Windows 10: Most home routers do not take advantage of Linux's improved security

Brink · Jan 4, 2019

Linksys WRT32X, the router that scored the highest in the Cyber-ITL security-focused case study.

Many of today's most popular home router models don't take full advantage of the security features that come with the Linux operating system, which many of them use as a basis for their firmware.Security hardening features such as ASLR (Address Space Layout Randomization), DEP (Data Execution Prevention), RELRO (RELocation Read-Only), and stack guards have been found to be missing in a recent security audit of 28 popular home routers.

Security experts from the Cyber Independent Testing Lab (Cyber-ITL) analyzed the firmware of these routers and mapped out the percentage of firmware code that was protected by the four security features listed above.
"The absence of these security features is inexcusable," said Parker Thompson and Sarah Zatko, the two Cyber-ITL researchers behind the study.

"The features discussed in this report are easy to adopt, come with no downsides, and are standard practices in other market segments (such as desktop and mobile software)," the two added.

While some routers had 100 percent coverage for one feature, none implemented all four. Furthermore, researchers also found inconsistencies in applying the four security features within the same brand, with some router models from one vendor rating extremely high, while others had virtually no protection.

According to the research team, of the 28 router firmware images they analyzed, the Linksys WRT32X model scored highest with 100 percent DEP coverage for all firmware binaries, 95 percent RELRO coverage, 82 percent stack guard coverage, but with a lowly 4 percent ASLR protection...
Click to expand...

Read more: Most home routers don't take advantage of Linux's improved security features | ZDNet

:)

silkstone · Jan 4, 2019

Router behind a router = more secure?

Thanks.

So it is more secure from both exploits and brute force to have router > Router > Computers. An attacker would have to find exploits in both routers before gaining access to a network?

I would not worry about some hacker targeting you unless you advertise some type of prize "info" on your network. A simple Router with firewall settings should be enough if you set it up properly. If this was a business I would suggest a external firewall such as a fortigate 200 series.
Click to expand...

I'm not that worried, I just wanted to know the theory as I seem to get conflicting information. I had always assumed that having a router behind a router would be better security-wise.

I am pretty sure that my router would be on the list of those compromised in Vietnam by malware. The malware only changed the primary DNS for the router, so I would still not be immune to this kind of attack if someone gained access to my internet facing router, but it got me thinking more about security.

rnbnyc · Jan 4, 2019

Windows 10.1 Improvements/Advantages

What are the five most significant improvements with and/or advantages of Windows 10 over Windows 8.1?

Silverel · Jan 4, 2019

Guide: How to enable, use, and configure SLI on Linux.

I guess the next logical step would be to report on the performance you can get with SLI in Linux. That'd be my suggestion anyway.

Windows 10: Most home routers do not take advantage of Linux's improved security

Most home routers do not take advantage of Linux's improved security

Most home routers do not take advantage of Linux's improved security

Most home routers do not take advantage of Linux's improved security

Most home routers do not take advantage of Linux's improved security - Similar Threads - home routers advantage

What advantages does windows 10 have over Linux?

Improve Home Broadband Internet Speed

Windows 10 change desktop to laptop to take advantage of metering

Securing WIFI router

Improvement for Blender viewport and rendering (Windows vs. Linux)

VMWare fix for most kernels on Linux HOSTS

WiFi/Router Security

Security Concerns of Consumer Routers / Some Commercial Routers

How to secure your router and home network