Automated Black-box Security Testing of Smart Embedded Devices

This talk presents Diane, a black-box fuzzer that combines static and dynamic analysis of Android companion apps to find functions that generate useful inputs for IoT devices. It also describes testing 11 devices and applying the approach to update mechanisms and trusted execution environments.