Analysis and Testing of Embedded Code

A method comprising:

• obtaining a binary code of an embedded device;
• performing static analysis of the binary code to identify a potentially vulnerable code region, wherein a potentially vulnerable code region is associated with providing input or output from code units of the binary code;
• identifying propagation paths associated with the potentially vulnerable code region in the binary code;
• analyzing the propagation paths to identify a potentially exploitable propagation path, wherein the potentially exploitable propagation path is potentially affected by external input that is inputted to a device executing the binary code;
• determining a code patch associated with the potentially exploitable propagation path;
• performing fuzz testing on the code patch independently from the binary code, whereby detecting embedded code vulnerabilities;
• and
• in response to detecting an embedded code vulnerability, performing an action.

A system comprising a processor and coupled memory, the processor being adapted to:

• obtain a binary code of an embedded device;
• performing static analysis of the binary code to identify a potentially vulnerable code region, wherein a potentially vulnerable code region is associated with providing input or output from code units of the binary code;
• identify propagation paths associated with the potentially vulnerable code region in the binary code;
• analyze the propagation paths to identify a potentially exploitable propagation path, wherein the potentially exploitable propagation path is potentially affected by external input that is inputted to a device executing the binary code;
• determine a code patch associated with the potentially exploitable propagation path;
• perform fuzz testing on the code patch independently from the binary code, whereby detecting embedded code vulnerabilities;
• and
• in response to detecting an embedded code vulnerability, perform an action.

A computer program product comprising a non-transitory computer readable storage medium retaining program instructions, which program instructions when read by a processor, cause the processor to perform:

• obtaining a binary code of an embedded device;
• performing static analysis of the binary code to identify a potentially vulnerable code region, wherein a potentially vulnerable code region is associated with providing input or output from code units of the binary code;
• identifying propagation paths associated with the potentially vulnerable code region in the binary code;
• analyzing the propagation paths to identify a potentially exploitable propagation path, wherein the potentially exploitable propagation path is potentially affected by external input that is inputted to a device executing the binary code;
• determining a code patch associated with the potentially exploitable propagation path;
• performing fuzz testing on the code patch independently from the binary code, whereby detecting embedded code vulnerabilities;
• and
• in response to detecting an embedded code vulnerability, performing an action.