Introducing the IBAL Library

No ratings

Presented at s4 2015 by

Finding software defects in a compiled firmware image can be time-consuming work. First a disassembly has to be generated, protocol parsing functions have to be identified, and then the actual work of finding mistakes in the application can proceed. Those in the know treat the world's favorite disassembler more as a database and API than just a disassembler. IBAL aims to make this process simpler by allowing for automated searches of dangerous assembler sequences in a processor-agnostic way. In this talk, we will examine some common vulnerabilities as well as how to more quickly find them with the IBAL library.