The development of the Internet of Things(IoT)has brought convenience to people’s lives,but it also introduces significant security risks.Due to the limitations of IoT devices themselves and the challenges of re-host...The development of the Internet of Things(IoT)has brought convenience to people’s lives,but it also introduces significant security risks.Due to the limitations of IoT devices themselves and the challenges of re-hosting technology,existing fuzzing for IoT devices is mainly conducted through black-box methods,which lack effective execution feedback and are blind.Meanwhile,the existing static methods mainly rely on taint analysis,which has high overhead and high false alarm rates.We propose a new directed fuzz testing method for detecting bugs in web service programs of IoT devices,which can test IoT devices more quickly and efficiently.Specifically,we identify external input entry points using multiple features.Then we quickly find sensitive targets and paths affected by external input sources based on sensitive data flow analysis of decompiled code,treating them as testing objects.Finally,we performa directed fuzzing test.We use debugging interfaces to collect execution feedback and guide the programto reach sensitive targets based on programpruning techniques.We have implemented a prototype system,AntDFuzz,and evaluated it on firmware fromten devices across five well-known manufacturers.We discovered twelve potential vulnerabilities,seven of which were confirmed and assigned bug id by China National Vulnerability Database(CNVD).The results show that our approach has the ability to find unknown bugs in real devices and is more efficient compared to existing tools.展开更多
This study employs an N-carboxyanhydride ring-opening polymerization(NCA ROP)signal amplification strategy to construct a novel sensing system for the simple and rapid detection of tobacco mosaic virus RNA(tRNA).In th...This study employs an N-carboxyanhydride ring-opening polymerization(NCA ROP)signal amplification strategy to construct a novel sensing system for the simple and rapid detection of tobacco mosaic virus RNA(tRNA).In the developed fluorescent biosensor,carboxylated biomagnetic beads serve as carriers for target capture based on the complementary pairing of the aptamer bases.Subsequently,NCA ROP fluorescent peptides are utilized as highly biocompatible signal carriers to achieve sensitive detection of the target.Under the optimal conditions,the biosensor exhibits a broad linear detection range from 1 pM to 10 nM,with a detection limit as low as 0.085 pM.Furthermore,the fluorescent aptamer biosensor demonstrates robust affinity and reliability in recovery experiments involving healthy R ehmannia glutinosa leaf total RNA.This work establishes a robust platform for tRNA analysis,facilitating real-time and early diagnosis of various plant viruses.展开更多
文摘The development of the Internet of Things(IoT)has brought convenience to people’s lives,but it also introduces significant security risks.Due to the limitations of IoT devices themselves and the challenges of re-hosting technology,existing fuzzing for IoT devices is mainly conducted through black-box methods,which lack effective execution feedback and are blind.Meanwhile,the existing static methods mainly rely on taint analysis,which has high overhead and high false alarm rates.We propose a new directed fuzz testing method for detecting bugs in web service programs of IoT devices,which can test IoT devices more quickly and efficiently.Specifically,we identify external input entry points using multiple features.Then we quickly find sensitive targets and paths affected by external input sources based on sensitive data flow analysis of decompiled code,treating them as testing objects.Finally,we performa directed fuzzing test.We use debugging interfaces to collect execution feedback and guide the programto reach sensitive targets based on programpruning techniques.We have implemented a prototype system,AntDFuzz,and evaluated it on firmware fromten devices across five well-known manufacturers.We discovered twelve potential vulnerabilities,seven of which were confirmed and assigned bug id by China National Vulnerability Database(CNVD).The results show that our approach has the ability to find unknown bugs in real devices and is more efficient compared to existing tools.
基金supported by the Project of tacking of key scientifi c and technical problems in Henan Province(192102310033)。
文摘This study employs an N-carboxyanhydride ring-opening polymerization(NCA ROP)signal amplification strategy to construct a novel sensing system for the simple and rapid detection of tobacco mosaic virus RNA(tRNA).In the developed fluorescent biosensor,carboxylated biomagnetic beads serve as carriers for target capture based on the complementary pairing of the aptamer bases.Subsequently,NCA ROP fluorescent peptides are utilized as highly biocompatible signal carriers to achieve sensitive detection of the target.Under the optimal conditions,the biosensor exhibits a broad linear detection range from 1 pM to 10 nM,with a detection limit as low as 0.085 pM.Furthermore,the fluorescent aptamer biosensor demonstrates robust affinity and reliability in recovery experiments involving healthy R ehmannia glutinosa leaf total RNA.This work establishes a robust platform for tRNA analysis,facilitating real-time and early diagnosis of various plant viruses.
