Skip to Main content Skip to Navigation
Theses

Towards system-wide security analysis of embedded systems

Abstract : This thesis is dedicated to the improvement of dynamic analysis techniques allowing the verification of software designed for embedded systems, commonly called firmware. It is clear that the increasing pervasiveness and connectivity of embedded devices significantly increase their exposure to attacks. The consequences of a security issue can be dramatic not least in the economical field, but on the technical stage as well. Especially because of the difficulty to patch some devices. For instance, offline devices or code stored in a mask rom which are read only memory programmed during the chip fabrication. For all these reasons, it is important to thoughtfully test firmware program before the manufacturing process. This thesis presents analysis methods for system-wide testing of security and hardware components. In particular, we propose three impvrovements for partial emulation. First, Inception a dynamic analysis tool to test the security of firmware programs even when mixing different level of semantic (e.g., C/C++ mixed with assembly). Second, Steroids a high performance USB 3.0 probe that aims at minimizing the latency between the analyzer and the real device. Finally, HardSnap a hardware snapshotting method that offers higher visibility and control over the hardware peripherals. It enables testing concurently different execution paths without corrupting the hardware peripherals state.
Document type :
Theses
Complete list of metadata

https://tel.archives-ouvertes.fr/tel-03413371
Contributor : Abes Star :  Contact
Submitted on : Wednesday, November 3, 2021 - 5:10:28 PM
Last modification on : Tuesday, November 16, 2021 - 4:38:29 AM

File

CORTEGGIANI_Nassim_2020.pdf
Version validated by the jury (STAR)

Identifiers

  • HAL Id : tel-03413371, version 1

Citation

Nassim Corteggiani. Towards system-wide security analysis of embedded systems. Embedded Systems. Sorbonne Université, 2020. English. ⟨NNT : 2020SORUS285⟩. ⟨tel-03413371⟩

Share

Metrics

Les métriques sont temporairement indisponibles