LuaTaint: A Static Taint Analysis System for Web Interface Framework Vulnerability of IoT Devices

arXiv:2402.16043v1 Announce Type: new
Abstract: IoT devices are currently facing continuous malicious attacks due to their widespread use. Among these IoT devices, web vulnerabilities are also widely exploited because of their inherent characteristics, such as improper permission controls and insecure interfaces. Recently, the embedded system web interface framework has become highly diverse, and specific vulnerabilities can arise if developers forget to detect user input parameters or if the detection process is not strict enough. Therefore, discovering vulnerabilities in the web …

analysis arxiv attacks continuous controls cs.cr cs.se devices embedded exploited facing framework insecure interface iot iot devices malicious permission system taint analysis vulnerabilities vulnerability web web interface web vulnerabilities