{
  "added_at": "2026-11-06",
  "arxiv_id": "2005.07797",
  "arxiv_version_reviewed": "v1",
  "authors": [
    "Dominik Maier",
    "Lukas Seidel",
    "Shinjo Park"
  ],
  "bibtex_url": "https://awesomerea.org/papers/citations/paper-basesafe.bib",
  "code_url": null,
  "date_basis": "Published date in the Crossref record for the DOI listed on arXiv.",
  "date_basis_zh": "arXiv 所列 DOI 的 Crossref 记录中的发表日期。",
  "date_precision": "day",
  "description_en": "BaseSAFE partially rehosts closed-source cellular baseband firmware for instrumented fuzzing and uses a sanitizing allocator to detect heap buffer overflows.",
  "description_zh": "BaseSAFE 将闭源蜂窝基带固件部分迁移到仿真环境中进行插桩模糊测试，并用净化分配器检测堆缓冲区溢出。",
  "doi": "10.1145/3395351.3399360",
  "entry_url": "https://awesomerea.org/papers/paper-basesafe/",
  "entry_url_zh": "https://awesomerea.org/zh/papers/paper-basesafe/",
  "evidence_urls": [
    "https://arxiv.org/abs/2005.07797",
    "https://api.crossref.org/works/10.1145/3395351.3399360"
  ],
  "first_arxiv_date": "2020-05-15",
  "id": "paper-basesafe",
  "json_url": "https://awesomerea.org/papers/paper-basesafe/record.json",
  "kind": "research",
  "markdown_url": "https://awesomerea.org/papers/paper-basesafe/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/papers/paper-basesafe/index.md",
  "metadata_notes": "The DOI comes from the arXiv record, and the venue and date from Crossref.",
  "metadata_notes_zh": "DOI 来自 arXiv 记录，发表场所和日期来自 Crossref。",
  "pdf_url": "https://arxiv.org/pdf/2005.07797",
  "project_url": null,
  "publication_date": "2020-07-08",
  "publication_status": "conference-paper",
  "record_type": "paper",
  "runtime_tested": false,
  "scope_limitations_en": "The evaluation fuzzed rogue-base-station-accessible parsers in a Nucleus RTOS-based MediaTek baseband, using LTE signaling message test cases. It found memory corruption and reached about 15,000 test cases per second in total.",
  "scope_limitations_zh": "评估对象是基于 Nucleus RTOS 的联发科基带中可由伪基站触及的解析器，测试用例为 LTE 信令消息。测试发现了内存破坏问题，总吞吐量约为每秒 15,000 个测试用例。",
  "targets": [
    "firmware",
    "protocol"
  ],
  "title": "BaseSAFE: Baseband SAnitized Fuzzing through Emulation",
  "title_zh": "BaseSAFE：通过仿真实现基带净化模糊测试",
  "url": "https://doi.org/10.1145/3395351.3399360",
  "venue": "Proceedings of the 13th ACM Conference on Security and Privacy in Wireless and Mobile Networks",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06",
  "why_fits_en": "It reverse engineers and rehosts commercial baseband firmware to expose its parsers to off-device security testing.",
  "why_fits_zh": "论文对商用基带固件进行逆向分析和重宿主，使其解析器能够在设备外接受安全测试。",
  "year": 2020
}