WFRF:(Abbas Muhammad)
Search: WFRF:(Abbas Muhammad) > DUDE: Decryption, U...
- 49 of 134
- Previous record
- Next record
- To hitlist
DUDE: Decryption, Unpacking, Deobfuscation, and Endian Conversion Framework for Embedded Devices Firmware
-
- Abbas, Haider (author)
- National University of Sciences and Technology (NUST), Islamabad, Pakistan
-
- Shahzad, Muhammad (author)
- National University of Sciences and Technology (NUST), Islamabad, Pakistan
-
- Safdar, Maliha (author)
- National University of Sciences and Technology (NUST), Islamabad, Pakistan
- show more...
- show less...
- (creator_code:org_t)
- Institute of Electrical and Electronics Engineers (IEEE), 2023
- 2023
- English.
- In: IEEE Transactions on Dependable and Secure Computing. - : Institute of Electrical and Electronics Engineers (IEEE). - 1545-5971 .- 1941-0018.
- Journal article (peer-reviewed)
Abstract
Subject headings
Close
- Commercial-Off-The-Shelf (COTS) embedded devices rely on vendor-specific firmware to perform essential tasks. These firmware have been under active analysis by researchers to check security features and identify possible vendor backdoors. However, consistently unpacking newly created filesystem formats has been exceptionally challenging. To thwart attempts at unpacking, vendors frequently use encryption and obfuscation methods. On the other hand, when handling encrypted, obfuscated, big endian cramfs, or custom filesystem formats found in firmware under test, the available literature and tools are insufficient. This study introduces DUDE, an automated framework that provides novel functionalities, outperforming cutting-edge tools in the decryption, unpacking, deobfuscation, and endian conversion of firmware. For big endian compressed romfs filesystem formats, DUDE supports endian conversion. It also supports deobfuscating obfuscated signatures for successful unpacking. Moreover, decryption support for encrypted binaries from the D-Link and MOXA series has also been added, allowing for easier analysis and access to the contents of these firmware files. Additionally, the framework offers unpacking assistance by supporting the extraction of special filesystem formats commonly found in firmware samples from various vendors. A remarkable 78% (1424 out of 1814) firmware binaries from different vendors were successfully unpacked using the suggested framework. This performance surpasses the capabilities of commercially available tools combined on a single platform.
Subject headings
- NATURVETENSKAP -- Data- och informationsvetenskap -- Datorteknik (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Computer Engineering (hsv//eng)
Keyword
- Binary analysis
- deobfuscation
- Encryption
- EPROM
- filesystem unpacking
- Hardware
- Internet of Things
- Microprogramming
- reverse engineering
- Sockets
- Task analysis
Publication and Content Type
- ref (subject category)
- art (subject category)
Find in a library
- IEEE Transactions on Dependable and Secure Computing (Search for host publication in LIBRIS)
To the university's database
- 49 of 134
- Previous record
- Next record
- To hitlist
Find more in SwePub
- By the author/editor
- Abbas, Haider
- Shahzad, Muhamma ...
- Safdar, Maliha
- Hemani, Ahmed, 1 ...
- About the subject
-
- NATURAL SCIENCES
- NATURAL SCIENCES
- and Computer and Inf ...
- and Computer Enginee ...
- Articles in the publication
- IEEE Transaction ...
- By the university
- Royal Institute of Technology
Search outside SwePub
- Extend your search to:
- Google Book Search
- Google Scholar
Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.
- Copyright © LIBRIS - National Library Systems
- LIBRIS.kb.se
