CN109828929A - The anti-tamper method for testing security of hard disk firmware, system, terminal and storage medium - Google Patents

The anti-tamper method for testing security of hard disk firmware, system, terminal and storage medium Download PDF

Info

Publication number
CN109828929A
CN109828929A CN201910147462.9A CN201910147462A CN109828929A CN 109828929 A CN109828929 A CN 109828929A CN 201910147462 A CN201910147462 A CN 201910147462A CN 109828929 A CN109828929 A CN 109828929A
Authority
CN
China
Prior art keywords
hard disk
firmware
disk firmware
tool
code
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201910147462.9A
Other languages
Chinese (zh)
Inventor
梁文俊
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Suzhou Wave Intelligent Technology Co Ltd
Original Assignee
Suzhou Wave Intelligent Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Suzhou Wave Intelligent Technology Co Ltd filed Critical Suzhou Wave Intelligent Technology Co Ltd
Priority to CN201910147462.9A priority Critical patent/CN109828929A/en
Publication of CN109828929A publication Critical patent/CN109828929A/en
Pending legal-status Critical Current

Links

Landscapes

  • Storage Device Security (AREA)

Abstract

The present invention provides a kind of anti-tamper method for testing security of hard disk firmware, system, terminal and storage medium, method: it obtains hard disk firmware standard code and modifies, hard disk firmware code refreshing judges whether Flushing success is to judge the anti-tamper safety of hard disk firmware for hard disk firmware to hard disk after being modified using hard disk test tool;Step: hard disk firmware standard code is obtained;Hard disk firmware standard code is opened by the text edit tool;It modifies to hard disk firmware standard code, generates hard disk firmware code after modification;Hard disk firmware code refreshing is to hard disk after being modified using hard disk test tool;Judge whether hard disk firmware refreshing succeeds;If it is not, then the anti-tamper security test of hard disk firmware passes through;If so, the anti-tamper security test of hard disk firmware does not pass through.System includes: that hard disk firmware standard code obtains module, hard disk firmware standard code change module, the first refresh module of hard disk firmware and hard disk firmware refreshing first judgment module.

