A Middleware to Improve Analysis Coverage in IoT Vulnerability Detection

Cyberattacks targeting vulnerabilities in the in-ternet of things (IoT) devices are increasing in number an-nually. Accordingly, various methods and analysis tools for IoT vulnerability detection have been proposed. These tools should comprehensively analyze firmware to ensure vulnerability detection, in which analysis coverage is a crucial indicator. However, the analysis tools proposed in existing studies yield low analysis coverage, which results in missing certain files. To address this problem, we propose and develop a middleware with improved analysis coverage for conducting static analyses on IoT firmware. Our results were compared with that of Karonte, the most popular analysis tool among existing studies, in terms of analysis coverage. We analyzed 16 real-world firmware; our middleware improved the analysis coverage for all firmware compared to the results reported in existing studies, demonstrating its usefulness.