ZIENZIEN researcher HanRyeol Park warns of OEM vulnerabilities spreading to manufactured products
ZIEN R&D team wins 'TV hacking CTF' competition at IoT Village
(From left) Senior Researcher HanRyeol Park, Senior Researcher Hyojin Lee
ZIEN, an XIoT security convergence company, announced on the 13th that it participated in 'DEF CON 32', the world's largest hacking and information security conference held at the Las Vegas Convention Center in the United States, where it presented its research findings.
DEF CON is an event where hackers from around the world gather to present research results reflecting the latest technologies. It has been held annually in Las Vegas, USA since 1993, marking its 32nd event this year. This conference is a major event that leads the global market trends in the security industry and serves as a platform for security experts to share knowledge and techniques.
ZIEN is a company that provides solutions to enhance device security by automatically analyzing firmware vulnerabilities. At the 'IoT Village’, one of the 33 sections at DEF CON, ZIEN's R&D team presented ▲common characteristics and vulnerabilities ▲firmware and executable file extraction processes ▲custom protocol structures of manufacturer's communication equipment ▲techniques to bypass attacker tracking in IoT devices, identified in black boxes from major countries including Korea, the US, Germany, and China. They also presented solutions to address these vulnerabilities.
Recent dashcams can monitor and store video in real-time through connections with smartphones and PCs based on network capabilities. However, the addition of network functions increases the possibility of security vulnerabilities, expanding attack vectors for hackers to access dashcam firmware.
Moreover, dashcams are so widely used in our daily lives that it can be said there are no blind spots due to black boxes everywhere on the roads. Despite the potential for security vulnerabilities in dashcams as IT technology advances, only a handful of vulnerabilities have been discovered worldwide over the past three years. This is because both dashcam manufacturers and the security industry show low interest in dashcam security vulnerabilities.
HanRyeol Park, a researcher from ZIEN's R&D team, said, "Four out of nine dashcam manufacturers from major countries used the same OEM product. If vulnerabilities occur in the basic program of OEM product, the same vulnerabilities can occur in all devices manufactured based on that board."
He emphasized, "Manufacturers of OEM equipment should pay more attention to security," adding, "Thorough security checks should be conducted before using such equipment."
Meanwhile, ZIEN's R&D team won first place among 30 teams in the 'TV hacking CTF' section within the IoT Village.
Young-min Cho, CEO of ZIEN, said, "We are very pleased to have shared our leading research achievements in the IoT security field on the global stage through participation in DEF CON 32. ZIEN will continue to strengthen the security of IoT devices and contribute to building a safer digital environment through ongoing research and innovation. We hope that ZIEN's technology can help elevate Korea's status in the global IoT security market.”
Source : Issue & Biz