Improving your firmware security analysis process with FACT

Display subtitles automatically

None
In the preferred language only when the video is using another
Always in the preferred language
Always in the original language of the video

Preferred language:

Qualities

UbiCast player x

Keyboard shortcuts

Key

Action

K or space

Play / Pause

Mute / Unmute

Select next subtitles

Select next audio track

Show slide in full page or toggle automatic source change

left arrow

Seek 5s backward

right arrow

Seek 5s forward

shift + left arrow or J

Seek 10s backward

shift + right arrow or L

Seek 10s forward

control + left arrow

Seek 60s backward

control + right arrow

Seek 60s forward

shift + down arrow

Decrease volume

shift + up arrow

Increase volume

shift + comma

Decrease playback rate

shift + dot or shift + semicolon

Increase playback rate

end

Seek to end

beginning

Seek to beginning

Loading Click here to add:

Information on this media

Number of views:

536 (this month: 8)

Creation date:

July 1, 2019

Speakers:

Johannes vom Dorp

Company:

Fraunhofer FKIE

License:

CC BY-SA v4

Description

Finding flaws in firmware can be like finding a needle in a haystack. Modern devices come equipped with a desktop sized operating system and a multitude of communication interfaces. The Firmware Analysis and Comparison Tool (FACT) streamlines the analysis process to reduce the initial analysis cost of an arbitrary firmware. It automates many time consuming and tedious steps such as unpacking, component identification, and basic static code analysis. FACT provides a queryable database for cross reference of firmware and security issues. The talk will offer a short introduction to the tool architecture, showing how it can be adapted and extended for specific use cases. The main focus will be a live demonstration of FACT and it’s most useful features.

Speaker

Johannes vom Dorp (Fraunhofer FKIE)

Bio

Johannes vom Dorp is researcher at Fraunhofer FKIE. He works on security analysis focusing on firmware and hardware security.