Skip to main content

Research on UPnP Protocol Security of Gateway Device

  • Conference paper
  • First Online:
  • 1040 Accesses

Part of the book series: Lecture Notes on Data Engineering and Communications Technologies ((LNDECT,volume 12))

Abstract

UPnP (Universal Plug and Play) protocol has been frequently applied to the Internet gateway device. However, with the gateway device becoming intelligent, UPnP generated more and more security issues. Therefore, the current research aims to introduce the workflow of UPnP protocol in gateway equipment, analyze the security problems existing in some workflows and realize a set of UPnP detection and utilization system for UPnP in the application of gateway device.

This is a preview of subscription content, log in via an institution.

Buying options

Chapter
USD   29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD   169.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD   219.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Learn about institutional subscriptions

References

  1. https://openconnectivity.org/developer/specifications/upnp-resources/upnp

  2. UPnP Device Architecture 2.0 Document Reversion Date: 20 February 2015

    Google Scholar 

  3. http://www.upnp-hacks.org/

  4. AI Hasib, A., Mottalib, M.A.: Vulnerability analysis and protection schemes of universal plug and play protocol. In: 2010 13th EEE International Conference on Computational Science and Engineering, pp. 222–228

    Google Scholar 

  5. Hemel, A.: Universal Plug and Play: Dead simple or simply deadly? 7 April 2006

    Google Scholar 

  6. https://openconnectivity.org/developer/specifications/upnp-resources/upnp/iot-management-and-control1

  7. UPnP Forum.DeviceManagementv2DCPs_2012[EB/OL] (2012-05-17) [2012-09-11]

    Google Scholar 

  8. https://openconnectivity.org/business/ocf-security

  9. Sales, T.M., Sales, L.M., Almeida, H.O., et al.: Multilevel security in UPnP networks for pervasive environments. IEEE Trans. Consum. Electron. 59(1), 144–152 (2013)

    Article  Google Scholar 

  10. Zhou, X.F.: Research on the UPnP standard security of digital home. Sci-Tech Inf. Dev. Econ. (2007)

    Google Scholar 

  11. Technet. Unchecked buffer in universal plug and play can lead to system compromise. Microsoft Security Bulletin MS01-059, Microsoft, December 2001

    Google Scholar 

  12. Tan, J., Zhe, H.E., Chen, Y.F., et al.: Survey on IGRS and UPnP devices security interconnection mechanism. Appl. Res. Comput. 27(7), 2400–2411 (2010)

    Google Scholar 

  13. Jia, H., Qi, Z.: Research on the implementation of secure UPnP architecture. In: 2009 2nd IEEE International Conference on Broadband Network & Multimedia Technology, pp. 433–437 (2009)

    Google Scholar 

  14. Rajkumar, P.P., Nair, A.A.: A UPnP extension for multilevel security in pervasive systems. In: Fourth International Conference on Computing, Communications and Networking Technologies, pp. 1–9. IEEE (2014)

    Google Scholar 

  15. Guo, X., Li, J.Z.: Secure UPnP services based on group signature algorithm. In: International Conference on Computer Science and Network Technology, pp. 951–955. IEEE (2014)

    Google Scholar 

Download references

Acknowledgments

This work was supported by National Natural Science Foundation of China (No. U1536122).

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Qin Zhang .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2018 Springer International Publishing AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Cui, B., Zhang, Q., Zhang, X., Guo, T. (2018). Research on UPnP Protocol Security of Gateway Device. In: Barolli, L., Xhafa, F., Conesa, J. (eds) Advances on Broad-Band Wireless Computing, Communication and Applications. BWCCA 2017. Lecture Notes on Data Engineering and Communications Technologies, vol 12. Springer, Cham. https://doi.org/10.1007/978-3-319-69811-3_41

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-69811-3_41

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-69810-6

  • Online ISBN: 978-3-319-69811-3

  • eBook Packages: EngineeringEngineering (R0)

Publish with us

Policies and ethics