Description

The anti-tamper method for testing security of hard disk firmware, system, terminal and storage medium
Technical field
The invention belongs to server testing fields, and in particular to a kind of anti-tamper method for testing security of hard disk firmware is System, terminal and storage medium.
Background technique
With the continuous development of server market, server is widely used in all trades and professions, and user spreads internet, leads to Major industries such as news, finance, education.Some clients are very strict to the security requirement of data, especially with financial industry and army Based on industrial and commercial bank's industry, the leakage of any data can all lead to fatefulue influence.
Hard disk is the carrier of data storage, and this requires hard disks not only the data storage capacities of high safety, it is necessary to There is self-protection ability, firmware (FW) cannot arbitrarily be distorted by the external world, prevent the implantation and generation at back door.
Hard disk firmware (FW) is the brain of hard disk operational, instructs the work of hard disk and the read-write of data, so hard disk firmware Safety it is extremely important, security level required is also very high.We are only in the past solid to the test method of hard disk firmware How part promotion and demotion test carries out security test to hard disk firmware, and there is no specific test methods.
This is the deficiencies in the prior art, therefore, in view of the above-mentioned drawbacks in the prior art, provides that a kind of hard disk firmware is anti-to be usurped Change method for testing security, system, terminal and storage medium, is necessary.
Summary of the invention
Above-mentioned for the prior art was only in the past firmware promotion and demotion test to the test method of hard disk firmware, how right Hard disk firmware carries out security test, and there is no the defect of specific test method, the present invention provides that a kind of hard disk firmware is anti-to be usurped Change method for testing security, system, terminal and storage medium, to solve the above technical problems.
In a first aspect, the present invention provides a kind of anti-tamper method for testing security of hard disk firmware, hard disk firmware standard is obtained Code is simultaneously modified, and hard disk firmware code refreshing judges whether hard disk firmware brushes to hard disk after being modified using hard disk test tool New success is to judge the anti-tamper safety of hard disk firmware.
Further, the specific steps are as follows:
S1. hard disk firmware standard code is obtained;
S2. hard disk firmware standard code is opened by the text edit tool;
S3. it modifies to hard disk firmware standard code, generates hard disk firmware code after modification;
S4. use hard disk test tool by hard disk firmware code refreshing after modification to hard disk;
S5. judge whether hard disk firmware refreshing succeeds;
S6. if it is not, then the anti-tamper security test of hard disk firmware pass through;
If so, the anti-tamper security test of hard disk firmware does not pass through.Hard disk firmware standard code, that is, hard disk genuine is consolidated Part.
Further, further include following steps between step S1 and S2:
S1`. hard disk firmware standard code is flushed to by hard disk using hard disk test tool;
S2`. judge whether hard disk firmware refreshing succeeds;
S3`. if so, hard disk test tool firmware refresh function is normal, S2 is entered step;
If it is not, then hard disk test tool firmware refresh function is abnormal, test is exited.Hard disk firmware standard code is flushed to Hard disk carry out the verifying of hard disk test tool availability, when hard disk test tool is normal, to the anti-tamper safety of hard disk firmware into Row verifying, guarantees measuring accuracy, when preventing hard disk test tool abnormality, hard disk firmware code refreshing is unsuccessfully by hard disk after modification Testing tool causes, rather than caused by the anti-tamper safety of hard disk firmware.
Further, the text edit tool uses UltraEdit tool.UltraEdit is a set of powerful text Editing machine can edit text, hexadecimal, ASCII character, can replace notepad (if computer configuration is sufficiently strong completely Greatly), built-in English-word inspection, C++ and VB instruction highlight, and can edit multiple files simultaneously, and even if open very big text Part speed will not be slow.
Further, hard disk test tool uses hdparm tool.Hdparm tool is hard disk test common tool, can be with It checks the key message of hard disk, can also be tested the speed, be optimized to hard disk, modifying hard disk praameter setting, the present invention uses Hdparm tool carries out hard disk firmware refresh testing.
Second aspect, the present invention provide a kind of anti-tamper security test system of hard disk firmware, comprising:
Hard disk firmware standard code obtains module, for obtaining hard disk firmware standard code;
Hard disk firmware standard code changes module, for opening hard disk firmware standard code by the text edit tool, and It modifies to hard disk firmware standard code, generates hard disk firmware code after modification;
The first refresh module of hard disk firmware, for hard disk firmware code refreshing after being modified using hard disk test tool to firmly Disk;
Hard disk firmware refreshes first judgment module, for judging that hard disk firmware refreshes whether modification post code succeeds.
