Identification and Modification of Features in Embedded Devices

Unlike conventional computers, the embedded computers found in vehicles, routers and other Internet of Things devices lack the capability to have their software remotely updated. Vulnerabilities discovered in such devices remain unpatched, creating a large and growing attack surface. We propose to address this limitation in our Identification and Modification of Features in Embedded Devices (IMFED) framework. IMFED will reduce the functionality and complexity of COTS embedded device firmware to a minimal set required to support specific mission requirements. IMFEDs core technology is a flexible and finely granular method to identify, add, modify, or remove features in embedded device firmware. This core will be enabled by a feasibility study exploring the practicality of a new approach, hybrid emulation, for analyzing and debugging embedded device modifications.