{"id":1327,"date":"2022-09-30T10:51:06","date_gmt":"2022-09-30T08:51:06","guid":{"rendered":"https:\/\/fordaysec.de\/firmware-hardening\/"},"modified":"2023-12-14T12:08:07","modified_gmt":"2023-12-14T11:08:07","slug":"firmware-hardening","status":"publish","type":"page","link":"https:\/\/fordaysec.de\/en\/firmware-hardening","title":{"rendered":"Firmware hardening"},"content":{"rendered":"\n
<\/span>
\n

<\/p>\n<\/div><\/div>\n\n\n

Home<\/a><\/span> | Firmware hardening<\/span><\/span><\/div>\n\n\n
\n
\n
\n

FIRMWARE HARDENING<\/h3>\n<\/div>\n\n\n\n
<\/div>\n<\/div>\n\n\n\n
\n
\n

A variety of Internet of Things (IoT) devices are increasingly being used in homes and businesses. These devices run software that is often based on open source products in combination with proprietary code developed by manufacturers. However, manufacturers often pay little attention to IT security. Especially for low-cost products, security updates are provided only for a limited time or not at all, and customer support may be unreliable. Thus, known security vulnerabilities in the incorporated open source projects remain permanently open and attackers can still successfully exploit them years later. <\/p>\n\n\n\n

The goal of this project is to harden the IoT infrastructure by closing vulnerabilities directly on the devices. Known vulnerabilities in open source projects are to be collected and, with the help of samples, detected directly in the device software and subsequently eliminated, even if a manufacturer does not provide any assistance for this. <\/p>\n\n\n\n

The focus of this project is on the software aspects of such an approach for hardening firmware. Semantic patches will precisely match and remove specific vulnerabilities, while preserving the integrity and functionality of the firmware. Functional tests will confirm the successful application. <\/p>\n<\/div>\n\n\n\n

\n
\n
\"\"
from left to right.: Johannes Kinder; Sebastian J\u00e4nich<\/figcaption><\/figure>\n<\/div><\/div>\n\n\n\n

Contact<\/strong><\/p>\n\n\n\n

Prof. Dr. Johannes Kinder
Ludwig-Maximilians-Universit\u00e4t M\u00fcnchen
E-Mail: johannes.kinder@ifi.lmu.de<\/a>
Phone: +49 (0) 89 6004-7335<\/p>\n\n\n\n

Sebastian J\u00e4nich
E-Mail: sebastian.jaenich@ifi.lmu.de<\/a><\/p>\n<\/div>\n<\/div>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"

