一句话:MITHRAS:支持 IoT 固件与移动伴侣应用通信、动态插桩和 PHP 实时追踪的动态分析框架。
固件重托管对仿真和执行设备专用固件、开展固件测试与安全评估至关重要。然而,Firmadyne、FirmAE 等现有 IoT 固件仿真方案无法模拟与外部客户端的通信,且对实时与安全测试支持有限。MITHRAS 是一个面向移动-IoT 生态的动态分析框架,支持对 IoT 设备固件进行静态插桩和完整仿真,使仿真设备能与智能手机伴侣应用等外部客户端通信;同时支持对伴侣应用代码进行动态插桩,以收集其执行细节。该框架还提供仿真设备与伴侣应用之间的无缝通信、完全集成的仿真环境,并支持 PHP 脚本执行的实时追踪。论文以演示形式展示这些能力。
Firmware re-hosting is crucial when developing methodologies to simulate and execute device-specific firmware, including techniques for firmware testing and security assessments. Although state-of-the-art solutions such as Firmadyne and FirmAE emulate IoT firmware, they cannot simulate communication with external clients and provide limited real-time and security testing support. In this demonstration, we introduce MITHRAS. This novel simulation framework enables static instrumentation and full emulation of IoT device firmware, allowing communication with external clients such as the companion app installed on a smartphone. MITHRAS also supports dynamic instrumentation of the code of the mobile companion app, allowing users to gather detailed information on the app's execution. MITHRAS supports seamless communication between the emulated IoT device and its companion smartphone app, providing a fully integrated emulation environment. Moreover, it offers real-time tracing of php script executions.