Further, further includes:
The second refresh module of hard disk firmware, for being flushed to hard disk firmware standard code firmly using hard disk test tool Disk;
Hard disk firmware refreshes the second judgment module, for judging that hard disk firmware refreshes whether standard code succeeds.
Further, the text edit tool uses UltraEdit tool;
Hard disk test tool uses hdparm tool.
The third aspect provides a kind of terminal, comprising:
Processor, memory, wherein
The memory is for storing computer program;
The processor from memory for calling and running the computer program, so that terminal executes above-mentioned hard disk firmware Anti-tamper method for testing security.
Fourth aspect provides a kind of computer readable storage medium, finger is stored in the computer readable storage medium It enables, when run on a computer, so that computer executes the above-mentioned anti-tamper method for testing security of hard disk firmware.
The beneficial effects of the present invention are,
The present invention realize the anti-tamper safety of hard disk firmware effectively verify, can verify hard disk firmware whether have it is anti-tamper Possibility, thus identify hard disk firmware design it is whether safe and reliable, effectively prevent the modification hard disk firmware content of third party's malice, Hard disk test tool availability is verified simultaneously, in the case of hard disk test tool is effective, verifies the anti-tamper safety of hard disk firmware Property, more guarantee measuring accuracy;Security test content when server exploitation is included in hard disk firmware security test, enriches Hard disk and server test specification, promote the security performance of server.
In addition, design principle of the present invention is reliable, structure is simple, has very extensive application prospect.
It can be seen that compared with prior art, the present invention implementing with substantive distinguishing features outstanding and significant progress Beneficial effect be also obvious.
Detailed description of the invention
In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, to embodiment or will show below There is attached drawing needed in technical description to be briefly described, it should be apparent that, for those of ordinary skill in the art Speech, without creative efforts, is also possible to obtain other drawings based on these drawings.
Fig. 1 is the method flow diagram of the embodiment of the present invention 1;
Fig. 2 is the method flow diagram of the embodiment of the present invention 2;
Fig. 3 is the system schematic of the embodiment of the present invention 4;
Fig. 4 is 5 hard disk firmware standard code schematic diagram of the embodiment of the present invention;
Fig. 5 is hard disk firmware code schematic diagram after the embodiment of the present invention 5 is modified;
In figure, 1- hard disk firmware standard code obtains module;2- hard disk firmware standard code changes module;3- hard disk firmware First refresh module;4- hard disk firmware refreshes first judgment module;The second refresh module of 5- hard disk firmware;6- hard disk firmware refreshes Second judgment module.
Specific embodiment
Technical solution in order to enable those skilled in the art to better understand the present invention, below in conjunction with of the invention real The attached drawing in example is applied, technical scheme in the embodiment of the invention is clearly and completely described, it is clear that described implementation Example is only a part of the embodiment of the present invention, instead of all the embodiments.Based on the embodiments of the present invention, this field is common Technical staff's every other embodiment obtained without making creative work, all should belong to protection of the present invention Range.
Embodiment 1:
The present invention provides a kind of anti-tamper method for testing security of hard disk firmware, obtains hard disk firmware standard code and repairs Change, after being modified using hard disk test tool hard disk firmware code refreshing to hard disk, judge hard disk firmware whether Flushing success from And judge the anti-tamper safety of hard disk firmware;
As shown in Figure 1, the specific steps are as follows:
S1. hard disk firmware standard code is obtained;
S2. hard disk firmware standard code is opened by the text edit tool;
S3. it modifies to hard disk firmware standard code, generates hard disk firmware code after modification;
S4. use hard disk test tool by hard disk firmware code refreshing after modification to hard disk;
S5. judge whether hard disk firmware refreshing succeeds;
S6. if it is not, then the anti-tamper security test of hard disk firmware pass through;
If so, the anti-tamper security test of hard disk firmware does not pass through.
Embodiment 2:
As shown in Fig. 2, the present invention provides a kind of anti-tamper method for testing security of hard disk firmware, steps are as follows:
S1. hard disk firmware standard code is obtained;
S1`. hard disk firmware standard code is flushed to by hard disk using hard disk test tool;
S2`. judge whether hard disk firmware refreshing succeeds;
S3`. if so, hard disk test tool firmware refresh function is normal, S2 is entered step;
If it is not, then hard disk test tool firmware refresh function is abnormal, test is exited;
S2. hard disk firmware standard code is opened by the text edit tool;
S3. it modifies to hard disk firmware standard code, generates hard disk firmware code after modification;
