Moye: A Wallbreaker for Monolithic Firmware.
Saved in:
| Title: | Moye: A Wallbreaker for Monolithic Firmware. |
|---|---|
| Authors: | Huang, Jintao1,2 huangjintao@iie.ac.cn, Yang, Kai3 yangkai@gxu.edu.cn, Wang, Gaosheng1,2 wanggaosheng@iie.ac.cn, Shi, Zhiqiang1,2 shizhiqiang@iie.ac.cn, Pan, Zhiwen1,2 panzhiwen@iie.ac.cn, Lv, Shichao1,2 lvshichao@iie.ac.cn, Sun, Limin1,2 sunliming@iie.ac.cn |
| Source: | ICSE: International Conference on Software Engineering. 2025, p264-276. 13p. |
| Subjects: | Reverse engineering, Computer firmware, Language models, Smart devices |
| Abstract: | As embedded devices become increasingly popular, monolithic firmware, known for its execution efficiency and simplicity, is widely used in resource-constrained devices. Different from ordinary firmware, the monolithic firmware image is packed without the file that indicates its format, which challenges the reverse engineering of monolithic firmware. Function identification is the prerequisite of monolithic firmware's analysis. Prior works on function identification are less effectiveness when applied to monolithic firmware due to their heavy reliance on file formats. In this paper, we propose Moye, a novel method to identify functions in monolithic firmware. We leverage the important insight that the use of registers must conform to some constraints. In particular, our approach segments the firmware, locate code sections and output the instructions. We use a masked language model to learn hiding relationships among the instructions to identify the function boundaries. We evaluate Moye using 1,318 monolithic firmware images, including 48 samples collected from widely used devices. The evaluation demonstrates that our approach significantly outperforms current works, achieving a precision greater than 98% and a recall rate greater than 97% across most datasets, showing robustness to complicated compilation options. [ABSTRACT FROM AUTHOR] |
| Copyright of ICSE: International Conference on Software Engineering is the property of Association for Computing Machinery and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.) | |
| Database: | Engineering Source |
| FullText | Links: – Type: pdflink Text: Availability: 0 |
|---|---|
| Header | DbId: egs DbLabel: Engineering Source An: 194043370 AccessLevel: 6 PubType: Conference PubTypeId: conference PreciseRelevancyScore: 0 |
| IllustrationInfo | |
| Items | – Name: Title Label: Title Group: Ti Data: Moye: A Wallbreaker for Monolithic Firmware. – Name: Author Label: Authors Group: Au Data: <searchLink fieldCode="AR" term="%22Huang%2C+Jintao%22">Huang, Jintao</searchLink><relatesTo>1,2</relatesTo><i> huangjintao@iie.ac.cn</i><br /><searchLink fieldCode="AR" term="%22Yang%2C+Kai%22">Yang, Kai</searchLink><relatesTo>3</relatesTo><i> yangkai@gxu.edu.cn</i><br /><searchLink fieldCode="AR" term="%22Wang%2C+Gaosheng%22">Wang, Gaosheng</searchLink><relatesTo>1,2</relatesTo><i> wanggaosheng@iie.ac.cn</i><br /><searchLink fieldCode="AR" term="%22Shi%2C+Zhiqiang%22">Shi, Zhiqiang</searchLink><relatesTo>1,2</relatesTo><i> shizhiqiang@iie.ac.cn</i><br /><searchLink fieldCode="AR" term="%22Pan%2C+Zhiwen%22">Pan, Zhiwen</searchLink><relatesTo>1,2</relatesTo><i> panzhiwen@iie.ac.cn</i><br /><searchLink fieldCode="AR" term="%22Lv%2C+Shichao%22">Lv, Shichao</searchLink><relatesTo>1,2</relatesTo><i> lvshichao@iie.ac.cn</i><br /><searchLink fieldCode="AR" term="%22Sun%2C+Limin%22">Sun, Limin</searchLink><relatesTo>1,2</relatesTo><i> sunliming@iie.ac.cn</i> – Name: TitleSource Label: Source Group: Src Data: <searchLink fieldCode="JN" term="%22ICSE%3A+International+Conference+on+Software+Engineering%22">ICSE: International Conference on Software Engineering</searchLink>. 2025, p264-276. 13p. – Name: Subject Label: Subjects Group: Su Data: <searchLink fieldCode="DE" term="%22Reverse+engineering%22">Reverse engineering</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+firmware%22">Computer firmware</searchLink><br /><searchLink fieldCode="DE" term="%22Language+models%22">Language models</searchLink><br /><searchLink fieldCode="DE" term="%22Smart+devices%22">Smart devices</searchLink> – Name: Abstract Label: Abstract Group: Ab Data: As embedded devices become increasingly popular, monolithic firmware, known for its execution efficiency and simplicity, is widely used in resource-constrained devices. Different from ordinary firmware, the monolithic firmware image is packed without the file that indicates its format, which challenges the reverse engineering of monolithic firmware. Function identification is the prerequisite of monolithic firmware's analysis. Prior works on function identification are less effectiveness when applied to monolithic firmware due to their heavy reliance on file formats. In this paper, we propose Moye, a novel method to identify functions in monolithic firmware. We leverage the important insight that the use of registers must conform to some constraints. In particular, our approach segments the firmware, locate code sections and output the instructions. We use a masked language model to learn hiding relationships among the instructions to identify the function boundaries. We evaluate Moye using 1,318 monolithic firmware images, including 48 samples collected from widely used devices. The evaluation demonstrates that our approach significantly outperforms current works, achieving a precision greater than 98% and a recall rate greater than 97% across most datasets, showing robustness to complicated compilation options. [ABSTRACT FROM AUTHOR] – Name: AbstractSuppliedCopyright Label: Group: Ab Data: <i>Copyright of ICSE: International Conference on Software Engineering is the property of Association for Computing Machinery and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.) |
| PLink | https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=egs&AN=194043370 |
| RecordInfo | BibRecord: BibEntity: Languages: – Code: eng Text: English PhysicalDescription: Pagination: PageCount: 13 StartPage: 264 Subjects: – SubjectFull: Reverse engineering Type: general – SubjectFull: Computer firmware Type: general – SubjectFull: Language models Type: general – SubjectFull: Smart devices Type: general Titles: – TitleFull: Moye: A Wallbreaker for Monolithic Firmware. Type: main BibRelationships: HasContributorRelationships: – PersonEntity: Name: NameFull: Huang, Jintao – PersonEntity: Name: NameFull: Yang, Kai – PersonEntity: Name: NameFull: Wang, Gaosheng – PersonEntity: Name: NameFull: Shi, Zhiqiang – PersonEntity: Name: NameFull: Pan, Zhiwen – PersonEntity: Name: NameFull: Lv, Shichao – PersonEntity: Name: NameFull: Sun, Limin IsPartOfRelationships: – BibEntity: Dates: – D: 01 M: 01 Text: 2025 Type: published Y: 2025 Titles: – TitleFull: ICSE: International Conference on Software Engineering Type: main |
| ResultId | 1 |
