公开(公告)号：US11568044B2

公开(公告)日：2023-01-31

申请号：US16358385

申请日：2019-03-19

Applicant: UNIVERSITY OF FLORIDA RESEARCH FOUNDATION, INC.

Inventor： Kevin Butler ,  Tuba Yavuz ,  Jing Tian ,  Grant Hernandez ,  Farhaan Fowze

IPC: G06F21/55 ,  G06F13/42 ,  G06F21/57

Abstract: Example embodiments provide methods, apparatuses, systems, computing devices, and/or the like for vetting USB device firmware via a USB-specific firmware analysis framework. In one example, a method is provided for analyzing firmware of a Universal Serial Bus (USB) device. The example method includes steps of receiving a firmware image extracted from the USB device, identifying signatures from the firmware image relating to USB operation, and building an expected model of operation of the USB device using the identified signatures and a database of operational information regarding USB devices. The example method further includes the steps of generating a recovered model of operation of the USB device based on the firmware image and the identified signatures, and comparing the recovered model of operation with the expected model of operation to identify unexpected or unknown behaviors. The example method may further include generating a report comprising the identified unexpected or unknown behaviors.

公开(公告)号：US11640464B2

公开(公告)日：2023-05-02

申请号：US16426691

申请日：2019-05-30

Applicant: University of Florida Research Foundation, Inc.

Inventor： Tuba Yavuz ,  Farhaan Fowze ,  Kevin Raymond Boyce Butler ,  Jing Tian ,  Grant Haydock Hernandez

IPC: G06F21/56 ,  G06N20/00

Abstract: The present disclosure describes a firmware analysis system and method that can generate a collection of protocol constraints from known firmware and apply the collection of protocol constraints towards an unknown firm to recognize protocol relevant fields and detect functionality within the unknown firmware.