A Scalable Middleware for IoT Vulnerability Detection

Cyberattacks targeting vulnerabilities in the internet of things (IoT) devices are increasing in number annually. Accordingly, various methods and analysis tools for IoT vulnerability detection have been proposed. Each analysis tool focuses on a specific vulnerability; therefore, it is necessary to use different analysis tools to detect multiple vulnerabilities. However, the currently available analysis tools often suffer from installation errors and are difficult to use effectively. Therefore, we propose a middleware for static analysis of IoT firmware that can be equipped with multiple vulnerability-detection algorithms. Using our middleware, multiple vulnerability-detection algorithms can be combined into a single analysis tool. Our results were compared with those of Karonte, the most popular analysis tool in terms of capability.