Research on IoT firmware security quality detection technology based on hierarchical quality model

In recent years, Internet of Things (IoT) firmware security incidents have occurred frequently, posing a serious threat to public safety and sustainable development of enterprises. It is urgent to timely discover potential risk issues in IoT firmware and eliminate possible security risks. This paper focuses on the security analysis of IoT device firmware and conducts a systematic study based on the latest achievements in the field of security quality modeling. A security quality detection technology for IoT firmware based on a hierarchical quality model is proposed. This technology aggregates the results of multiple IoT firmware security detection tools and uses a hierarchical quality model to solve the problem of result consistency between tools. The threshold and utility function of the PIQUE hierarchical quality model are optimized. The optimized model is used to aggregate the detection results of four tools, cwe-checker, cve-bin-tool, Yara-Rules and radare2, to obtain an overall security quality assessment of IoT firmware. This technology can detect security risks in different dimensions of IoT firmware and generate a unified security quality score.