Detail publikačního výsledku

Security of remote management of embedded systems running MikroTik RouterOS operating system using proprietary protocols

JÍLEK, T.; ŽALUD, L.

Originální název

Security of remote management of embedded systems running MikroTik RouterOS operating system using proprietary protocols

Anglický název

Security of remote management of embedded systems running MikroTik RouterOS operating system using proprietary protocols

Druh

Stať ve sborníku v databázi WoS či Scopus

Originální abstrakt

This paper deals with proprietary communication protocols that are implemented in the MikroTik RouterOS operating system. These communication protocols are specially designed for remote management of embedded systems that run with this operating system. These protocols are closed and thus they have not a publicly accessible documentation. In this paper the principles of their functions that are identified on the basis of realized communication analyses are described. Security risks that are associated with the use of these communication protocols are also analyzed in the paper. Attack that uses conceptual bug in the design one of these communication protocols is demonstrated on a real example. Full and unlimited access to embedded system that runs with this operating system can be obtained with this attack.

Anglický abstrakt

This paper deals with proprietary communication protocols that are implemented in the MikroTik RouterOS operating system. These communication protocols are specially designed for remote management of embedded systems that run with this operating system. These protocols are closed and thus they have not a publicly accessible documentation. In this paper the principles of their functions that are identified on the basis of realized communication analyses are described. Security risks that are associated with the use of these communication protocols are also analyzed in the paper. Attack that uses conceptual bug in the design one of these communication protocols is demonstrated on a real example. Full and unlimited access to embedded system that runs with this operating system can be obtained with this attack.

Klíčová slova

security analysis, communication protocols, communication networks, remote management, operating systems, embedded systems

Klíčová slova v angličtině

security analysis, communication protocols, communication networks, remote management, operating systems, embedded systems

Autoři

JÍLEK, T.; ŽALUD, L.

Rok RIV

2013

Vydáno

23.05.2012

Nakladatel

IFAC-PapersOnLine / Elsevier

Místo

10344 Virginia Lee Dr. Centerville, OH 45458, USA

ISBN

978-3-902823-21-2

Kniha

Proceedings of 11th IFAC/IEEE International Conference on Programmable Devices and Embedded Systems

Edice

2012

Strany od

138

Strany do

142

Strany počet

5

BibTex

@inproceedings{BUT92956,
  author="Tomáš {Jílek} and Luděk {Žalud}",
  title="Security of remote management of embedded systems running MikroTik RouterOS operating system using proprietary protocols",
  booktitle="Proceedings of 11th IFAC/IEEE International Conference on Programmable Devices and Embedded Systems",
  year="2012",
  series="2012",
  pages="138--142",
  publisher="IFAC-PapersOnLine / Elsevier",
  address="10344 Virginia Lee Dr.
Centerville, OH 45458, USA",
  isbn="978-3-902823-21-2"
}