System and method for anlayzing vulnerability in IOT devices through preprocessing identification information of contamination paths

A vulnerability analysis device for detecting a vulnerability in software installed on an Internet of things (IoT) device, the vulnerability analysis device comprising:

• a communication unit configured to acquire a target binary file extracted from firmware of the IoT device;
• a taint analysis unit configured to generate a taint path by performing taint analysis on the target binary file and generate transmission information related to the taint path;
• and
• a preprocessing unit configured to analyze information related to at least one argument in the taint path and update the transmission information so that a vulnerability analysis unit analyzes the taint path and the transmission information generated by the taint analysis unit, wherein the preprocessing unit adds information on a measured size of at least one variable in the taint path to the transmission information of the taint path,
• wherein the vulnerability analysis unit is configured to:
• detect a vulnerability in the target binary file by performing symbolic execution on the target binary file on the basis of the taint path and the transmission information;
• perform symbolic execution on the target binary file and analyze a vulnerability of the target binary file;
• divide the generated taint path into blocks;
• perform symbolic execution on the generated taint path block by block on the basis of the transmission information related to the taint path to calculate state information of each block of the taint path;
• analyze block-specific state information to determine a vulnerability of the target binary file;
• compare the block-specific state information resulting from the symbolic execution with at least one preset vulnerable pattern to identify whether the block-specific state information corresponds to the compared at least one preset vulnerable pattern;
• and
• when the block-specific state information corresponds to the compared at least one preset vulnerable pattern, determine that the target binary file of which the state information has been analyzed has a vulnerability.