2026-09-21T17:16:13Z https://www.ideals.illinois.edu/oai-pmh

oai:www.ideals.illinois.edu:2142/124686 2026-01-14 col_2142_5131 col_2142_8888 com_2142_5130 com_2142_8887 com_2142_234

Levchenko, Kirill 2024-05 application/pdf en text Submission published under a 24 month embargo labeled 'Closed Access', the embargo will last until 2026-05-01 The student, Anthea Chen, accepted the attached license on 2024-04-22 at 20:01. The student, Anthea Chen, submitted this Thesis for approval on 2024-04-22 at 20:02. This Thesis was approved for publication on 2024-04-30 at 14:52. DSpace SAF Submission Ingestion Package generated from Vireo submission #20561 on 2024-09-16 at 00:50:05 Binary lifting and formal verification of control algorithms in embedded firmware Chen, Anthea 2024-04-30 Security Emulation Industrial Control Fuzzing Lifting In this thesis, I present two novel contributions: ANANKE, a framework for abstracting control algorithms in firmware by dynamically rewriting and reducing symbolic expressions during symbolic execution, and an emulation-based fuzzing framework for GPU firmware security testing. ANANKE extends the symbolic execution system angr to skip program regions and replace them with abstractions while maintaining the integrity of the symbolic state’s semantics. The framework allows users to nest abstractions, creating an extensible lifting framework. ANANKE’s effectiveness is demonstrated by lifting continuous equations from quad-copter and PLC firmware, uncovering bugs and reproducing attacks. The GPU fuzzing framework combines the Unicorn emulation engine, AFL fuzzer, and custom GPU models to uncover vulnerabilities in GPU firmware and drivers. The framework targets the device manager communication protocol and modules written in Ada/SPARK, demonstrating the effectiveness of emulation-based fuzzing for GPU security testing. The thesis contributions include: (1) ANANKE a tool for lifting control algorithms from firmware binaries; (2) a specification language for symbolic expression rewriting and program region abstraction; (3) a demonstration of ANANKE on real-world firmware; (4) an emulation-based fuzzing framework for GPU firmware security testing; and (5) an exploration of fuzzing techniques on NVIDIA Hopper/Blackwell GPU firmware, complementing Ada/SPARK’s formal verification. Text eng https://hdl.handle.net/2142/124686 Copyright 2024 Anthea Chen M.S. Thesis Electrical & Computer Engr University of Illinois at Urbana-Champaign Electrical & Computer Eng