Firmware binary code analysis for vulnerability detection
用于漏洞检测的固件二进制代码分析
基本信息
- 批准号:2625319
- 负责人:
- 金额:--
- 依托单位:
- 依托单位国家:英国
- 项目类别:Studentship
- 财政年份:2021
- 资助国家:英国
- 起止时间:2021 至 无数据
- 项目状态:未结题
- 来源:
- 关键词:
项目摘要
Internet of Things (IoT) constitutes a variety of devices, ranging from tiny sensors and actuators to programmable controllers that drive critical infrastructure such as water, power, through to general purpose mobile devices in the home, work, or city environment. Irrespective of the type of a device, software code, the so-called firmware, remains a common component across all of them and it is (anecdotally) believed that such code is not updated frequently, thereby leaving bugs in code forever. A side effect of having such a heterogeneous computing environment is the variety of "compiled" code running on such a diverse set of devices. This poses a challenge for developing automatic program analysis techniques to cope with the syntactically different looking code. Past research has shown that vulnerability extrapolation is a possibility, for example, through approaches to systematically compare binary code to find patterns leading to vulnerable code. In this project, we aim to investigate techniques that are tailored towards analysing binary code by stripping off syntactical differences. The project is open in the sense that one can investigate static as well as dynamic program analysis techniques, for example abstract interpretation, fuzzing etc. There is a particular focus on investigating the application of machine learning (ML) based approaches, e.g., natural language processing (NLP), to find similar code patterns. NLP-based techniques are known to work with languages with very different syntactical structure. One particular aspect is to map assembly code-based representation of compiled code in a form suitable for applying NLP. In short, the project will allow one to explore techniques to analyse binary code
物联网(IoT)由各种设备组成,从微型传感器和执行器到驱动水、电等关键基础设施的可编程控制器,再到家庭、工作或城市环境中的通用移动的设备。无论设备的类型如何,软件代码,即所谓的固件,仍然是所有设备的共同组件,并且(传闻)认为这些代码不会频繁更新,从而永远在代码中留下错误。具有这样的异构计算环境的副作用是在这样的不同设备集合上运行的各种“编译”代码。这对开发自动程序分析技术以科普语法上不同外观的代码提出了挑战。过去的研究表明,漏洞外推是一种可能性,例如,通过系统地比较二进制代码的方法来找到导致易受攻击代码的模式。在这个项目中,我们的目标是研究通过剥离语法差异来分析二进制代码的技术。该项目是开放的,因为人们可以研究静态和动态程序分析技术,例如抽象解释,模糊等,特别关注研究基于机器学习(ML)方法的应用,例如,自然语言处理(NLP),以找到类似的代码模式。众所周知,基于NLP的技术可以与具有非常不同的语法结构的语言一起工作。一个特定方面是以适合于应用NLP的形式映射编译代码的基于汇编代码的表示。简而言之,该项目将允许人们探索分析二进制代码的技术
项目成果
期刊论文数量(0)
专著数量(0)
科研奖励数量(0)
会议论文数量(0)
专利数量(0)
数据更新时间:{{ journalArticles.updateTime }}
{{
item.title }}
{{ item.translation_title }}
- DOI:
{{ item.doi }} - 发表时间:
{{ item.publish_year }} - 期刊:
- 影响因子:{{ item.factor }}
- 作者:
{{ item.authors }} - 通讯作者:
{{ item.author }}
数据更新时间:{{ journalArticles.updateTime }}
{{ item.title }}
- 作者:
{{ item.author }}
数据更新时间:{{ monograph.updateTime }}
{{ item.title }}
- 作者:
{{ item.author }}
数据更新时间:{{ sciAawards.updateTime }}
{{ item.title }}
- 作者:
{{ item.author }}
数据更新时间:{{ conferencePapers.updateTime }}
{{ item.title }}
- 作者:
{{ item.author }}
数据更新时间:{{ patent.updateTime }}
其他文献
Internet-administered, low-intensity cognitive behavioral therapy for parents of children treated for cancer: A feasibility trial (ENGAGE).
