Research Of SOHO Router Backdoor Design, Detection And Defense

With the rapid development of the Internet,SOHO router has been further popularized.As the core device of home and small office network,SOHO routers with embedded backdoors are exposed to risks of packet sniffing,information tampering and privacy information exposure.Therefore,the study of SOHO router backdoor implementation technology is conducive to understanding the SOHO router backdoor technology features and design methods.The research also helps to grasp the development trend of SOHO router backdoors so that it can provide important information for detection and prevention of backdoors and improve the security and robustness of routers.In short,SOHO router backdoor technology research is rather significant to the network space safety.This paper mainly carries out research on the design,detection,and defense of SOHO router backdoor.The differences in technology,function and many other aspects between the backdoor for traditional desktop or server computer system and the backdoor for SOHO router were evaluated,and four technical characteristics of implantation,behavior disguise,remote control,and application were introduced detailedly.In addition,the technical points of firmware analysis,extraction,serial port connection,static audit and dynamic analysis in backdoor detection are also discussed.Meanwhile,a SOHO router prototype backdoor system including both controlling and controlled ends was designed and implemented.Some important and difficult problems such as remote communication,command execution,backdoor concealment and so on were also expounded herein.Combined with the prototype backdoor system,this thesis evaluated different SOHO router backdoor analysis technologies,and a clear backdoor analyzing process which consisted of the static audit and dynamic detection was designed based on the result of the evaluation.Multiple backdoor samples were analyzed by using this method,and the detection process of one typical backdoor was handle in detail.Finally,corresponding backdoor defense methods were summarized.