badnack/karonte repository overview

⁠Karonte

Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware.

⁠Research paper

We present our approach and the findings of this work in the following research paper:

KARONTE: Detecting Insecure Multi-binary Interactions in Embedded Firmware [PDF]⁠ Nilo Redini, Aravind Machiry, Ruoyu Wang, Chad Spensky, Andrea Continella, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna. To appear in Proceedings of the IEEE Symposium on Security & Privacy (S&P), May 2020

If you use Karonte in a scientific publication, we would appreciate citations using this Bibtex entry:

@inproceedings{redini_karonte_20,
 author    = {Nilo Redini and Aravind Machiry and Ruoyu Wang and Chad Spensky and Andrea Continella and Yan Shoshitaishvili and Christopher Kruegel and Giovanni Vigna},
 booktitle = {To appear in Proceedings of the IEEE Symposium on Security & Privacy (S&P)},
 month     = {May},
 title     = {KARONTE: Detecting Insecure Multi-binary Interactions in Embedded Firmware},
 year      = {2020}
}

⁠Repository Structure

There are four main directories:

• tool: karonte python files
• firmware: karonte firmware dataset
• configs: configuration files to analyze the firmware samples in the dataset
• eval: scripts to run the various evaluations on karonte

⁠Run Karonte

To run karonte, from the root directory, just run

By default, results are saved in /tmp/ with the suffix Karonte.txt.

To inspect the generated alerts, just run:

⁠Source code

Karonte's source code can be found here⁠