04:13:30 +08:00
Merge pull request #25499 from tendertime/master
[提交译文][tech]:20220502Tools You Can Use for the Security Audit of IoT Devices
This commit is contained in:
Xingyu.Wang
GitHub
@@ -1,119 +0,0 @@
|
||||
[#]: subject: "Tools You Can Use for the Security Audit of IoT Devices"
|
||||
[#]: via: "https://www.opensourceforu.com/2022/05/tools-you-can-use-for-the-security-audit-of-iot-devices/"
|
||||
[#]: author: "Dr Kumar Gaurav https://www.opensourceforu.com/author/dr-gaurav-kumar/"
|
||||
[#]: collector: "lkxed"
|
||||
[#]: translator: "tendertime "
|
||||
[#]: reviewer: " "
|
||||
[#]: publisher: " "
|
||||
[#]: url: " "
|
||||
|
||||
Tools You Can Use for the Security Audit of IoT Devices
|
||||
======
|
||||
Digital transformation involves data-driven decision making with the integration of artificial intelligence (AI). Important data is broadcast through Internet of Things (IoT) devices and smart gadgets. These IoT devices are very often insecure and have vulnerabilities as they lack built-in security mechanisms that can protect them from potential cyber attacks. There are quite a few open source tools that can be used to carry out security audits, lowering the risk of such attacks.
|
||||
|
||||
![Screenshot 2022-05-02 154427][1]
|
||||
|
||||
cyber attackers and sniffers can access sensitive data from IoT devices and use that information to launch attacks on other linked systems. According to anti-virus and computer security service company Kaspersky, the number of IoT hacks more than quadrupled year-on-year in 2021.
|
||||
|
||||
For the most part, hackers gained access to Internet of Things (IoT) networks by using the Telnet protocol, which provides a command-line interface for communicating with devices or servers over the Internet. More than 58 per cent of IoT intrusions, as per research reports, used assorted protocols that aimed to mine cryptocurrencies, shut down systems via distributed denial-of-service (DDoS) attacks, or steal confidential data.
|
||||
|
||||
Because of the increased time spent using IoT devices at home during the pandemic, the security risks have increased. Many of these gadgets, whether used for personal or business purposes, lack basic security measures. New technologies like artificial intelligence and edge computing have also complicated the landscape of cyber and data security. As the popularity of smart gadgets grew, so did the number of attacks, according to Dan Demeter, a Kaspersky security analyst.
|
||||
|
||||
![Key components in PENIOT][2]
|
||||
|
||||
### The need for security audit in IoT gadgets
|
||||
|
||||
Cyber attacks are evolving all the time, and businesses and government agencies are employing ever more sophisticated cyber security measures to guard their applications and infrastructure from online attacks. The global penetration testing market is expected to grow from US$ 1.6 billion in 2021 to US$ 3.0 billion by 2026, at a CAGR of 13.8 per cent between 2021 and 2026.
|
||||
|
||||
Penetration testing on IoT devices is a hot topic and there is huge research in this segment. Even with a ‘security by design’ approach, pen testing is vital to identify true security dangers and take the appropriate precautions.
|
||||
|
||||
Key segments and protocols in IoT deployment where security and privacy is required are:
|
||||
|
||||
* Constraint application protocol (CoAP)
|
||||
* Bluetooth low energy (BLE)
|
||||
* Advanced message queuing protocol (AMQP)
|
||||
* Message queuing telemetry transport (MQTT)
|
||||
|
||||
For an attacker to get access to a connected device, there are several possible entry points. At the time of an IoT pen test (or security audit), the complete IoT scenario and ecosystem is tested. This encompasses everything from the individual layer and the embedded software, to the communication protocols and the server. Tests of servers, online interfaces, and mobile apps are not unique to IoT, but are crucial since they cover areas with a high potential for failure. Vulnerabilities in IoT are the focus of electrical, embedded software, and communication protocol testing.
|
||||
|
||||
The following tests are run during a connected device’s security assessment. These are done using different high performance penetration testing and security audit tools against vulnerabilities:
|
||||
|
||||
* Tests for exploitation and manipulation in the communication ports
|
||||
* IoT sniffing by capture and analysis of radio signals
|
||||
* Detection of interfaces or backdoors
|
||||
* Tests for buffer overflow
|
||||
* Tests for breaking of passwords
|
||||
* Debugging
|
||||
* Cryptographic analysis
|
||||
* Manipulation in firmware tests
|
||||
* Reverse engineering
|
||||
* Memory dumps
|
||||
|
||||
![][3]
|
||||
|
||||
### Open source tools for the security audit of IoT devices
|
||||
|
||||
IoT devices are becoming more and more commonplace in our daily lives. A few examples of such devices are smart bicycles, fitness trackers, medical sensors, smart locks, and linked factories. All of these devices and gadgets can be secured against cyber attacks using open source tools, some of which are briefly discussed here.