针对癌症儿童父母的互联网管理、低强度认知行为疗法:可行性试验 (ENGAGE)。
- DOI:
10.1002/cam4.5377 - 发表时间:
2023-03 - 期刊:
- 影响因子:4
- 作者:
- 通讯作者:
Differences in child and adolescent exposure to unhealthy food and beverage advertising on television in a self-regulatory environment.
在自我监管的环境中,儿童和青少年在电视上接触不健康食品和饮料广告的情况存在差异。
- DOI:
10.1186/s12889-023-15027-w - 发表时间:
2023-03-23 - 期刊:
- 影响因子:4.5
- 作者:
- 通讯作者:
The association between rheumatoid arthritis and reduced estimated cardiorespiratory fitness is mediated by physical symptoms and negative emotions: a cross-sectional study.
类风湿性关节炎与估计心肺健康降低之间的关联是由身体症状和负面情绪介导的:一项横断面研究。
- DOI:
10.1007/s10067-023-06584-x - 发表时间:
2023-07 - 期刊:
- 影响因子:3.4
- 作者:
- 通讯作者:
ElasticBLAST: accelerating sequence search via cloud computing.
ElasticBLAST:通过云计算加速序列搜索。
- DOI:
10.1186/s12859-023-05245-9 - 发表时间:
2023-03-26 - 期刊:
- 影响因子:3
- 作者:
- 通讯作者:
Amplified EQCM-D detection of extracellular vesicles using 2D gold nanostructured arrays fabricated by block copolymer self-assembly.
使用通过嵌段共聚物自组装制造的 2D 金纳米结构阵列放大 EQCM-D 检测细胞外囊泡。
- DOI:
10.1039/d2nh00424k - 发表时间:
2023-03-27 - 期刊:
- 影响因子:9.7
- 作者:
- 通讯作者:
的其他文献
{{
item.title }}
{{ item.translation_title }}
- DOI:
{{ item.doi }} - 发表时间:
{{ item.publish_year }} - 期刊:
- 影响因子:{{ item.factor }}
- 作者:
{{ item.authors }} - 通讯作者:
{{ item.author }}
{{ truncateString('', 18)}}的其他基金
An implantable biosensor microsystem for real-time measurement of circulating biomarkers
用于实时测量循环生物标志物的植入式生物传感器微系统
- 批准号:
2901954 - 财政年份:2028
- 资助金额:
-- - 项目类别:
Studentship
Exploiting the polysaccharide breakdown capacity of the human gut microbiome to develop environmentally sustainable dishwashing solutions
利用人类肠道微生物群的多糖分解能力来开发环境可持续的洗碗解决方案
- 批准号:
2896097 - 财政年份:2027
- 资助金额:
-- - 项目类别:
Studentship
A Robot that Swims Through Granular Materials
可以在颗粒材料中游动的机器人
- 批准号:
2780268 - 财政年份:2027
- 资助金额:
-- - 项目类别:
Studentship
Likelihood and impact of severe space weather events on the resilience of nuclear power and safeguards monitoring.
