Design of Firmware Bluetooth Protocol Vulnerability Mining Framework Based on Virtualization

In recent years, the applications of Bluetooth devices become increasingly widespread. Bluetooth devices that are vulnerable could lead to information leakage, economic loss and other consequences. However, there is a delay in updating the firmware program for Bluetooth devices, and some of them cannot even be updated in real time. Currently, there is a relative lack of vulnerability mining tools for the firmware Bluetooth protocol. Existing firmware fuzz testing tools fail to simultaneously meet the requirements of virtualization, interactivity, MCU applicability, and the availability of feedback and guidance mechanisms, simulation accuracy, and error detection mechanisms. Therefore, this paper proposes a virtualization-based fuzz testing scheme for firmware Bluetooth protocol stacks, named BBFirmBTFuzz. The scheme achieves simulation of various devices to simultaneously support RTOS firmware programs and bare-metal firmware programs. It also simulates Bluetooth controllers. Experimental results demonstrate that BBFirmBTFuzz can effectively conduct fuzz testing on the Cordio Bluetooth protocol stack.