| Under the rapid development of mobile communication technology, traditionalmobile terminals have been unable to meet the needs of people, and the developmentof intelligent mobile terminal technology is becoming inevitable result to adapt human.As more and more people are using intelligent mobile terminal, Viruses, Trojans andother malicious programs on the wireless intelligent mobile terminals has increaseddramatically, makes the security issues of wireless intelligent mobile terminals moresignificant. Vulnerability analysis and discovery is the hot spots in the field of securityresearch. According to the IBM security research institution X-Force’s statistics andanalysis of mobile platform vulnerabilities within the last5years, it shows the numberof operating system vulnerabilities and exploits on a mobile platform in the rapidlyincreasing. But there have been attacks against software vulnerabilities in the wirelessintelligent mobile terminals virus program, and it is a serious threat to the security ofthe wireless intelligent mobile terminals.Wireless intelligent mobile terminals’ software vulnerabilities have become one ofthe hotspots of the current security studies. This thesis researched the status of thewireless intelligent mobile terminals security, and select Windows mobile operatingsystem as the object of study, use the reverse analysis method to study the function calland stack frame on the platform, analyze the software vulnerabilities instance on theWindows Mobile operating system. On the basis of the analysis, this thesis designedand implemented semi-automated software vulnerability analysis tools on the IDAplatform, aimed to assist the staff of software vulnerability analysis. Moverover, on thebasis of analysis of the vulnerability of the Windows Mobile, this thesis uses Fuzzingtechnology, and select the open source Fuzzing framework to achieve a prototypesystem of discovering wireless intelligent mobile terminal’s software vulnerabilities,give to the implementation of exceptions monitor module of Windows Mobile system.Finally, the thesis summarizes the research work, and put forward the problems inthe present work on cross-platform vulnerability analysis, discovery technology and communications protocol. Looking to the future trend of development in the fields ofmobile terminal... |