JTAG을 통한 MCU 펌웨어 코드 재생성의 보안 취약성 연구

초록

Recently, as the usage of embedded devices increases along with IoT devices, research on the security of MCU is increasing. In the development of MCU, using JTAG, a debugging device, the user observes the data and executes the firmware code stored in the flash memory in RAM to have a fast program execution speed. However, for flash memory, manufacturers offer memory protection, but limitedly for RAM. The memory protection function of the STM32F1 series provided by STMicro has security vulnerabilities of data leakage and alteration. In this paper, we studied the security vulnerabilities that occur when the firmware code is copied to RAM and executed to increase the execution speed of the program. Using STMicro’s MCU, STM32F103VGT6, regardless of whether the memory protection function is activated or not, data leakage and program operation errors due to data changes.