|
||||
|
||||
#### PENIOT
|
||||
|
||||
https://github.com/yakuza8/peniot
|
||||
|
||||
PENIOT is an IoT penetration testing tool that enables security audit teams to test and breach the devices with various security threats by exploiting their connectivity. There are both active and passive security threats that can be tested. It is possible to carry out active security attacks, such as altering system resources, replaying legitimate communication units and so on, after determining the target device and the relevant information (or parameters). Passive security threats, such as breaking the confidentiality of sensitive data or gaining access to network traffic analysis, can also be analysed.
|
||||
|
||||
#### Objection
|
||||
|
||||
https://github.com/sensepost/objection
|
||||
|
||||
Objection is a tool for the detailed analysis and security audit of the Android and iOS apps used in the IoT environment.
|
||||
|
||||
Nowadays, a number of smart gadgets and devices are using Android and iOS platforms which can be analysed with detailed logs and security audit reports, using this tool.
|
||||
|
||||
#### Routersploit
|
||||
|
||||
https://github.com/threat9/routersploit
|
||||
|
||||
This powerful open source exploitation framework for embedded devices has multiple features and modules for penetration testing and security audit:
|
||||
|
||||
* Exploits – vulnerabilities evaluation
|
||||
* Creds – testing of network services and credentials
|
||||
* Scanners – detailed security audit of target
|
||||
* Payloads – generation of payloads and injection key points
|
||||
* Generic – performing and testing of assaults
|
||||
|
||||
#### Wireshark
|
||||
|
||||
https://www.wireshark.org
|
||||
|
||||
Wireshark is a free network protocol analyser with a lot of features. Various protocols, including MQTT, are used by IoT devices to communicate and these can be analysed effectively. Security rules are configured according to the protocol and the traffic is examined in order to discover any weaknesses. A network packet analyser is accessible through the command line using tcpdump. Such tools are used to examine data packets exchanged between IoT devices and networks.
|
||||
|
||||
#### Binwalk
|
||||
|
||||
https://www.kali.org/tools/binwalk
|
||||
|
||||
Binwalk is a tool for reversing the design of hardware. It is one of the key components in Kali Linux that is used for penetration testing, server fingerprinting, security audit and forensic applications.
|
||||
|
||||
#### Firmwalker
|
||||
|
||||
https://github.com/craigz28/firmwalker
|
||||
|
||||
Firmwalker is a free and open source tool for searching and scanning the firmware file system, irrespective of whether it is extracted or mounted. A detailed security audit can be done using this tool.
|
||||
|
||||
In the era of Internet of Things (IoT) and Internet of Everything (IoE), there is a need to devise and use high performance toolkits for penetration testing and security audits. As the number of IoT devices grows, so do the security risks. Free and open source toolkits and software suites should be customised according to recent protocols and dynamic traffic so that higher levels of security and privacy can be enforced in IoT and IoE deployments.
