Directed Symbolic Execution on 11 Firmware Samples (Ablation Study set)
1CPU Timevanilla DSE
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| vanilla DSEFirmware=ChibiOS RTC, DSE Heuristics=disabled2024.03 | 1 | 1.41 | — | |
| vanilla DSEFirmware=Console, DSE Heuristics=disabled2024.03 | 1 | 52.1 | — | |
| vanilla DSEFirmware=Contiki-NG Shell, DSE Heuristics=disabled2024.03 | 1 | 90 | — | |
| vanilla DSEFirmware=RF Door Lock, DSE Heuristics=disabled2024.03 | 1 | 90 | — | |
| vanilla DSEFirmware=RIOT TWR, DSE Heuristics=disabled2024.03 | 1 | 90 | — | |
| ES-Fuzz DSEFirmware=ChibiOS RTC, DSE Heuristics=enabled2024.03 | 2 | 1.41 | — | |
| ES-Fuzz DSEFirmware=GPS Tracker, DSE Heuristics=enabled2024.03 | 2 | 2.38 | — | |
| vanilla DSEFirmware=Steering Control, DSE Heuristics=disabled2024.03 | 2 | 90 | — | |
| ES-Fuzz DSEFirmware=Contiki-NG Shell, DSE Heuristics=enabled2024.03 | 4 | 2.53 | — | |
| vanilla DSEFirmware=Gateway, DSE Heuristics=disabled2024.03 | 4 | 4.28 | — | |
| ES-Fuzz DSEFirmware=uTasker MODBUS, DSE Heuristics=enabled2024.03 | 6 | 2.08 | — | |
| vanilla DSEFirmware=uTasker USB, DSE Heuristics=disabled2024.03 | 6 | 2.24 | — | |
| ES-Fuzz DSEFirmware=uTasker USB, DSE Heuristics=enabled2024.03 | 6 | 2.24 | — | |
| ES-Fuzz DSEFirmware=RIOT TWR, DSE Heuristics=enabled2024.03 | 8 | 2.48 | — | |
| ES-Fuzz DSEFirmware=Steering Control, DSE Heuristics=enabled2024.03 | 13 | 3.14 | — | |
| ES-Fuzz DSEFirmware=LiteOS IoT, DSE Heuristics=enabled2024.03 | 17 | 1.66 | — | |
| vanilla DSEFirmware=GPS Tracker, DSE Heuristics=disabled2024.03 | 27 | 18.79 | — | |
| vanilla DSEFirmware=LiteOS IoT, DSE Heuristics=disabled2024.03 | 33 | 90 | — | |
| ES-Fuzz DSEFirmware=Gateway, DSE Heuristics=enabled2024.03 | 36 | 7.22 | — | |
| vanilla DSEFirmware=uTasker MODBUS, DSE Heuristics=disabled2024.03 | 43 | 90 | — | |
| ES-Fuzz DSEFirmware=Console, DSE Heuristics=enabled2024.03 | 45 | 0.93 | — | |
| ES-Fuzz DSEFirmware=RF Door Lock, DSE Heuristics=enabled2024.03 | 53 | 1.49 | — |