Security of firmware update mechanisms within SOHO routers
Purpose of this thesis was to analyze the state of firmware update security within SOHO (Small Office/Home Office) routers as anecdotal claims of insecure routers are common and firmware updates are critical to the overall device security. A case study was performed, where 12 devices were analyzed using network and firmware level analysis. Analyzed devices were found to have trivial vulnerabilities where Man-In-The-Middle attacker could deny further updates or install malicious firmware through the network update mechanism. Results highlight the need for large-scale security analysis of similar devices and more secure development practices.
Keywords
Metadata
Show full item recordCollections
- Pro gradu -tutkielmat [29829]
License
Related items
Showing items with similar title or keywords.
-
Insecure Firmware and Wireless Technologies as “Achilles’ Heel” in Cybersecurity of Cyber-Physical Systems
Costin, Andrei (Springer, 2022)In this chapter, we analyze cybersecurity weaknesses in three use-cases of real-world cyber-physical systems: transportation (aviation), remote explosives and robotic weapons (fireworks pyrotechnics), and physical security ... -
Self-management in distributed systems : smart adaptive framework for pervasive computing environments
Nagy, Michal (University of Jyväskylä, 2013) -
On the Future of the Internet of Things : Revisiting the Roadmap to the Programmable World
Taivalsaari, Antero; Mikkonen, Tommi (IEEE, 2024)Nearly ten years ago, we wrote a paper that presented a roadmap to the Programmable World in the context of the Internet of Things. In that paper, we defined a future roadmap that started from cloud-centric, data-centric ... -
Towards Seamless IoT Device-Edge-Cloud Continuum : Software Architecture Options of IoT Devices Revisited
Taivalsaari, Antero; Mikkonen, Tommi; Pautasso, Cesare (Springer, 2022)In this paper we revisit a taxonomy of client-side IoT software architectures that we presented a few years ago. We note that the emergence of inexpensive AI/ML hardware and new communication technologies are broadening ... -
Lääkintälaitteiden kyberturvallisuuden standardit ja testaaminen
Kallio, Heli (2017)Tietotekniikkaa sisältävät lääkintälaitteet pitävät meidät hengissä, jos kehomme pettää. Esimerkiksi ostoskeskuksissa olevat älykkäät defibrillaattorit antavat maallikoillekin mahdollisuuden antaa tehokasta ensiapua ...