S4. use hard disk test tool by hard disk firmware code refreshing after modification to hard disk;
S5. judge whether hard disk firmware refreshing succeeds;
S6. if it is not, then the anti-tamper security test of hard disk firmware pass through;
If so, the anti-tamper security test of hard disk firmware does not pass through.
Embodiment 3:
The present invention provides a kind of anti-tamper method for testing security of hard disk firmware, and steps are as follows:
S1. hard disk firmware standard code is obtained;The present invention uses Seagate ST2000NX0253 hard disk, hard disk firmware standard generation Code is Seagate genuine firmware ST2000NX0253_SN04.LOD;
S1`. hard disk firmware standard code is flushed to by hard disk using hard disk test tool;Hard disk test tool uses Hdparm tool, hdparm tool are hard disk test common tools, can check the key message of hard disk, can also to hard disk into Row tests the speed, optimizes, modifying hard disk praameter setting, and the present invention carries out hard disk firmware refresh testing using hdparm tool, passes through Order hdparm--fwdownload-mode3-maxST2000NX0253_SN04.LOD--yes-i-know-what-i-am- doing--please-destroy-my-drive/dev/sd$i;
S2`. judge whether hard disk firmware refreshing succeeds;
S3`. if so, hard disk test tool firmware refresh function is normal, S2 is entered step;
If it is not, then hard disk test tool firmware refresh function is abnormal, test is exited;At this point, hard disk is solid after modifying in next step Part code, which refreshes hard disk, is unsuccessfully not as anti-tamper highly-safe reason, but hard disk test tool firmware refresh function It is abnormal caused;
S2. hard disk firmware standard code is opened by the text edit tool;As shown in figure 4, the text edit tool uses UltraEdit tool opens hard disk firmware ST2000NX0253_SN04.LOD, firmware using the text edit tool UltraEdit It is made of 16 carry system codes, respectively represents address or the numerical value of different registers;
S3. it modifies to hard disk firmware standard code, generates hard disk firmware code after modification;To any register value It modifies, as shown in figure 5, being arbitrarily revised as E6 and 2b the 1st of 00000000h and the 2nd, and saves modified solid Part;
S4. use hard disk test tool by hard disk firmware code refreshing after modification to hard disk;Use hdparm-- fwdownload-mode3-maxST2000NX0253_SN04.LOD--yes-i-know-what-i-am-doing-- Please-destroy-my-drive/dev/sd $ i order carries out the refreshing of ST2000NX0253 hard disk firmware;
S5. judge whether hard disk firmware refreshing succeeds;
S6. if it is not, refreshing prompt Fail, illustrate that the hard disk firmware designs safety with higher, third party can be prevented The modification firmware content of malice, the anti-tamper security test of hard disk firmware pass through;
If so, the anti-tamper security test of hard disk firmware does not pass through.
Embodiment 4:
As shown in figure 3, the present invention provides a kind of anti-tamper security test system of hard disk firmware, comprising:
Hard disk firmware standard code obtains module 1, for obtaining hard disk firmware standard code;
Hard disk firmware standard code changes module 2, for opening hard disk firmware standard code by the text edit tool, and It modifies to hard disk firmware standard code, generates hard disk firmware code after modification;The text edit tool uses UltraEdit work Tool;
The first refresh module of hard disk firmware 3, for being arrived hard disk firmware code refreshing after modification using hard disk test tool Hard disk;Hard disk test tool uses hdparm tool;
Hard disk firmware refreshes first judgment module 4, for judging that hard disk firmware refreshes whether modification post code succeeds;
The second refresh module of hard disk firmware 5, for being flushed to hard disk firmware standard code firmly using hard disk test tool Disk;
Hard disk firmware refreshes the second judgment module 6, for judging that hard disk firmware refreshes whether standard code succeeds.
Embodiment 5:
The present invention provides a kind of terminal, comprising:
Processor, memory, wherein
The memory is for storing computer program;
The processor from memory for calling and running the computer program, so that terminal executes above-described embodiment 1 Or method as described in example 2.
Embodiment 6:
The present invention provides a kind of computer readable storage medium, and instruction is stored in the computer readable storage medium, When run on a computer, so that computer executes above-described embodiment 1 or method as described in example 2.
Although by reference to attached drawing and combining the mode of preferred embodiment to the present invention have been described in detail, the present invention It is not limited to this.Without departing from the spirit and substance of the premise in the present invention, those of ordinary skill in the art can be to the present invention Embodiment carry out various equivalent modifications or substitutions, and these modifications or substitutions all should in covering scope of the invention/appoint What those familiar with the art in the technical scope disclosed by the present invention, can easily think of the change or the replacement, answer It is included within the scope of the present invention.Therefore, protection scope of the present invention is answered described is with scope of protection of the claims It is quasi-.

