# Automated Dynamic Firmware Analysis at Scale: A Case Study on Embedded Web Interfaces

> The paper emulates firmware images and uses static and dynamic tools to find vulnerabilities in embedded web interfaces. It evaluated 1,925 images from 54 vendors and found vulnerabilities in 185 images.

- Authors: Andrei Costin; Apostolis Zarras; Aurélien Francillon
- Venue: arXiv
- Status: Preprint
- Publication / posting date: November 11, 2015
- Date source: First arXiv submission date.
- First arXiv submission: November 11, 2015
- arXiv: 1511.03609
- Reviewed arXiv version: v1
- Sources reviewed: 2026-11-06
- Added to the catalog: 2026-11-06
- Original paper: <https://arxiv.org/abs/1511.03609>
- PDF: <https://arxiv.org/pdf/1511.03609>
- BibTeX: <https://awesomerea.org/papers/citations/paper-dynamic-firmware-analysis-at-scale.bib>
- Catalog page: <https://awesomerea.org/papers/paper-dynamic-firmware-analysis-at-scale/>
- Record JSON: <https://awesomerea.org/papers/paper-dynamic-firmware-analysis-at-scale/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/papers/paper-dynamic-firmware-analysis-at-scale/index.md)

## Scope and limitations

The study covers embedded web interfaces and network services in COTS device firmware, including routers, modems, VoIP phones, and IP/CCTV cameras. Its method is designed for different vendors, devices, and architectures.

## Why it fits this collection

It presents a scalable firmware analysis method that combines full-system emulation with static and dynamic vulnerability discovery.

## Publication and review notes

The date and venue come from the arXiv record.

## Primary sources

1. <https://arxiv.org/abs/1511.03609>

## About this entry

Reviewed against the paper and its primary sources. Cite the original authors using the linked paper or BibTeX.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.