AVATAR: A framework to support dynamic security analysis of embedded systems' firmwares

摘要: In this paper we present Avatar, a framework that enables complex dynamic analysis of embedded devices by orchestrating the execution an emulator together with real hardware. We first introduce basic mechanism to forward I/O accesses from device, and then describe several techniques improve system’s performance dynamically optimizing distribution code data between two environments. Finally, evaluate our tool applying it three different security scenarios, including reverse engineering, vulnerability discovery hardcoded backdoor detection. To show flexibility perform on completely devices: GSM feature phone, hard disk bootloader, wireless sensor node. I. INTRODUCTION