Exploring IoT Device Vulnerabilities Through Malware Analysis and Reverse Engineering

The Internet of Things (IoT) has significantly expanded the attack surface for cyber threats, presenting new cybersecurity challenges. This project aims to analyze IoT device vulnerabilities through reverse engineering of malware specifically designed to exploit these devices. The study employs a multi-faceted approach combining static and dynamic analysis techniques, disassembling malware binaries to identify exploit techniques, payloads, and obfuscation methods. Advanced tools like IDA Pro, Ghidra, and Wireshark are used to trace malware behaviours, uncover persistence mechanisms, and analyze command and control communications. Common vulnerabilities exploited by the malware include weak authentication protocols, insufficient input validation, and inadequate firmware protection. The findings contribute to the development of improved detection and mitigation strategies, including signature-based and heuristic detection customized detection methods for IoT device vulnerabilities. This research emphasizes the need for robust security practices and proactive vulnerability management in IoT device design and deployment, offering actionable recommendations to enhance the resilience of IoT ecosystems against sophisticated malware threats.