Identifying Multi-Binary Vulnerabilities in Embedded Firmware at Scale

This presentation describes an approach to finding insecure interactions among binaries in embedded firmware at scale. It covers firmware challenges, static and dynamic analysis, binary dependencies, and evaluation of the detection method.

Syllabus

Introduction
Why should we analyze firmware
Common vulnerabilities
Protection mechanisms
Firmwares challenges
Dynamic analysis
Dynamic analysis limitations
Static analysis
Firmware is mostly multibinary
Binary architecture
Example
Research Background
Canon Architecture
Firmware Packing
Border Binary
Parsing Score
Binary Dependency Graph
Semantic CPF
The Problem
Insecure Interaction Detection
Data Analysis
Intention
Team dependencies
Evaluation
Experiments
Evaluation Results
Evaluation Results Summary
GitHub
Conclusion