{
  "added_at": "2026-10-20",
  "arxiv_id": "2608.29737",
  "arxiv_version_reviewed": "v1",
  "authors": [
    "Qinying Wang",
    "Florian Hofhammer",
    "Eduard Vlad",
    "Jianqiang Wang",
    "Marcel Busch",
    "Shouling Ji",
    "Mathias Payer"
  ],
  "bibtex_url": "https://awesomerea.org/papers/citations/paper-bluezz-rpm.bib",
  "code_url": null,
  "date_basis": "arXiv first submission date; no separate publication was verified.",
  "date_basis_zh": "采用 arXiv 首次提交日期，未核实另行出版的版本。",
  "date_precision": "day",
  "description_en": "Bluezz models peripherals as stateful event-condition-action systems, coordinating interrupts, MMIO and DMA rather than treating accesses independently. It uses these models to rehost BLE firmware and reach connected protocol states for analysis and fuzzing.",
  "description_zh": "Bluezz 将外设建模为具有状态的事件—条件—动作系统，协调中断、MMIO 与 DMA，而非孤立处理各次访问；据此迁移 BLE 固件，进入已连接协议状态进行分析与模糊测试。",
  "doi": null,
  "entry_url": "https://awesomerea.org/papers/paper-bluezz-rpm/",
  "entry_url_zh": "https://awesomerea.org/zh/papers/paper-bluezz-rpm/",
  "evidence_urls": [
    "https://arxiv.org/abs/2608.29737v1",
    "https://arxiv.org/html/2608.29737v1"
  ],
  "first_arxiv_date": "2026-08-30",
  "id": "paper-bluezz-rpm",
  "json_url": "https://awesomerea.org/papers/paper-bluezz-rpm/record.json",
  "kind": "research",
  "markdown_url": "https://awesomerea.org/papers/paper-bluezz-rpm/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/papers/paper-bluezz-rpm/index.md",
  "metadata_notes": "Reviewed arXiv v1 as a preprint: earlier conference submissions are not acceptance. The paper links an anonymous review artifact and describes release upon acceptance; its landing page was reachable, but implementation availability and licensing were not verified.",
  "metadata_notes_zh": "按预印本审阅 arXiv v1：此前向会议投稿不等于录用。论文给出匿名评审产物链接，并说明录用后发布；入口页可访问，但未核实实现的可获取性及许可。",
  "pdf_url": "https://arxiv.org/pdf/2608.29737v1",
  "project_url": null,
  "publication_date": "2026-08-30",
  "publication_status": "preprint",
  "record_type": "paper",
  "runtime_tested": false,
  "scope_limitations_en": "The BLE evaluation covers 18 targets, with additional limited MCU examples. Hardware specifications, behavioral rules and use-case drivers require preparation and human validation.",
  "scope_limitations_zh": "BLE 评测覆盖 18 个目标，并补充了有限的其他 MCU 案例。硬件规格、行为规则与用例驱动仍需准备和人工验证。",
  "targets": [
    "firmware",
    "protocol"
  ],
  "title": "Reactive Peripheral Modeling for Faithful Firmware Rehosting",
  "title_zh": "面向忠实固件运行迁移的响应式外设建模",
  "url": "https://arxiv.org/abs/2608.29737",
  "venue": "arXiv",
  "verification": "source-reviewed",
  "verified_at": "2026-10-20",
  "why_fits_en": "Reconstructs missing peripheral semantics so firmware and protocol behavior can be inspected in emulation.",
  "why_fits_zh": "重建缺失的外设语义，使固件及协议行为可以在仿真中被观察。",
  "year": 2026
}