Internet of Things firmware fingerprint identification method and device based on open source software supply chain

The invention discloses an Internet of Things firmware fingerprint identification method and device based on an open source software supply chain. The method comprises the following steps: receiving and combining firmware blocks sent by a front-end system to obtain firmware to be identified; performing recursive unpacking processing on the firmware to be identified to obtain an unpacked file; performing feature selection based on the unpacked file to obtain vector data of the firmware to be identified; and inputting the vector data into a firmware fingerprint identification network, and obtaining fingerprint information of the firmware to be identified based on the obtained fingerprint label. According to the invention, the fingerprint information of unknown firmware can be identified, the maintenance cost is reduced, and the user experience is improved. 本发明公开了一种基于开源软件供应链的物联网固件指纹识别方法及装置。所述方法包括：接收并合并前端系统发送的固件分块，得到待识别固件；对待识别固件进行递归解包处理，得到解包文件；基于所述解包文件进行特征选择，以获取所述待识别固件的向量数据；将所述向量数据输入固件指纹识别网络，基于得到的指纹标签，获取待识别固件的指纹信