Game of Hide-and-Seek: Exposing Hidden Interfaces in Embedded Web Applications of IoT Devices
Wei Xie, Jiongyi Chen, Zhenhua Wang, Chao Feng, Enze Wang, Yifei Gao, Baosheng Wang, Kai Lü
Abstract
Recent years have seen increased attacks targeting embedded web applications of IoT devices. An important target of such attacks is the hidden interface of embedded web applications, which employs no protection but exposes security-critical actions and sensitive information to illegitimate users. With the severity and the pervasiveness of this issue, it is crucial to identify the vulnerable hidden interfaces, shed light on best practices and raise public awareness.
Topics & Concepts
Computer scienceComputer securityInternet of ThingsInterface (matter)Internet privacyDeep WebUser interfaceWorld Wide WebWeb applicationHuman–computer interactionThe InternetMaximum bubble pressure methodParallel computingBubbleOperating systemAdvanced Malware Detection TechniquesSecurity and Verification in ComputingNetwork Security and Intrusion Detection