Machine code database for matching embedded libraries

Securing embedded systems relies on knowing and understanding the programs running on the system. Programs of modern scale import third-party libraries, which may evolve over time as they introduce and patch out vulnerabilities. Identifying component libraries and their version in a program binary is a valuable ability to harness. However, in the absence of well-kept documentation about included libraries, reference samples are needed to determine binary contents. A code matching tool developed by Professor Levchenko, called Morgoth, makes it possible to check for the inclusion of library code in an executable. With all the different embedded architectures and compilation options, an organized system is needed to track and compare these library 'variants.' We create a prototype with a small set of libraries, compilers, and architectures. We find that by examining machine code, one can differentiate library version and compiler used.

Name thesis:degree_name

M.S.

Level thesis:degree_level

Thesis

Discipline thesis:degree_discipline

Electrical & Computer Engr

Grantor

University of Illinois at Urbana-Champaign

Year dc:date

2023

Author dc:creator

• Silberg, Hamilton

Contributors dc:contributor

• Levchenko, Kiril

• Computer Security
• Compiling
• Software Identification
• Sbom
• Machine Code Matching
• Embedded Systems

Statement dc:rights

• Copyright 2023 Hamilton Silberg

Language dc:language

en, eng

Handle dc:identifier

https://hdl.handle.net/2142/121551

OAI record oai:identifier

https://www.ideals.illinois.edu/oai-pmh?verb=GetRecord&metadataPrefix=etdms&identifier=oai%3Awww.ideals.illinois.edu%3A2142%2F121551