{
  "added_at": "2026-11-06",
  "arxiv_id": "1511.03609",
  "arxiv_version_reviewed": "v1",
  "authors": [
    "Andrei Costin",
    "Apostolis Zarras",
    "Aurélien Francillon"
  ],
  "bibtex_url": "https://awesomerea.org/papers/citations/paper-dynamic-firmware-analysis-at-scale.bib",
  "code_url": null,
  "date_basis": "First arXiv submission date.",
  "date_basis_zh": "arXiv 首次提交日期。",
  "date_precision": "day",
  "description_en": "The paper emulates firmware images and uses static and dynamic tools to find vulnerabilities in embedded web interfaces. It evaluated 1,925 images from 54 vendors and found vulnerabilities in 185 images.",
  "description_zh": "论文通过全系统仿真运行固件镜像，并结合静态与动态工具发现嵌入式 Web 界面的漏洞。研究评估了来自 54 家厂商的 1,925 个固件镜像，在其中 185 个镜像中发现漏洞。",
  "doi": null,
  "entry_url": "https://awesomerea.org/papers/paper-dynamic-firmware-analysis-at-scale/",
  "entry_url_zh": "https://awesomerea.org/zh/papers/paper-dynamic-firmware-analysis-at-scale/",
  "evidence_urls": [
    "https://arxiv.org/abs/1511.03609"
  ],
  "first_arxiv_date": "2015-11-11",
  "id": "paper-dynamic-firmware-analysis-at-scale",
  "json_url": "https://awesomerea.org/papers/paper-dynamic-firmware-analysis-at-scale/record.json",
  "kind": "research",
  "markdown_url": "https://awesomerea.org/papers/paper-dynamic-firmware-analysis-at-scale/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/papers/paper-dynamic-firmware-analysis-at-scale/index.md",
  "metadata_notes": "The date and venue come from the arXiv record.",
  "metadata_notes_zh": "日期和发表场所来自 arXiv 记录。",
  "pdf_url": "https://arxiv.org/pdf/1511.03609",
  "project_url": null,
  "publication_date": "2015-11-11",
  "publication_status": "preprint",
  "record_type": "paper",
  "runtime_tested": false,
  "scope_limitations_en": "The study covers embedded web interfaces and network services in COTS device firmware, including routers, modems, VoIP phones, and IP/CCTV cameras. Its method is designed for different vendors, devices, and architectures.",
  "scope_limitations_zh": "研究范围是商用现成设备固件中的嵌入式 Web 界面和网络服务，设备包括路由器、调制解调器、VoIP 电话及 IP/CCTV 摄像头。其方法面向不同厂商、设备和架构。",
  "targets": [
    "firmware"
  ],
  "title": "Automated Dynamic Firmware Analysis at Scale: A Case Study on Embedded Web Interfaces",
  "title_zh": "大规模自动化动态固件分析：嵌入式 Web 界面案例研究",
  "url": "https://arxiv.org/abs/1511.03609",
  "venue": "arXiv",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06",
  "why_fits_en": "It presents a scalable firmware analysis method that combines full-system emulation with static and dynamic vulnerability discovery.",
  "why_fits_zh": "论文提出可扩展的固件分析方法，将全系统仿真与静态、动态漏洞发现相结合。",
  "year": 2015
}
