FIE on firmware: finding vulnerabilities in embedded systems using symbolic execution

作者: Thomas Ristenpart , Somesh Jha , Drew Davidson , Benjamin Moench

DOI:

关键词:

摘要: … TI’s) MSP430 family of microcontrollers as our analysis target … updates the state appropriately, changing concrete values or … [11] symbolic execution engine to track live variables and to …

参考文章(32)
Ishtiaq Rouf, Rob Miller, Hossen Mustafa, Travis Taylor, Sangho Oh, Wenyuan Xu, Marco Gruteser, Wade Trappe, Ivan Seskar, None, Security and privacy vulnerabilities of in-car wireless networks: a tire pressure monitoring system case study usenix security symposium. pp. 21- 21 ,(2010)
Hovav Shacham, Karl Koscher, Alexei Czeskis, Franziska Roesner, Brian Kantor, Damon McCoy, Tadayoshi Kohno, Stefan Savage, Danny Anderson, Stephen Checkoway, Comprehensive experimental analyses of automotive attack surfaces usenix security symposium. pp. 6- 6 ,(2011)
Ulrich Stern, David L. Dill, Improved probabilistic verification by hash compaction CHARME '95 Proceedings of the IFIP WG 10.5 Advanced Research Working Conference on Correct Hardware Design and Verification Methods. pp. 206- 224 ,(1995) , 10.1007/3-540-60385-9_13
David Brumley, Thanassis Avgerinos, Sang Kil Cha, Brent Lim Tze Hao, AEG: Automatic Exploit Generation network and distributed system security symposium. ,(2011) , 10.1184/R1/6468296.V1
Peter Boonstoppel, Cristian Cadar, Dawson Engler, RWset: attacking path explosion in constraint-based test generation tools and algorithms for construction and analysis of systems. pp. 351- 366 ,(2008) , 10.1007/978-3-540-78800-3_27
Thomas Ristenpart, Benjamin Recht, Benjamin Moench, WesLee Frisby, Security analysis of smartphone point-of-sale systems WOOT'12 Proceedings of the 6th USENIX conference on Offensive Technologies. pp. 3- 3 ,(2012)
Dirk Beyer, Thomas A. Henzinger, Ranjit Jhala, Rupak Majumdar, The software model checker B last : Applications to software engineering International Journal on Software Tools for Technology Transfer. ,vol. 9, pp. 505- 525 ,(2007) , 10.1007/S10009-007-0044-Z
Trevor Hansen, Peter Schachte, Harald Søndergaard, State Joining and Splitting for the Symbolic Execution of Binaries runtime verification. ,vol. 5779, pp. 76- 92 ,(2009) , 10.1007/978-3-642-04694-0_6
Cristian Cadar, Daniel Dunbar, Dawson Engler, KLEE: unassisted and automatic generation of high-coverage tests for complex systems programs operating systems design and implementation. pp. 209- 224 ,(2008) , 10.5555/1855741.1855756
Volodymyr Kuznetsov, Johannes Kinder, Stefan Bucur, George Candea, Efficient state merging in symbolic execution programming language design and implementation. ,vol. 47, pp. 193- 204 ,(2012) , 10.1145/2254064.2254088