Star on GitHubStar1.1k stars

2015 · Preprint

Automated Dynamic Firmware Analysis at Scale: A Case Study on Embedded Web Interfaces

The paper emulates firmware images and uses static and dynamic tools to find vulnerabilities in embedded web interfaces. It evaluated 1,925 images from 54 vendors and found vulnerabilities in 185 images.

Scope and limitations

The study covers embedded web interfaces and network services in COTS device firmware, including routers, modems, VoIP phones, and IP/CCTV cameras. Its method is designed for different vendors, devices, and architectures.

Why it fits this collection

It presents a scalable firmware analysis method that combines full-system emulation with static and dynamic vulnerability discovery.

Publication and review details

Venue
arXiv
Status
Preprint
Publication / posting date
November 11, 2015
Date source
First arXiv submission date.
First arXiv submission
November 11, 2015
arXiv
1511.03609
Reviewed arXiv version
v1

The date and venue come from the arXiv record.

Sources reviewed

Reviewed against the paper and its primary sources. Cite the original authors using the linked paper or BibTeX.

Report an outdated entry Suggest a translation fix

Primary sources

  1. https://arxiv.org/abs/1511.03609
↑↓ move↵ open⌘↵ new tab