Machine code database for matching embedded libraries

Silberg, Hamilton

Permalink

https://hdl.handle.net/2142/121551 Copy

Description

Title

Machine code database for matching embedded libraries

Author(s)

Silberg, Hamilton

Issue Date

2023-07-19

Director of Research (if dissertation) or Advisor (if thesis)

Levchenko, Kiril

Department of Study

Electrical & Computer Eng

Discipline

Electrical & Computer Engr

Degree Granting Institution

University of Illinois at Urbana-Champaign

Degree Name

M.S.

Degree Level

Thesis

Keyword(s)

• Computer Security
• Compiling
• Software Identification
• SBOM
• Machine Code Matching
• Embedded Systems

Abstract

Securing embedded systems relies on knowing and understanding the programs running on the system. Programs of modern scale import third-party libraries, which may evolve over time as they introduce and patch out vulnerabilities. Identifying component libraries and their version in a program binary is a valuable ability to harness. However, in the absence of well-kept documentation about included libraries, reference samples are needed to determine binary contents. A code matching tool developed by Professor Levchenko, called Morgoth, makes it possible to check for the inclusion of library code in an executable. With all the different embedded architectures and compilation options, an organized system is needed to track and compare these library 'variants.' We create a prototype with a small set of libraries, compilers, and architectures. We find that by examining machine code, one can differentiate library version and compiler used.

Graduation Semester

2023-08

Type of Resource

Thesis

Copyright and License Information

Copyright 2023 Hamilton Silberg

Owning Collections