OSFC 2019 - Hardening Firmware Components with Host-based Analysis Tools

This talk was held at 9elements Cyber Security's Open Source Firmware Conference in Silicon Valley.

Presenter: Brian Richardson
Abstract:
Sophisticated attackers are targeting system firmware in search of new exploits. Firmware is normally subjected to rigorous integration testing, but how do developers perform more intensive unit testing to reduce errors prior to system integration?
Host-based Firmware Analyzer was recently contributed to TianoCore, an open source community for UEFI development. This is a tool for firmware component analysis with a focus on fuzzing & symbolic testing of firmware components. Host-based methods isolate firmware components in the developer’s OS environment and leverages existing open source analysis tools (ex: AFL, Peach, KLEE).
This session provides an overview of the Linux-based tool and how it is used to improve efficiency of firmware security test cases.

WEBSITE: https://osfc.io
TWITTER: https://twitter.com/osfc_io
FACEBOOK: https://facebook.com/osfc.io
PAPER: https://2019.osfc.io/talks/hardening-firmware-components-with-host-based-analysis-tools.html
ORGANIZER: https://9esec.io

Видео OSFC 2019 - Hardening Firmware Components with Host-based Analysis Tools канала Open Source Firmware Conference