# Reactive Peripheral Modeling for Faithful Firmware Rehosting

> Bluezz models peripherals as stateful event-condition-action systems, coordinating interrupts, MMIO and DMA rather than treating accesses independently. It uses these models to rehost BLE firmware and reach connected protocol states for analysis and fuzzing.

- Authors: Qinying Wang; Florian Hofhammer; Eduard Vlad; Jianqiang Wang; Marcel Busch; Shouling Ji; Mathias Payer
- Venue: arXiv
- Status: Preprint
- Publication / posting date: August 30, 2026
- Date source: arXiv first submission date; no separate publication was verified.
- First arXiv submission: August 30, 2026
- arXiv: 2608.29737
- Reviewed arXiv version: v1
- Sources reviewed: 2026-10-20
- Added to the catalog: 2026-10-20
- Original paper: <https://arxiv.org/abs/2608.29737>
- PDF: <https://arxiv.org/pdf/2608.29737v1>
- BibTeX: <https://awesomerea.org/papers/citations/paper-bluezz-rpm.bib>
- Catalog page: <https://awesomerea.org/papers/paper-bluezz-rpm/>
- Record JSON: <https://awesomerea.org/papers/paper-bluezz-rpm/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/papers/paper-bluezz-rpm/index.md)

## Scope and limitations

The BLE evaluation covers 18 targets, with additional limited MCU examples. Hardware specifications, behavioral rules and use-case drivers require preparation and human validation.

## Why it fits this collection

Reconstructs missing peripheral semantics so firmware and protocol behavior can be inspected in emulation.

## Publication and review notes

Reviewed arXiv v1 as a preprint: earlier conference submissions are not acceptance. The paper links an anonymous review artifact and describes release upon acceptance; its landing page was reachable, but implementation availability and licensing were not verified.

## Primary sources

1. <https://arxiv.org/abs/2608.29737v1>
2. <https://arxiv.org/html/2608.29737v1>

## About this entry

Reviewed against the paper and its primary sources. Cite the original authors using the linked paper or BibTeX.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.