Increasing the security of devices procured by BMLV (embedded systems) by examining binary files for backdoors.
A large part of the critical IT infrastructure and IoT devices used by the BMLV is manufactured outside of Austria and Europe. The FiBack3 project, which is being carried out as part of the FFG funding program FORTE (2020), aims at the (partly) automated analysis of this more critical IT infrastructure regarding backdoors installed by the manufacturer. Until now, such an analysis was largely manual and therefore very time-consuming. FiBack3 will increase automation of this process, from firmware extraction to backdoor detection, and thus create the possibility to check more components. For this purpose, the project is developing techniques and methods that have already shown their potential in a different context and with less depth and is developing new hybrid approaches that augment the automated analyses with expert knowledge in order to find more and deeper and hidden security gaps.
Research issues addressed by the project are
- What is a Backdoor?
- How to find them (semi-)automated?
- Which information is relevant for analysts?
Facts
- Project duration: January 2022 – December 2023
- Coordination: SBA Research GmbH
- Budget: € 871.000
- Funding: € 670.000
- Partner:
- Industry: IoT Inspector R&D GmbH, TrustWorks
- National Authorities and Service Providers: BMLV (Austrian Ministry for Defence)
