English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

The rapid growth of the Industrial Internet of Things (IIoT) has broughtembedded systems into focus as major targets for both security analysts andmalicious adversaries. Due to the non-standard hardware and diverse software,embedded devices present unique challenges to security analysts for theaccurate analysis of firmware binaries. The diversity in hardware componentsand tight coupling between firmware and hardware makes it hard to performdynamic analysis, which must have the ability to execute firmware code invirtualized environments. However, emulating the large expanse of hardwareperipherals makes analysts have to frequently modify the emulator for executingvarious firmware code in different virtualized environments, greatly limitingthe ability of security analysis.  In this work, we explore the problem of firmware re-hosting related to thereal-time operating system (RTOS). Specifically, developers create a BoardSupport Package (BSP) and develop device drivers to make that RTOS run on theirplatform. By providing high-level replacements for BSP routines and devicedrivers, we can make the minimal modification of the firmware that is to bemigrated from its original hardware environment into a virtualized one. We showthat an approach capable of offering the ability to execute firmware at scalethrough patching firmware in an automated manner without modifying the existingemulators. Our approach, called static binary-level porting, first identifiesthe BSP and device drivers in target firmware, then patches the firmware withpre-built BSP routines and drivers that can be adapted to the existingemulators. Finally, we demonstrate the practicality of the proposed method onmultiple hardware platforms and firmware samples for security analysis. Theresult shows that the approach is flexible enough to emulate firmware forvulnerability assessment and exploits development.

Firmware Re-hosting Through Static Binary-level Porting