Foundations of Firmware Security

Hi,

I want to remind you about how your work is evaluated.

Your final project is about the entire process, not just the final bug you find in the control target or fuzzing a new target. We want to see your methodology, your attempts, and your learning. Each of these steps helps you get a better grade. 

See you all on Thursday.

 

 

Cheers,

Ali

 

 

Hi, 

Below is your exam schedule for 14 August. If your Mat. number is not listed, you should contact us ASAP. 

 

Mat. Nr	Exam Time
7006016	8:00
7058733	8:25
7040685	8:50
7071089	9:15
7061424	9:40
7061624	10:05
7045508	10:30
2580309	10:55
7072733	11:20
7017674	11:45
7043701	13:30
7046891	13:55
7062832	14:20

Hi, 

 

We decided to set the exam date exactly on 14 August (the original plan was between 12 and 14 August). As a result of this move, you will have one additional day to submit the final project (until 12th August instead of 11th August). We will soon provide the schedule for the exact time of your verbal exam. 

Furthermore, since one of you asked about it, you are not obliged to use Fuzzware for your firmware rehosting/fuzzing campaign. You can use any other rehosting/fuzzing tool (e.g., Hoedur, MULTIFUZZ, GDMA, P2IM, SAFIREFUZZ, Icicle, etc.) as you wish. However, you are probably way more familiar with Fuzzware now than with any other tool. 

Additionally, please take a look at the exam info presentation. It is extremely important that you deliver the required documents and materials.

 

Cheers,

Ali

 

Hi,

Just to make sure there is no confusion: The first (control) target is BLE_GAP of mbed-os (which you had to build as part of your homework). 

To make your life easier and enable fuzzing, we decided to provide you with two patches. Please apply the following:

disable-hard-float

invalid-control-write

 

If it helps, you could look at: 

https://github.com/ARMmbed/mbed-os-example-ble/tree/development/BLE_GAP

https://github.com/ARMmbed/mbed-os

https://os.mbed.com/docs/mbed-os/v6.16/build-tools/use.html

 

For those who could not do the homework, where you built the BLE GAP: Clone the BLE_GAP example from the repo BLE GAP.  Initialize the project with mbed-tools, which will automatically clone the required submodules, including the mbed-os repository. Apply the above-mentioned patches directly to the main mbed-os repository within your project directory.

Hi,

We have rescheduled the tutorial session that was previously cancelled. The new session will take place on Monday from 12:00 to 14:00.

 

You can join the session using the following Zoom link:

https://cispa-de.zoom-x.de/j/62673833430?pwd=y8ajr2CXScRac6fe0Q0rUUbzk27eE3.1

 

A recording will be provided afterward, in case the timing conflicts with other commitments.

 

Cheers,

Ali

 

Hi,

 

It was brought to our attention that some students may be affected by the escalating tensions in the Middle East, particularly due to concerns for family members in the region. We understand that such circumstances can cause ongoing stress and make it difficult to focus on your studies.

If you are experiencing difficulties as a result and are finding it hard to concentrate, please feel free to reach out. For affected students, we will offer deadline extensions for exercises on a case-by-case basis for as long as necessary.

 

Cheers,
Ali

Hi,

Some of you had a problem with the Renode challenge. We extended the deadline for the Renode challenge until the end of this week. The answer sheet will also be released end of the week.

Additionally, based on CISPA's front office request we have to move our tutorial location from C0.05 to C0.02 (right across the hall). The first lecture slide is updated to reflect this change.

 

Cheers,

Ali

 

 

Hi,

 

As mentioned today, the tutorial room for tomorrow is C0-0.07. Also, you do not need to register for two or three time slots simultaneously, you just have to register for one slot. 

Tomorrow you will get familiar with basic hardware stuff such as the UART interface.

 

Cheers,

Ali

 

Hey everyone,

Hope you're all settling into the semester smoothly.

The first tutorial session for our course will be happening next week! That means it’s time to choose your preferred tutorial slot.

Here are your options, all on Wednesday:

• 10:00–12:00

• 12:00–14:00

• 14:00–16:00

Each slot has limited space, so if one of them is crucial for your schedule, make sure to sign up quickly!

Registration opens today at 16:00 and will close on Tuesday, April 22nd at 16:00

See you soon!