LEMIX: Enabling Testing of Embedded Applications as Linux Applications (Extended Report)

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Tanksalkar, Sai Ritvik, Muralee, Siddharth, Danduri, Srihari, Amusuo, Paschal, Bianchi, Antonio, Davis, James C, Machiry, Aravind Kumar
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866913890683584512
author Tanksalkar, Sai Ritvik
Muralee, Siddharth
Danduri, Srihari
Amusuo, Paschal
Bianchi, Antonio
Davis, James C
Machiry, Aravind Kumar
author_facet Tanksalkar, Sai Ritvik
Muralee, Siddharth
Danduri, Srihari
Amusuo, Paschal
Bianchi, Antonio
Davis, James C
Machiry, Aravind Kumar
contents Dynamic analysis, through rehosting, is an important capability for security assessment in embedded systems software. Existing rehosting techniques aim to provide high-fidelity execution by accurately emulating hardware and peripheral interactions. However, these techniques face challenges in adoption due to the increasing number of available peripherals and the complexities involved in designing emulation models for diverse hardware. Additionally, contrary to the prevailing belief that guides existing works, our analysis of reported bugs shows that high-fidelity execution is not required to expose most bugs in embedded software. Our key hypothesis is that security vulnerabilities are more likely to arise at higher abstraction levels. To substantiate our hypothesis, we introduce LEMIX, a framework enabling dynamic analysis of embedded applications by rehosting them as x86 Linux applications decoupled from hardware dependencies. Enabling embedded applications to run natively on Linux facilitates security analysis using available techniques and takes advantage of the powerful hardware available on the Linux platform for higher testing throughput. We develop various techniques to address the challenges involved in converting embedded applications to Linux applications. We evaluated LEMIX on 18 real-world embedded applications across four RTOSes and found 21 new bugs in 12 of the applications and all 4 of the RTOS kernels. We report that LEMIX is superior to existing state-of-the-art techniques both in terms of code coverage (~2x more coverage) and bug detection (18 more bugs).
format Preprint
id arxiv_https___arxiv_org_abs_2503_17588
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle LEMIX: Enabling Testing of Embedded Applications as Linux Applications (Extended Report)
Tanksalkar, Sai Ritvik
Muralee, Siddharth
Danduri, Srihari
Amusuo, Paschal
Bianchi, Antonio
Davis, James C
Machiry, Aravind Kumar
Cryptography and Security
Operating Systems
D.4.6; D.4.9; K.6.5
Dynamic analysis, through rehosting, is an important capability for security assessment in embedded systems software. Existing rehosting techniques aim to provide high-fidelity execution by accurately emulating hardware and peripheral interactions. However, these techniques face challenges in adoption due to the increasing number of available peripherals and the complexities involved in designing emulation models for diverse hardware. Additionally, contrary to the prevailing belief that guides existing works, our analysis of reported bugs shows that high-fidelity execution is not required to expose most bugs in embedded software. Our key hypothesis is that security vulnerabilities are more likely to arise at higher abstraction levels. To substantiate our hypothesis, we introduce LEMIX, a framework enabling dynamic analysis of embedded applications by rehosting them as x86 Linux applications decoupled from hardware dependencies. Enabling embedded applications to run natively on Linux facilitates security analysis using available techniques and takes advantage of the powerful hardware available on the Linux platform for higher testing throughput. We develop various techniques to address the challenges involved in converting embedded applications to Linux applications. We evaluated LEMIX on 18 real-world embedded applications across four RTOSes and found 21 new bugs in 12 of the applications and all 4 of the RTOS kernels. We report that LEMIX is superior to existing state-of-the-art techniques both in terms of code coverage (~2x more coverage) and bug detection (18 more bugs).
title LEMIX: Enabling Testing of Embedded Applications as Linux Applications (Extended Report)
topic Cryptography and Security
Operating Systems
D.4.6; D.4.9; K.6.5
url https://arxiv.org/abs/2503.17588