Claims (10)

1. a kind of anti-tamper method for testing security of hard disk firmware, which is characterized in that it obtains hard disk firmware standard code and modifies, Hard disk firmware code refreshing judges whether Flushing success is to sentence for hard disk firmware to hard disk after being modified using hard disk test tool The disconnected anti-tamper safety of hard disk firmware.
2. a kind of anti-tamper method for testing security of hard disk firmware as described in claim 1, which is characterized in that specific steps are such as Under:
S1. hard disk firmware standard code is obtained;
S2. hard disk firmware standard code is opened by the text edit tool;
S3. it modifies to hard disk firmware standard code, generates hard disk firmware code after modification;
S4. use hard disk test tool by hard disk firmware code refreshing after modification to hard disk;
S5. judge whether hard disk firmware refreshing succeeds;
S6. if it is not, then the anti-tamper security test of hard disk firmware pass through;
If so, the anti-tamper security test of hard disk firmware does not pass through.
3. a kind of anti-tamper method for testing security of hard disk firmware as claimed in claim 2, which is characterized in that step S1 and S2 Between further include following steps:
S1`. hard disk firmware standard code is flushed to by hard disk using hard disk test tool;
S2`. judge whether hard disk firmware refreshing succeeds;
S3`. if so, hard disk test tool firmware refresh function is normal, S2 is entered step;
If it is not, then hard disk test tool firmware refresh function is abnormal, test is exited.
4. a kind of anti-tamper method for testing security of hard disk firmware as claimed in claim 2, which is characterized in that text editing work Tool uses UltraEdit tool.
5. a kind of anti-tamper method for testing security of hard disk firmware as claimed in claim 2 or claim 3, which is characterized in that hard disk is surveyed Trial work tool uses hdparm tool.
6. a kind of anti-tamper security test system of hard disk firmware characterized by comprising
Hard disk firmware standard code obtains module (1), for obtaining hard disk firmware standard code;
Hard disk firmware standard code changes module (2), for opening hard disk firmware standard code by the text edit tool, and it is right Hard disk firmware standard code is modified, and hard disk firmware code after modification is generated;
The first refresh module of hard disk firmware (3), for hard disk firmware code refreshing after being modified using hard disk test tool to firmly Disk;
Hard disk firmware refreshes first judgment module (4), for judging that hard disk firmware refreshes whether modification post code succeeds.
7. a kind of anti-tamper security test system of hard disk firmware as claimed in claim 6, which is characterized in that further include:
The second refresh module of hard disk firmware (5), for hard disk firmware standard code to be flushed to hard disk using hard disk test tool;
Hard disk firmware refreshes the second judgment module (6), for judging that hard disk firmware refreshes whether standard code succeeds.
8. a kind of anti-tamper security test system of hard disk firmware as claimed in claim 7, which is characterized in that text editing work Tool uses UltraEdit tool;
Hard disk test tool uses hdparm tool.
9. a kind of terminal characterized by comprising
Processor, memory, wherein
The memory is for storing computer program;
The processor from memory for calling and running the computer program, so that terminal executes the claims 1-5 Described in any item methods.
10. a kind of computer readable storage medium, which is characterized in that instruction is stored in the computer readable storage medium, When run on a computer, so that computer executes any one of the claims 1-5 the method.
CN201910147462.9A 2019-02-27 2019-02-27 The anti-tamper method for testing security of hard disk firmware, system, terminal and storage medium Pending CN109828929A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910147462.9A CN109828929A (en) 2019-02-27 2019-02-27 The anti-tamper method for testing security of hard disk firmware, system, terminal and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910147462.9A CN109828929A (en) 2019-02-27 2019-02-27 The anti-tamper method for testing security of hard disk firmware, system, terminal and storage medium

Publications (1)

Publication Number Publication Date
CN109828929A true CN109828929A (en) 2019-05-31

Family

ID=66864762

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910147462.9A Pending CN109828929A (en) 2019-02-27 2019-02-27 The anti-tamper method for testing security of hard disk firmware, system, terminal and storage medium

Country Status (1)

