https://tippenhauer.de/tags/firmware/ Firmware Source Themes Academic (https://sourcethemes.com/academic/)en-usFri, 01 Sep 2023 00:00:00 +0000 https://tippenhauer.de/images/icon_hu_79f4e50d61a92fc.png https://tippenhauer.de/tags/firmware/ https://tippenhauer.de/project/proseca/ Fri, 01 Sep 2023 00:00:00 +0000 https://tippenhauer.de/project/proseca/ <ul> <li><strong>Funding:</strong> Federal Ministry for Economic Affairs and Climate Action (BMWK, now BMWE), grant no. 19A23009</li> <li><strong>Lead institution:</strong> Infineon Technologies AG</li> <li><strong>My affiliation:</strong> CISPA Helmholtz Center for Information Security</li> <li><strong>Duration:</strong> 09/2023-06/2026</li> <li><strong>Role:</strong> PI</li> </ul> <p>Proseca aimed to identify security weaknesses in automotive systems proactively, before vehicles reach the field. The project addressed the security chain across components, software and the integrated vehicle.</p> <p><strong>Partners:</strong></p> <ul> <li>Infineon Technologies AG</li> <li>ZF Friedrichshafen AG</li> <li>SYSGO GmbH</li> <li>HighTec EDV-Systeme GmbH</li> <li>Ferrous Systems GmbH</li> <li>Fraunhofer Institute for Secure Information Technology (SIT)</li> <li>ELEXIR AG / VEECLE GmbH (subcontractors of Infineon)</li> </ul> https://tippenhauer.de/project/asriot/ Tue, 01 Aug 2023 00:00:00 +0000 https://tippenhauer.de/project/asriot/ <p><strong>Full title:</strong> Automatisierte Sicherheitsanalyse von RTOS und MCU basierter IoT Firmware</p> <ul> <li><strong>Funding:</strong> Federal Ministry of Education and Research (BMBF, now BMFTR), grant no. 16KIS1901</li> <li><strong>Lead institution:</strong> CISPA Helmholtz Center for Information Security</li> <li><strong>My affiliation:</strong> CISPA Helmholtz Center for Information Security</li> <li><strong>Duration:</strong> 08/2023-06/2026</li> <li><strong>Role:</strong> Project coordinator and PI</li> </ul> <p>Many IoT devices run firmware on microcontrollers, often based on real-time operating systems, which is difficult to analyse without the original hardware. ASRIOT developed methods to analyse such firmware automatically. The project combined emulation of firmware without the target hardware (rehosting) with fuzzing to find vulnerabilities at scale. The goal was to make security testing of MCU- and RTOS-based firmware practical for researchers and manufacturers.</p> <p><strong>Partners:</strong></p> <ul> <li>ZF Friedrichshafen AG</li> <li>ONEKEY GmbH</li> <li>Fraunhofer Institute for Applied and Integrated Security (AISEC)</li> </ul>