A quantitative analysis of the insecurity of embedded network devices: Results of a wide-area scan

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2010, Pages 97-106

  Cui, Ang ^a   Stolfo, Salvatore J ^a  

^a Columbia University ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SYSTEM FIREWALLS; IPTV; POPULATION STATISTICS; WIDE AREA NETWORKS; XML;

EMBEDDED DEVICE; EMBEDDED NETWORK; GLOBAL SCALE; LONGITUDINAL STUDY; LOW BOUND; NETWORK DEVICES; PRIVATE ENTERPRISE; PUBLICLY ACCESSIBLE; SATELLITE PROVIDERS; VIDEO-CONFERENCING;

VIDEO CONFERENCING;

EID: 78751540482     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1920261.1920276     Document Type: Conference Paper

References (20)

1. kaiten.c IRC DDOS Bot. http://packetstormsecurity.nl/irc/kaiten.c.
2. MaxMind GeoIP. http://www.maxmind.com/app/ip-location.
3. Embedded Device Vulnerability Assessment Initiative. http://www.hacktory. cs.columbia.edu.
4. IronKey Personal D200. http://www.ironkey.com/personal-solutions.
5. The End of Your Internet: Malware for Home Routers, 2008. http://data.nicenamecrew.com/papers/malwareforrouters/paper.txt.
6. Network Bluepill. Dronebl.org, 2008. http://www.dronebl.org/blog/8.
7. Psyb0t' worm infects linksys, netgear home routers, modems. ZDNET, 2009. http://blogs.zdnet.com/BTL/?p=15197.
8. Scan of internet uncovers thousands of vulnerable embedded devices. http://www.wired.com/threatlevel/2009/10/vulnerable-devices/, 2009.
9. Time warner cable exposes 65,000 customer routers to remote hacks. http://www.wired.com/threatlevel/2009/10/time-warner-cable/, 2009.
10. P. Akritidis, W. Y. Chin, V. T. Lam, S. Sidiroglou, and K. G. Anagnostakis. Proximity breeds danger: Emerging threats in metro-area wireless networks. In In Proceedings of the 16 th USENIX Security Symposium, pages 323-338, 2007.
11. Hristo Bojinov, Elie Bursztein, Eric Lovett, and Dan Boneh. Embedded management interfaces: Emerging massive insecurity. Black Hat USA, 2009, 2009.
12. Ang Cui and Salvatore J. Stolfo. Generic rootkit detection for embedded devices using parasitic embedded machines. Columbia University, New York. cucs-009-10., 2010.
13. Felix "FX" Linder. Cisco Vulnerabilities. In In BlackHat USA, 2003.
14. Felix "FX" Linder. Cisco IOS Router Exploitation. In In BlackHat USA, 2009.
15. Andrea M. Matwyshyn, Angelos D. Keromytis Ang Cui, and Salvatore J. Stolfo. Ethics in security vulnerability research. IEEE Security and Privacy (Vol. 8, No. 2), 2010.
16. Michael Lynn. Cisco IOS Shellcode, 2005. In BlackHat USA.
17. Sebastian Muniz. Killing the myth of Cisco IOS rootkits: DIK, 2008. In EUSecWest.
18. Petko D. Petkov. Router Hacking Challenge, 2008. http://www.gnucitizen. org/blog/router-hacking-challenge/.
19. Patrick Traynor, Kevin R. B. Butler, William Enck, Patrick McDaniel, and Kevin Borders. malnets: large-scale malicious networks ia compromised wireless access points. Security and Communication Networks, 3(2-3):102-113, 2010.
20. Alex Tsow. Phishing with consumer electronics - malicious home routers. In Tim Finin, Lalana Kagal, and Daniel Olmedilla, editors, MTW, volume 190 of CEUR Workshop Proceedings. CEUR-WS.org, 2006.