2026 · Preprint
Reactive Peripheral Modeling for Faithful Firmware Rehosting
Bluezz models peripherals as stateful event-condition-action systems, coordinating interrupts, MMIO and DMA rather than treating accesses independently. It uses these models to rehost BLE firmware and reach connected protocol states for analysis and fuzzing.
Scope and limitations
The BLE evaluation covers 18 targets, with additional limited MCU examples. Hardware specifications, behavioral rules and use-case drivers require preparation and human validation; agent-generated rules do not remove that work. Coverage and reported crashes do not establish hardware equivalence or exhaustive protocol support. Nothing was executed for this review.
Why it fits this collection
Reconstructs missing peripheral semantics so firmware and protocol behavior can be inspected in emulation.
Publication and review details
- Venue
- arXiv
- Status
- Preprint
- Publication / posting date
- August 30, 2026
- Date source
- arXiv first submission date; no separate publication was verified.
- First arXiv submission
- August 30, 2026
- arXiv
- 2608.29737
- Reviewed arXiv version
- v1
Reviewed arXiv v1 as a preprint: earlier conference submissions are not acceptance. The paper links an anonymous review artifact and describes release upon acceptance; its landing page was reachable, but implementation availability and licensing were not verified.
Sources reviewed
Source review only; experiments were not rerun for this collection. Cite the original authors using the linked paper or BibTeX.