A Large-Scale Analysis of the Security of Embedded Firmwares

By Andrei Costin, Jonas Zaddach, Aurélien Francillon, Davide Balzarotti. USENIX Security Symposium, 2014

475 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/5f32428ab4f97e33a54c2a622b6787274a4fccad

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

SoK: Security Evaluation of Home-Based IoT Deployments (2019, background): “[36] conducted a large-scale study on firmware analysis and found an array of flaws.”
Security and privacy challenges in industrial Internet of Things (2015, background): “[23] However, some publications count diﬀerently [53]. with electronics, which provides these objects with identiﬁcation, computing, and communication capabilities.”
Neural Network-based Graph Embedding for Cross-Platform Binary Code Similarity Detection (2017, background): “[11], are indeed efficient when searching bugs at large scale, but they are only designed for specific bugs with obvious artifacts, and cannot handle more general cases.”
Firmalice - Automatic Detection of Authentication Bypass Vulnerabilities in Binary Firmware (2015, methodology): “Costin et al. [10] carried out an analysis of over 30,000 firmware samples.”
IoT Security: Ongoing Challenges and Research Opportunities (2014, background): “[10][11] Program analysis can discover software vulnerabilities before the product is released.”
Understanding the Mirai Botnet (2017, background): “Researchers have found that IoT devices contain vulnerabilities from the firmware level [18, 19] up to the application level [26, 29, 73, 78].”
Demystifying IoT Security: An Exhaustive Survey on IoT Vulnerabilities and a First Empirical Look on Internet-Scale IoT Exploitations (2019, background): “Software-based [72], [74], [83], [92]–[95]”
Security for 5G and Beyond (2019, background): “On the other hand, a large-scale analysis of firmware images [337] reveal that embedded systems are ripe with security vulnerabilities.”
Cross-architecture bug search in binary executables (2015, background): “Software on embedded devices (firmware), is usually closed-source, implemented in an unsafe language, and re-uses potentially vulnerable code from third-party projects [5, 26].”
A Search Engine Backed by Internet-Wide Scanning (2015, background): “There have been a large number of research studies over the past several years that have been based on Internet-wide scanning [1, 7–11,13,14,18,19,24–29,38], which encouraged us to develop Censys.”
C-FLAT: Control-Flow Attestation for Embedded Systems Software (2016, background): “Keywords remote attestation; control-flow attacks; embedded system security”
Towards Automated Dynamic Analysis for Linux-based Embedded Firmware (2016, methodology): “[8] recently analyzed a dataset of approximately 32, 000 firmware images.”
Scalable Graph-based Bug Search for Firmware Images (2016, background): “As several integration vendors may rely upon the same subcontractors, tools, or SDKs provided by third-party vendors [19], bugs generated during the development process can be spread across hundreds or even thousands of IoT devices with similar ﬁrmware.”
Handling a trillion (unfixable) flaws on a billion devices: Rethinking network security for the Internet-of-Things (2015, background): “The fourth example is a CCTV setup with unprotected RSA key pairs in the firmware image for ≈30K devices [20].”