Matches in SemOpenAlex for { <https://semopenalex.org/work/W4385890307> ?p ?o ?g. }
Showing items 1 to 71 of
71
with 100 items per page.
- W4385890307 abstract "Ability to test firmware on embedded devices is critical to discovering vulnerabilities prior to their adversarial exploitation. State-of-the-art automated testing methods rehost firmware in emulators and attempt to facilitate inputs from a diversity of methods (interrupt driven, status polling) and a plethora of devices (such as modems and GPS units). Despite recent progress to tackle peripheral input generation challenges in rehosting, a firmware's expectation of multi-byte magic values supplied from peripheral inputs for string operations still pose a significant roadblock. We solve the impediment posed by multi-byte magic strings in monolithic firmware. We propose feedback mechanisms for input-to-state mapping and retaining seeds for targeted replacement mutations with an efficient method to solve multi-byte comparisons. The feedback allows an efficient search over a combinatorial solution-space. We evaluate our prototype implementation, SplITS, with a diverse set of 21 real-world monolithic firmware binaries used in prior works, and 3 new binaries from popular open source projects. SplITS automatically solves 497% more multi-byte magic strings guarding further execution to uncover new code and bugs compared to state-of-the-art. In 11 of the 12 real-world firmware binaries with string comparisons, including those extensively analyzed by prior works, SplITS outperformed, statistically significantly. We observed up to 161% increase in blocks covered and discovered 6 new bugs that remained guarded by string comparisons. Significantly, deep and difficult to reproduce bugs guarded by comparisons, identified in prior work, were found consistently. To facilitate future research in the field, we release SplITS, the new firmware data sets, and bug analysis at https://github.com/SplITS-Fuzzer" @default.
- W4385890307 created "2023-08-17" @default.
- W4385890307 creator A5024705956 @default.
- W4385890307 creator A5048703299 @default.
- W4385890307 creator A5058776446 @default.
- W4385890307 creator A5059077090 @default.
- W4385890307 creator A5084022157 @default.
- W4385890307 date "2023-08-15" @default.
- W4385890307 modified "2023-09-27" @default.
- W4385890307 title "SplITS: Split Input-to-State Mapping for Effective Firmware Fuzzing" @default.
- W4385890307 doi "https://doi.org/10.48550/arxiv.2308.07860" @default.
- W4385890307 hasPublicationYear "2023" @default.
- W4385890307 type Work @default.
- W4385890307 citedByCount "0" @default.
- W4385890307 crossrefType "posted-content" @default.
- W4385890307 hasAuthorship W4385890307A5024705956 @default.
- W4385890307 hasAuthorship W4385890307A5048703299 @default.
- W4385890307 hasAuthorship W4385890307A5058776446 @default.
- W4385890307 hasAuthorship W4385890307A5059077090 @default.
- W4385890307 hasAuthorship W4385890307A5084022157 @default.
- W4385890307 hasBestOaLocation W43858903071 @default.
- W4385890307 hasConcept C111065885 @default.
- W4385890307 hasConcept C111919701 @default.
- W4385890307 hasConcept C113775141 @default.
- W4385890307 hasConcept C114466953 @default.
- W4385890307 hasConcept C121332964 @default.
- W4385890307 hasConcept C149635348 @default.
- W4385890307 hasConcept C157486923 @default.
- W4385890307 hasConcept C177264268 @default.
- W4385890307 hasConcept C199360897 @default.
- W4385890307 hasConcept C2777704519 @default.
- W4385890307 hasConcept C2777904410 @default.
- W4385890307 hasConcept C41008148 @default.
- W4385890307 hasConcept C43126263 @default.
- W4385890307 hasConcept C43364308 @default.
- W4385890307 hasConcept C48103436 @default.
- W4385890307 hasConcept C62520636 @default.
- W4385890307 hasConcept C67212190 @default.
- W4385890307 hasConceptScore W4385890307C111065885 @default.
- W4385890307 hasConceptScore W4385890307C111919701 @default.
- W4385890307 hasConceptScore W4385890307C113775141 @default.
- W4385890307 hasConceptScore W4385890307C114466953 @default.
- W4385890307 hasConceptScore W4385890307C121332964 @default.
- W4385890307 hasConceptScore W4385890307C149635348 @default.
- W4385890307 hasConceptScore W4385890307C157486923 @default.
- W4385890307 hasConceptScore W4385890307C177264268 @default.
- W4385890307 hasConceptScore W4385890307C199360897 @default.
- W4385890307 hasConceptScore W4385890307C2777704519 @default.
- W4385890307 hasConceptScore W4385890307C2777904410 @default.
- W4385890307 hasConceptScore W4385890307C41008148 @default.
- W4385890307 hasConceptScore W4385890307C43126263 @default.
- W4385890307 hasConceptScore W4385890307C43364308 @default.
- W4385890307 hasConceptScore W4385890307C48103436 @default.
- W4385890307 hasConceptScore W4385890307C62520636 @default.
- W4385890307 hasConceptScore W4385890307C67212190 @default.
- W4385890307 hasLocation W43858903071 @default.
- W4385890307 hasOpenAccess W4385890307 @default.
- W4385890307 hasPrimaryLocation W43858903071 @default.
- W4385890307 hasRelatedWork W2123102840 @default.
- W4385890307 hasRelatedWork W2354251310 @default.
- W4385890307 hasRelatedWork W2364955482 @default.
- W4385890307 hasRelatedWork W2374512474 @default.
- W4385890307 hasRelatedWork W2392593410 @default.
- W4385890307 hasRelatedWork W3092076559 @default.
- W4385890307 hasRelatedWork W3097734799 @default.
- W4385890307 hasRelatedWork W4246559903 @default.
- W4385890307 hasRelatedWork W4385696576 @default.
- W4385890307 hasRelatedWork W4385890307 @default.
- W4385890307 isParatext "false" @default.
- W4385890307 isRetracted "false" @default.
- W4385890307 workType "article" @default.