Work

Accelerating firmware vulnerability detection through directed reaching definition analysis

Year: 2025

Type: article

Abstract: The Internet of Things (IoT) has transformed industries like smart grids and homes. However, firmware security is a growing concern due to vulnerabilities like command execution and buffer overflows. To address this, we propose ReachDFuzz, a directed fuzzing method using reaching-definition analysis. It targets risky library functions affected by external inputs and integrates static analysis for path pruning. Experiments show that ReachDFuzz outperforms FirmAFL in reducing invalid paths and detecting firmware vulnerabilities.

Source: ICT Express

DOI: 10.1016/j.icte.2025.05.008

Authors: Kai Chen, Yufei Zhao, Jing Guo, Zhimin Gu, Longxi Han

Institutions: China Electric Power Research Institute, State Grid Jiangsu Electric Power (China)

Language: English

Topic: Software Testing and Debugging Techniques

Subfield: Software

Field: Computer Science

Domain: Physical Sciences

SDG: Industry, innovation and infrastructure

Open Access status: gold

Estimated APC paid: $1,500