|
||||
|
||||
--------------------------------------------------------------------------------
|
||||
|
||||
via: https://www.opensourceforu.com/2022/05/tools-you-can-use-for-the-security-audit-of-iot-devices/
|
||||
|
||||
作者：[Dr Kumar Gaurav][a]
|
||||
选题：[lkxed][b]
|
||||
译者：[译者ID](https://github.com/译者ID)
|
||||
校对：[校对者ID](https://github.com/校对者ID)
|
||||
|
||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
|
||||
|
||||
[a]: https://www.opensourceforu.com/author/dr-gaurav-kumar/
|
||||
[b]: https://github.com/lkxed
|
||||
[1]: https://www.opensourceforu.com/wp-content/uploads/2022/03/Screenshot-2022-05-02-154427-696x422.png
|
||||
[2]: https://www.opensourceforu.com/wp-content/uploads/2022/03/Figure-1-Key-components-in-PENIOT.jpg
|
||||
[3]: https://www.opensourceforu.com/wp-content/uploads/2022/03/Screenshot-2022-05-02-153653-590x282.png
|
||||
@@ -0,0 +1,115 @@
|
||||
[#]: subject: "Tools You Can Use for the Security Audit of IoT Devices"
|
||||
[#]: via: "https://www.opensourceforu.com/2022/05/tools-you-can-use-for-the-security-audit-of-iot-devices/"
|
||||
[#]: author: "Dr Kumar Gaurav https://www.opensourceforu.com/author/dr-gaurav-kumar/"
|
||||
[#]: collector: "lkxed"
|
||||
[#]: translator: "tendertime "
|
||||
[#]: reviewer: " "
|
||||
[#]: publisher: " "
|
||||
[#]: url: " "
|
||||
|
||||
物联网安全认证工具集锦
|
||||
======
|
||||
|
||||
数字化转型涉及数据驱动的决策与人工智能（AI）的结合。物联网（IoT）设备和小工具传播了重要的数据。由于物联网设备常常处于不安全的环境，而且由于缺乏内生安全机制的脆弱性，很难免于潜在的网络攻击。以下是一些用于实现安全认证的开源工具，可以降低此类攻击风险。
|
||||
|
||||
![Screenshot 2022-05-02 154427][1]
|
||||
|
||||
网络攻击者和嗅探器可以访问物联网设备的敏感数据，并利用这些信息对其他相关系统发起攻击。反病毒和计算机安全服务公司卡巴斯基（Kaspersky）表示，在 2021，物联网黑客数量同比增长了两倍多。
|
||||
|
||||
在很大程度上，黑客通过使用 Telnet 协议访问物联网网络，该协议为通过互联网与设备或服务器进行通信提供了命令行接口。根据研究报告，超过 58% 的物联网入侵使用各种协议以求实现挖掘加密货币、通过分布式拒绝服务（DDoS）攻击关闭系统、窃取机密数据的目的。
|
||||
由于人们在疫情期间居家使用物联网设备的时间增加，安全风险也随之上升。这些物联网小工具中的大部分无论是个人用还是商用，都缺乏基本的安全措施。人工智能和边缘计算等新技术也使网络和数据安全形势复杂化。卡巴斯基的一位安全专家 Dan Kaspersky 表示：智能小工具变得流行，攻击的数量也随之上升了。
|
||||
|
||||
![Key components in PENIOT][2]
|
||||
|
||||
### 物联网小工具的安全需要
|
||||
|
||||
网络攻击一直在进化，商业公司和政府部门都在采用越来越复杂的网络安全设施以防止他们的应用和架构免于在线攻击。全球渗透测试市场预计将从 2021 的 16 亿美元增长到 2026 年的 30 亿美元，2021 至 2026 年的复合年增长率为 13.8%。
|
||||
物联网设备的渗透测试是一个热门话题，在这一领域有大量研究。即使采用“设计安全”的方法，渗透对于识别真正的安全危险并采取适当的预防措施也是至关重要的。
|
||||
物联网部署中需要安全和隐私的关键部分和协议包括：
|
||||
|
||||
* 受限应用协议 (Constraint application protocol,CoAP)
|
||||
* 蓝牙低功耗(Bluetooth low energy，BLE)
|
||||
* 高级消息队列协议(Advanced message queuing protocol，AMQP)
|
||||
* 消息队列遥测传输(Message queuing telemetry transport，MQTT)
|
||||
|
||||
攻击者有多种可能的入口访问到联网设备。在物联网渗透测试（或安全审计）时，测试完整的物联网场景和生态。测试内容包括从单个层和嵌入式软件到通信协议和服务器的所有内容。服务器、在线接口和移动应用的测试并非物联网独有，但至关重要，因为它们涵盖了故障可能性很高的领域。物联网漏洞是电气、嵌入式软件和通信协议测试的重点。
|
||||