严重空间天气事件对核电和保障监督的恢复力的可能性和影响。
- 批准号:
2908918 - 财政年份:2027
- 资助金额:
-- - 项目类别:
Studentship
Proton, alpha and gamma irradiation assisted stress corrosion cracking: understanding the fuel-stainless steel interface
质子、α 和 γ 辐照辅助应力腐蚀开裂:了解燃料-不锈钢界面
- 批准号:
2908693 - 财政年份:2027
- 资助金额:
-- - 项目类别:
Studentship
Field Assisted Sintering of Nuclear Fuel Simulants
核燃料模拟物的现场辅助烧结
- 批准号:
2908917 - 财政年份:2027
- 资助金额:
-- - 项目类别:
Studentship
Assessment of new fatigue capable titanium alloys for aerospace applications
评估用于航空航天应用的新型抗疲劳钛合金
- 批准号:
2879438 - 财政年份:2027
- 资助金额:
-- - 项目类别:
Studentship
Developing a 3D printed skin model using a Dextran - Collagen hydrogel to analyse the cellular and epigenetic effects of interleukin-17 inhibitors in
使用右旋糖酐-胶原蛋白水凝胶开发 3D 打印皮肤模型,以分析白细胞介素 17 抑制剂的细胞和表观遗传效应
- 批准号:
2890513 - 财政年份:2027
- 资助金额:
-- - 项目类别:
Studentship
Understanding the interplay between the gut microbiome, behavior and urbanisation in wild birds
了解野生鸟类肠道微生物组、行为和城市化之间的相互作用
- 批准号:
2876993 - 财政年份:2027
- 资助金额:
-- - 项目类别:
Studentship
相似国自然基金
Improving modelling of compact binary evolution.
- 批准号:10903001
- 批准年份:2009
- 资助金额:20.0 万元
- 项目类别:青年科学基金项目
相似海外基金
SaTC: CORE: Small: Semantics-Oriented Binary Code Analysis Learning from Recent Advances in Deep Learning
SaTC:核心:小型:面向语义的二进制代码分析从深度学习的最新进展中学习
- 批准号:
2304720 - 财政年份:2022
- 资助金额:
-- - 项目类别:
Standard Grant
SBIR Phase I: Enabling Robust Binary Code AI via Novel Disassembly
SBIR 第一阶段:通过新颖的反汇编实现鲁棒的二进制代码 AI
- 批准号:
2112109 - 财政年份:2021
- 资助金额:
-- - 项目类别:
Standard Grant
RAISE: Creation of an Advanced Public Binary Neutron Star Initial Data Code for the Einstein Toolkit
RAISE:为爱因斯坦工具包创建先进的公共双中子星初始数据代码
- 批准号:
2136036 - 财政年份:2021
- 资助金额:
-- - 项目类别:
Standard Grant
Firmware Binary Code Analysis forVulnerability Detection Towards Cyber Security of IoT
用于物联网网络安全漏洞检测的固件二进制代码分析
- 批准号:
2603687 - 财政年份:2021
- 资助金额:
-- - 项目类别:
Studentship
SaTC: CORE: Small: Semantics-Oriented Binary Code Analysis Learning from Recent Advances in Deep Learning
SaTC:核心:小型:面向语义的二进制代码分析从深度学习的最新进展中学习
- 批准号:
1953073 - 财政年份:2020
- 资助金额:
-- - 项目类别:
Standard Grant
DNA methylation based binary enhancers govern neuronal allocation to coding in the hippocampus
基于 DNA 甲基化的二元增强子控制海马体编码的神经元分配
- 批准号:
9788108 - 财政年份:2018
- 资助金额:
-- - 项目类别:
DNA methylation based binary enhancers govern neuronal allocation to coding in the hippocampus
基于 DNA 甲基化的二元增强子控制海马体编码的神经元分配
- 批准号:
10427296 - 财政年份:2018
- 资助金额:
-- - 项目类别:
SBIR Phase I: Building Extensible and Customizable Binary Code Analytics Engine for Malware Intelligence as a Service
SBIR 第一阶段:为恶意软件情报即服务构建可扩展且可定制的二进制代码分析引擎
- 批准号:
1746819 - 财政年份:2018
- 资助金额:
-- - 项目类别:
Standard Grant
DNA methylation based binary enhancers govern neuronal allocation to coding in the hippocampus
基于 DNA 甲基化的二元增强子控制海马体编码的神经元分配
- 批准号:
10191058 - 财政年份:2018
- 资助金额:
-- - 项目类别:
CAREER: A Dual-VM Binary Code Reuse Based Framework for Automated Virtual Machine Introspection
职业:基于双虚拟机二进制代码重用的自动化虚拟机自省框架
- 批准号:
1834215 - 财政年份:2018
- 资助金额:
-- - 项目类别:
Continuing Grant