Country Link
CN (1) CN109828929A (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111414299A (en) * 2020-03-26 2020-07-14 深圳忆联信息***有限公司 SSD extended information obtaining method and device based on hdparm
CN112463608A (en) * 2020-11-30 2021-03-09 中国工商银行股份有限公司 Testing method and system based on distributed storage

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104702466A (en) * 2015-02-12 2015-06-10 中国南方电网有限责任公司 IEC62351 (International Electrotechnical Commission 62351)-based process layer safety test system and method
CN107391195A (en) * 2017-07-24 2017-11-24 郑州云海信息技术有限公司 A kind of method that SSD FW upgradings are carried out under linux
CN107402753A (en) * 2017-06-30 2017-11-28 郑州云海信息技术有限公司 The method for refreshing and device of a kind of hard disk firmware
CN108958768A (en) * 2018-06-26 2018-12-07 浪潮(北京)电子信息产业有限公司 A kind of GPU firmware update, device, equipment and computer readable storage medium

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104702466A (en) * 2015-02-12 2015-06-10 中国南方电网有限责任公司 IEC62351 (International Electrotechnical Commission 62351)-based process layer safety test system and method
CN107402753A (en) * 2017-06-30 2017-11-28 郑州云海信息技术有限公司 The method for refreshing and device of a kind of hard disk firmware
CN107391195A (en) * 2017-07-24 2017-11-24 郑州云海信息技术有限公司 A kind of method that SSD FW upgradings are carried out under linux
CN108958768A (en) * 2018-06-26 2018-12-07 浪潮(北京)电子信息产业有限公司 A kind of GPU firmware update, device, equipment and computer readable storage medium

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111414299A (en) * 2020-03-26 2020-07-14 深圳忆联信息***有限公司 SSD extended information obtaining method and device based on hdparm
CN112463608A (en) * 2020-11-30 2021-03-09 中国工商银行股份有限公司 Testing method and system based on distributed storage
CN112463608B (en) * 2020-11-30 2024-01-26 中国工商银行股份有限公司 Test method and system based on distributed storage

Similar Documents

Publication Publication Date Title
Wang et al. Vultron: catching vulnerable smart contracts once and for all
Behrang et al. Test migration between mobile apps with similar functionality
EP3067817A1 (en) Dynamic data masking for mainframe application
US8918885B2 (en) Automatic discovery of system integrity exposures in system code
Jürjens Model-based security testing using umlsec: A case study
Sun et al. Mutation testing for integer overflow in ethereum smart contracts
Bunke et al. An architecture-centric approach to detecting security patterns in software
Liu et al. Invcon: A dynamic invariant detector for ethereum smart contracts
CN109828929A (en) The anti-tamper method for testing security of hard disk firmware, system, terminal and storage medium
Barnes et al. Engineering the Tokeneer Enclave Protection Software.
CN110018954A (en) Code quality detection, the appraisal procedure of code detection quality, device and equipment
CN110048932A (en) Validation checking method, apparatus, equipment and the storage medium of mail Monitoring function
Saeki et al. Enhancing goal-oriented security requirements analysis using common criteria-based knowledge
Zheng et al. Turn the rudder: A beacon of reentrancy detection for smart contracts on ethereum
US10015181B2 (en) Using natural language processing for detection of intended or unexpected application behavior
CN107679423A (en) Partition integrity inspection method and device
Bossi et al. Refinement operators and information flow security
CN106878248A (en) A kind of verification method and equipment
CN114444087A (en) Unauthorized vulnerability detection method and device, electronic equipment and storage medium
Motan et al. Android app testing: A model for generating automated lifecycle tests
Vidal et al. Advancing Blockchain Security: from Vulnerability Detection to Transaction Revocation
Ecar et al. AutoCosmic: COSMIC automated estimation and management tool
CN110443051A (en) A method of prevent security files in transmission on Internet
Martinelli et al. Safety critical systems formal verification using execution traces
Alvi et al. Security pattern detection using ordered matrix matching

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20190531