SoK: Exploiting Network Printers Jens Müller, Vladislav Mladenov, Juraj Somorovsky, Jörg Schwenk Horst Görtz Institute for IT-Security, Ruhr University Bochum
[email protected],
[email protected],
[email protected],
[email protected] Abstract technique to force web browsers into printing arbitrary pay- loads on a network printer [62]. A comprehensive discussion The idea of a paperless office has been dreamed of for of printer security – including a survey of malicious PJL and more than three decades. However, nowadays printers are PostScript commands – which comes closest to our work, still one of the most essential devices for daily work and was given by Costin et al. [16], [17] and [18]. common Internet users. Instead of removing them, printers However, we are not aware of any efforts to system- evolved from simple devices into complex network com- atically exploit PostScript and PJL functions, combining puter systems, installed directly into company networks, and existing attack techniques, and summarizing all attacks in carrying considerable confidential data in their print jobs. order to bypass the security of printers. This makes them to an attractive attack target. Existing gaps. During our research we identified that: In this paper we conduct a large scale analysis of printer (1) Even though many proof-of-concept attacks and tech- attacks and systematize our knowledge by providing a gen- niques have been known for years, the according coun- eral methodology for security analyses of printers. Based termeasures have not been implemented, leaving the on our methodology, we implemented an open-source tool devices and systems vulnerable.