The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoResearchPeer-reviewed
Nonstandard Sinks Matter: A Comprehensive and Efficient Taint Analysis Framework for Vulnerability Detection in Embedded Firmware
- Published
- Record updated
Summary
Researchers propose BPDA, a bidirectional path and data flow analysis method for finding vulnerabilities in embedded firmware, especially at nonstandard library sinks that current tools miss. Tested on 84 firmware samples (Linux and VxWorks) from 8 major brands, BPDA found 163 real vulnerabilities, including 34 zero-days, with 32 confirmed by CVE/CNVD. It completed analysis in 6% of the time SaTC required and identified 21 vulnerabilities that SaTC and Mango missed.