以下测试在评估联网设备的安全性时使用。这些测试都是使用不同的针对漏洞的高性能渗透测试和安全审计工具完成的：
|
||||
|
||||
* 通信端口中的攻击和操纵测试
|
||||
* 基于无线电信号捕获和分析的 IoT 嗅探
|
||||
* 接口和后门测试
|
||||
* 缓存溢出测试
|
||||
* 密码破解测试
|
||||
* 调试
|
||||
* 密码学分析
|
||||
* 固件操纵测试
|
||||
* 逆向工程
|
||||
* 内存泄漏
|
||||
|
||||
![][3]
|
||||
|
||||
### 物联网安全认证使用的开源工具
|
||||
|
||||
物联网设备在我们的日常生活中变得越来越普遍。智能自行车、健身跟踪器、医疗传感器、智能锁和相关工厂就是此类设备的几个例子。所有这些设备和小工具都可以使用开源工具来抵御网络攻击，本文将简要介绍其中一些工具。
|
||||
|
||||
#### PENIOT
|
||||
|
||||
https://github.com/yakuza8/peniot
|
||||
|
||||
PENIOT 是一种物联网渗透测试工具，使安全审计团队能够通过利用设备的连接来测试和破坏具有各种安全威胁的设备。测试主动和被动安全威胁都可以被测试。在确定目标设备和相关信息（或参数）后，可以进行主动安全攻击，例如改变系统资源、重放合法通信单元等。还可以分析被动安全威胁，例如破坏敏感数据的机密性或访问网络流量分析。
|
||||
|
||||
#### Objection
|
||||
|
||||
https://github.com/sensepost/objection
|
||||
Objective 是一个对物联网环境中使用的Android和iOS应用程序进行详细分析和安全审计的工具。目前许多智能小工具和设备都在使用安卓和 iOS 平台，使用该工具可以通过详细的日志和安全审计报告对这些平台进行分析。
|
||||
|
||||
#### Routersploit
|
||||
|
||||
https://github.com/threat9/routersploit
|
||||
|
||||
这个针对嵌入式设备的开源开发框架具有多个用于渗透测试和安全审计的功能和模块：
|
||||
* Exploits——漏洞评估
|
||||
* Creds–网络服务和证书的测试
|
||||
* Scanners——对目标进行详细的安全审计
|
||||
* Payloads–有效载荷和注入关键点的生成
|
||||
* Generic-执行和测试攻击
|
||||
|
||||
#### Wireshark
|
||||
|
||||
https://www.wireshark.org
|
||||
|
||||
Wireshark 是一款功能丰富的、免费的网络协议分析器。MQTT 等多种物联网协议可通过该工具实现有效分析。为了发现弱点，可以根据协议配置安全规则并检查流量。可以使用 tcpdump 通过命令行访问网络数据包分析器。此类工具用于检查物联网设备和网络之间交换的数据包。
|
||||
|
||||
#### Binwalk
|
||||
|
||||
https://www.kali.org/tools/binwalk
|
||||
|
||||
Binwalk是一种逆向硬件设计的工具。它是Kali Linux的关键组件之一，用于渗透测试、服务器指纹识别、安全审计和取证应用。
|
||||
|
||||
|
||||
#### Firmwalker
|
||||
|
||||
https://github.com/craigz28/firmwalker
|
||||
|
||||
Firmwalker是一款免费的开源工具，用于搜索和扫描固件文件系统，无论是解压缩还是挂载。可以使用此工具进行详细的安全审计。
|
||||
|
||||
在物联网和万物互联的时代，有必要设计并使用高性能工具包进行渗透测试和安全审计。随着物联网设备数量的增加，安全风险也在增加。
|
||||
|
||||
为了物联网和万物互联部署有更高级别的安全和隐私，有必要根据最新的协议和动态的流量定制化免费、开源的工具箱和软件包。
|
||||
|
||||
--------------------------------------------------------------------------------
|
||||
|
||||
via: https://www.opensourceforu.com/2022/05/tools-you-can-use-for-the-security-audit-of-iot-devices/
|
||||
|
||||
作者：[Dr Kumar Gaurav][a]
|
||||
选题：[lkxed][b]
|
||||
译者：[tendertime](https://github.com/tendertime)
|
||||
校对：[校对者ID](https://github.com/校对者ID)
|
||||
|
||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
|
||||
|
||||
[a]: https://www.opensourceforu.com/author/dr-gaurav-kumar/
|
||||
[b]: https://github.com/lkxed
|
||||
[1]: https://www.opensourceforu.com/wp-content/uploads/2022/03/Screenshot-2022-05-02-154427-696x422.png
|
||||
[2]: https://www.opensourceforu.com/wp-content/uploads/2022/03/Figure-1-Key-components-in-PENIOT.jpg
|
||||
[3]: https://www.opensourceforu.com/wp-content/uploads/2022/03/Screenshot-2022-05-02-153653-590x282.png
|
||||
Reference in New Issue
Block a user