Detecting vulnerability on IoT device firmware: A survey

X Feng, X Zhu, QL Han, W Zhou… - IEEE/CAA Journal of …, 2022 - ieeexplore.ieee.org
Internet of things (IoT) devices make up 30% of all network-connected endpoints,
introducing vulnerabilities and novel attacks that make many companies as primary targets …

[PDF][PDF] AVATAR: A Framework to Support Dynamic Security Analysis of Embedded Systems' Firmwares.

J Zaddach, L Bruno, A Francillon, D Balzarotti - NDSS, 2014 - researchgate.net
To address the growing concerns about the security of embedded systems, it is important to
perform accurate analysis of firmware binaries, even when the source code or the hardware …

S2E: A platform for in-vivo multi-path analysis of software systems

V Chipounov, V Kuznetsov, G Candea - Acm Sigplan Notices, 2011 - dl.acm.org
This paper presents S2E, a platform for analyzing the properties and behavior of software
systems. We demonstrate S2E's use in develo** practical tools for comprehensive …

Symbolic execution for software testing in practice: preliminary assessment

C Cadar, P Godefroid, S Khurshid… - Proceedings of the 33rd …, 2011 - dl.acm.org
We present results for the" Impact Project Focus Area" on the topic of symbolic execution as
used in software testing. Symbolic execution is a program analysis technique introduced in …

Automated software test generation: some challenges, solutions, and recent advances

G Candea, P Godefroid - Computing and Software Science: State of the …, 2019 - Springer
The automation of software testing promises to delegate to machines what is otherwise the
most labor-intensive and expensive part of software development. The past decade has …

The S2E platform: Design, implementation, and applications

V Chipounov, V Kuznetsov, G Candea - ACM Transactions on Computer …, 2012 - dl.acm.org
This article presents S2E, a platform for analyzing the properties and behavior of software
systems, along with its use in develo** tools for comprehensive performance profiling …

{USBFuzz}: A framework for fuzzing {USB} drivers by device emulation

H Peng, M Payer - 29th USENIX Security Symposium (USENIX Security …, 2020 - usenix.org
The Universal Serial Bus (USB) connects external devices to a host. This interface exposes
the OS kernels and device drivers to attacks by malicious devices. Unfortunately, kernels …

Firmusb: Vetting usb device firmware using domain informed symbolic execution

G Hernandez, F Fowze, D Tian, T Yavuz… - Proceedings of the 2017 …, 2017 - dl.acm.org
The USB protocol has become ubiquitous, supporting devices from high-powered
computing devices to small embedded devices and control systems. USB's greatest feature …

Device-agnostic firmware execution is possible: A concolic execution approach for peripheral emulation

C Cao, L Guan, J Ming, P Liu - … of the 36th Annual Computer Security …, 2020 - dl.acm.org
With the rapid proliferation of IoT devices, our cyberspace is nowadays dominated by
billions of low-cost computing nodes, which are very heterogeneous to each other. Dynamic …

Charm: Facilitating dynamic analysis of device drivers of mobile systems

SMS Talebi, H Tavakoli, H Zhang, Z Zhang… - 27th USENIX Security …, 2018 - usenix.org
Mobile systems, such as smartphones and tablets, incorporate a diverse set of I/O devices,
such as camera, audio devices, GPU, and sensors. This in turn results in a large number of …