ZIEN
ZIEN CEO Youngmin Cho participated as a speaker at the '2024 AIoT International Conference' held at COEX on the 31st of October.
CEO Cho presented on 'IoT Security Vulnerability Management Methods' in the 'Security Trends' section, raising awareness about IoT security. He particularly highlighted ▲attacker's perspective on IoT device hacking ▲IoT hacking cases ▲automated vulnerability analysis of IoT firmware.
CEO Cho explained security threats including IoT service components (mobile apps, cloud servers, IoT gateways, IoT devices), ▲user authentication vulnerabilities ▲hardware and software level vulnerabilities ▲firmware distribution server vulnerabilities, and revealed attack scenarios targeting IoT devices.
"If attackers analyze IoT devices and obtain firmware that controls all device operations, they can launch external attacks," said CEO Cho. "To prevent this, ZIEN developed Z-IoT, an XIoT firmware security automated inspection solution, which can identify potential vulnerabilities and strengthen security."
CEO Cho then explained 'IoT Hacking Cases,' introducing the 'Black Box Security Issues and Analysis Methods' and '8 Discovered Security Vulnerabilities' presented by ZIEN's R&D team at the 'DEF CON 32' security conference held in Las Vegas last August.
"Recent black boxes don't play videos directly on the device but add network functionality to check and save videos through smartphones or PCs," CEO Cho analyzed. "However, this addition of network functionality has increased potential attack vectors for hackers and the likelihood of security vulnerabilities."
According to CEO Cho, analysis of black boxes from major countries including Korea, US, Germany, and China revealed that 4 out of 9 products were identified as identical OEM equipment. OEM equipment refers to products completed similarly based on equipment manufactured by specific companies. If vulnerabilities occur in the basic program of this equipment, all devices made with the same board are likely to have the same vulnerability.
Meanwhile, ZIEN, an IoT firmware security automated inspection solution company, has released the beta service of 'Z-IoT,' an IoT device security automated inspection solution. Z-IoT automatically inspects firmware installed in IoT devices and identifies security vulnerabilities through ▲password ▲encryption ▲executable file ▲open software ▲zero-day security analysis, and suggests solutions for security enhancement. This solution can save security inspection costs and time while preventing security incidents in advance by automatically checking security without expert knowledge.
The AIoT International Exhibition was held for three days from October 30 to November 1. The event was hosted by the Ministry of Science and ICT and organized by the Korea Internet of Things Association, marking its 11th year since its first holding in 2014. This exhibition introduced 'AI+IoT Product Solutions,' 'Smart Home, Office, Healthcare,' and 'Smart City, Village.'
출처 : IT Daily