| With the development of computer technology and the rise of the Internet of Things technology,traditional home devices are gradually being replaced by more intelligent home devices.Under the background that different kinds of smart home devices with different functions are gradually applied to the home network.In order to achieve the interconnection of smart home devices in the Internet of Things,standardization organizations and enterprise alliances around the world have proposed protocols for different services,among which UPnP(Universal Plug and Play)protocol has been widely used.UPnP is an abbreviation for Universal Plug and Play.It implements information exchange and interoperation between devices on the same network.Although the UPnP protocol can realize the interconnection between devices and make the devices in the access network more intelligent,the security of network devices has been increasingly threatened due to certain security risks in the protocol itself.Due to the simplicity of UPnP protocol and adherence to open standards,there are some security vulnerabilities in the protocol.Attackers can use these vulnerabilities to slow down the speed of the PC,or in rare ases,attackers can elevate their permission in the system for remote control to attack the host.Among these vulnerabilities are common in various devices based on the UPnP protocol,and attackers can use the characteristics of buffer overflow vulnerabilities to execute constructed shellcode to obtain the system’s shell,causing great harm.This paper analyzes and studies the security issues of the UPnP protocol.At the same time,based on the research of the working principle of the protocol and the formation of known vulnerabilities,the two things are combined to propose a fuzzy test method based on the UPnP protocol.The research in this paper is of great significance to the security analysis and research of UPnP protocol in Internet of Things devices. |