A variety of Internet of Things (IoT) devices are increasingly being used in homes and businesses. These devices run software…<\/p>\n","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":20,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-1327","page","type-page","status-publish"],"acf":[],"yoast_head":"\nFirmware hardening - fordaysec<\/title>\n<meta name=\"description\" content=\"The focus of this project is on the software side aspects for hardening open source firmware when it has security vulnerabilities.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fordaysec.de\/en\/firmware-hardening\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Firmware hardening - fordaysec\" \/>\n<meta property=\"og:description\" content=\"The focus of this project is on the software side aspects for hardening open source firmware when it has security vulnerabilities.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fordaysec.de\/en\/firmware-hardening\" \/>\n<meta property=\"og:site_name\" content=\"fordaysec\" \/>\n<meta property=\"article:modified_time\" content=\"2023-12-14T11:08:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/fordaysec.de\/wp-content\/uploads\/2022\/09\/A02-Kinder-1.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/fordaysec.de\\\/en\\\/firmware-hardening\",\"url\":\"https:\\\/\\\/fordaysec.de\\\/en\\\/firmware-hardening\",\"name\":\"Firmware hardening - fordaysec\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/fordaysec.de\\\/en#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/fordaysec.de\\\/en\\\/firmware-hardening#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/fordaysec.de\\\/en\\\/firmware-hardening#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/fordaysec.de\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/A02-Kinder-1.jpg\",\"datePublished\":\"2022-09-30T08:51:06+00:00\",\"dateModified\":\"2023-12-14T11:08:07+00:00\",\"description\":\"The focus of this project is on the software side aspects for hardening open source firmware when it has security vulnerabilities.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/fordaysec.de\\\/en\\\/firmware-hardening#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/fordaysec.de\\\/en\\\/firmware-hardening\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/fordaysec.de\\\/en\\\/firmware-hardening#primaryimage\",\"url\":\"https:\\\/\\\/fordaysec.de\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/A02-Kinder-1.jpg\",\"contentUrl\":\"https:\\\/\\\/fordaysec.de\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/A02-Kinder-1.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/fordaysec.de\\\/en\\\/firmware-hardening#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/fordaysec.de\\\/en\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Firmware hardening\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/fordaysec.de\\\/en#website\",\"url\":\"https:\\\/\\\/fordaysec.de\\\/en\",\"name\":\"fordaysec\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/fordaysec.de\\\/en#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/fordaysec.de\\\/en?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/fordaysec.de\\\/en#organization\",\"name\":\"fordaysec\",\"url\":\"https:\\\/\\\/fordaysec.de\\\/en\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/fordaysec.de\\\/en#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/fordaysec.de\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/ForDaySec-Logo.png\",\"contentUrl\":\"https:\\\/\\\/fordaysec.de\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/ForDaySec-Logo.png\",\"width\":1000,\"height\":410,\"caption\":\"fordaysec\"},\"image\":{\"@id\":\"https:\\\/\\\/fordaysec.de\\\/en#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Firmware hardening - fordaysec","description":"The focus of this project is on the software side aspects for hardening open source firmware when it has security vulnerabilities.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fordaysec.de\/en\/firmware-hardening","og_locale":"en_US","og_type":"article","og_title":"Firmware hardening - fordaysec","og_description":"The focus of this project is on the software side aspects for hardening open source firmware when it has security vulnerabilities.","og_url":"https:\/\/fordaysec.de\/en\/firmware-hardening","og_site_name":"fordaysec","article_modified_time":"2023-12-14T11:08:07+00:00","og_image":[{"url":"https:\/\/fordaysec.de\/wp-content\/uploads\/2022\/09\/A02-Kinder-1.jpg","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/fordaysec.de\/en\/firmware-hardening","url":"https:\/\/fordaysec.de\/en\/firmware-hardening","name":"Firmware hardening - fordaysec","isPartOf":{"@id":"https:\/\/fordaysec.de\/en#website"},"primaryImageOfPage":{"@id":"https:\/\/fordaysec.de\/en\/firmware-hardening#primaryimage"},"image":{"@id":"https:\/\/fordaysec.de\/en\/firmware-hardening#primaryimage"},"thumbnailUrl":"https:\/\/fordaysec.de\/wp-content\/uploads\/2022\/09\/A02-Kinder-1.jpg","datePublished":"2022-09-30T08:51:06+00:00","dateModified":"2023-12-14T11:08:07+00:00","description":"The focus of this project is on the software side aspects for hardening open source firmware when it has security vulnerabilities.","breadcrumb":{"@id":"https:\/\/fordaysec.de\/en\/firmware-hardening#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fordaysec.de\/en\/firmware-hardening"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/fordaysec.de\/en\/firmware-hardening#primaryimage","url":"https:\/\/fordaysec.de\/wp-content\/uploads\/2022\/09\/A02-Kinder-1.jpg","contentUrl":"https:\/\/fordaysec.de\/wp-content\/uploads\/2022\/09\/A02-Kinder-1.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/fordaysec.de\/en\/firmware-hardening#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/fordaysec.de\/en"},{"@type":"ListItem","position":2,"name":"Firmware hardening"}]},{"@type":"WebSite","@id":"https:\/\/fordaysec.de\/en#website","url":"https:\/\/fordaysec.de\/en","name":"fordaysec","description":"","publisher":{"@id":"https:\/\/fordaysec.de\/en#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fordaysec.de\/en?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/fordaysec.de\/en#organization","name":"fordaysec","url":"https:\/\/fordaysec.de\/en","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/fordaysec.de\/en#\/schema\/logo\/image\/","url":"https:\/\/fordaysec.de\/wp-content\/uploads\/2022\/09\/ForDaySec-Logo.png","contentUrl":"https:\/\/fordaysec.de\/wp-content\/uploads\/2022\/09\/ForDaySec-Logo.png","width":1000,"height":410,"caption":"fordaysec"},"image":{"@id":"https:\/\/fordaysec.de\/en#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/fordaysec.de\/en\/wp-json\/wp\/v2\/pages\/1327","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fordaysec.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/fordaysec.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/fordaysec.de\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/fordaysec.de\/en\/wp-json\/wp\/v2\/comments?post=1327"}],"version-history":[{"count":7,"href":"https:\/\/fordaysec.de\/en\/wp-json\/wp\/v2\/pages\/1327\/revisions"}],"predecessor-version":[{"id":1837,"href":"https:\/\/fordaysec.de\/en\/wp-json\/wp\/v2\/pages\/1327\/revisions\/1837"}],"wp:attachment":[{"href":"https:\/\/fordaysec.de\/en\/wp-json\/wp\/v2\/media?parent=1327"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}