计算机工程与应用2019，Vol.55Issue(22)：60-68,179,10.DOI:10.3778/j.issn.1002-8331.1904-0188
HA2:层次化的物联网感知设备固件异常分析技术
HA2:Hierarchical Anomaly Analysis Technology for IoT Sensing Device Firmware
摘要
Abstract
The bottom layer of the Internet of Things(IoT)usually contains a large number of sensing terminals, which are the foundation of IoT application and services. However, due to the limitation on resources such as computing, storage and transmission bandwidth, it is very limited to be available when the sensing device firmware program runs. As a result, when these devices are abnormal, relevant personnel often lack sufficient means to analyze them. To solve the above prob-lem, a Hierarchical Anomaly Analysis(HA2)technology for IoT sensing device firmware is proposed. The method is based on the static structure and dynamic track characteristics of the IoT sensor node program. With the help of OCSVM and statistical inference methods, it can realize the anomaly detection at three levels, including interval, task and function, and generate the corresponding anomaly analysis report. Experiments show that compared with the existing methods, the proposed method has less storage and operation cost in collecting the characteristics of anomaly analysis. At the same time, the analysis of defects in open source database shows that the analysis report of HA2 can greatly reduce the scope of anomaly analysis and provide effective help for users to analyze and fix the anomalies.关键词
物联网设备固件/一分类支持向量机(OCSVM)/假设检验/层次化/异常分析Key words
IoT device firmware/One-Class Support Vector Machine(OCSVM)/hypothesis testing/hierarchical/anomaly analysis分类
信息技术与安全科学引用本文复制引用
马峻岩,张颖,李易,王瑾,张特..HA2:层次化的物联网感知设备固件异常分析技术[J].计算机工程与应用,2019,55(22):60-68,179,10.基金项目
国家自然科学基金(No.61402050,No.61303041) （No.61402050,No.61303041）
国家重点研发计划(No.2017YFC0804806) （No.2017YFC0804806）
高等学校学科创新引智(111计划)项目(No.B14043) （111计划）
陕西省重点研发计划(No.2018ZDCXL-GY-05-01) （No.2018ZDCXL-GY-05-01）
中央高校基本科研业务费项目(No.300102249305). （No.300102249305）
