Inception: System-Wide Security Testing of Real-World Embedded Systems Software
summary
A framework that merges LLVM bitcode from C/C++, hand‑written assembly, raw binaries and a partial processor model to preserve source semantics and run system‑wide symbolic execution. Inception Translator generates and merges mixed‑level bitcode, a KLEE‑based Inception Symbolic Virtual Machine applies memory and peripheral heuristics, and the Inception Debugger forwards memory accesses to real hardware over JTAG. Validation compares 53,000 executions on an ARM Cortex‑M3; evaluation across 1,624 synthetic programs, 4 real apps and 19 demos finds 8 crashes and 2 previously unknown vulnerabilities.
AI-written summary · about
chapters (4)
- 0:00Start
- 3:11Symbolic Execution
- 9:06Interaction between the Firmware and Hardware Which Is Not Defined in the Source Code
- 10:43The Inception Translator
related talks
51mFull System Emulation: Achieving Successful Automated Dynamic Analysis of Evasive Malware
21mDeveloping secure applications
31mBypassing Anti-Debugging: A Hybrid Real-Simulated Approach to Rootkit Analysis
24mSymbiotic: finding bugs in C programs
45m"Advanced Malware Threat: handling obfuscated code using..."
14mCollapsing Towers for Side-Channel Security
03mImperas
28mForward Symbolic Execution for Trustworthy Automation of Binary Code Verification