{"667976":{"#nid":"667976","#data":{"type":"event","title":"Ph.D. Dissertation Defense - Binbin Zhao","body":[{"value":"\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003ETitle\u003C\/span\u003E\u003C\/strong\u003E\u003Cem\u003E\u003Cspan\u003E:\u0026nbsp; \u003C\/span\u003E\u003C\/em\u003E\u003Cem\u003E\u003Cspan\u003ETowards Evaluating the Security Risks of Using Third-Party Components in IoT Firmware\u003C\/span\u003E\u003C\/em\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cstrong\u003E\u003Cspan\u003ECommittee:\u003C\/span\u003E\u003C\/strong\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EDr. \u003C\/span\u003E\u003Cspan\u003ERaheem Beyah, ECE, Chair\u003C\/span\u003E\u003Cspan\u003E, Advisor\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EDr. \u003C\/span\u003E\u003Cspan\u003ESaman Zonouz, ECE\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EDr. \u003C\/span\u003E\u003Cspan\u003EBrendan Saltaformaggio, ECE\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EDr. \u003C\/span\u003E\u003Cspan\u003EYuan Tian, UCLA\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003EDr. \u003C\/span\u003E\u003C\/span\u003E\u003Cspan\u003E\u003Cspan\u003EShouling Ji, Zhejiang University\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\r\n","summary":"","format":"limited_html"}],"field_subtitle":"","field_summary":[{"value":"\u003Cp\u003ECurrently, more and more IoT devices integrate a wealth of third-party components (TPCs) in firmware to shorten the development cycle. Nevertheless, adopting TPCs in IoT firmware may lead to serious consequences. In this dissertation, we explore the security issues raised by TPCs in IoT firmware in three steps. First, we present a comprehensive overview of the security issues in real-world IoT devices. We confirm that many N-days vulnerabilities caused by TPCs are still endangering a great number of IoT devices. Second, we conduct a large-scale empirical analysis of the vulnerabilities introduced by TPCs in IoT firmware. We design and implement FirmSec, the first scalable and automated framework to analyze the TPCs used in firmware and identify the corresponding vulnerabilities. Finally, we study the TPC usage violation problem in IoT firmware. To achieve this goal, we propose UVScan, an NLP-guided and rule-driven method, to detect TPC usage violations in IoT firmware.\u003C\/p\u003E\r\n","format":"limited_html"}],"field_summary_sentence":[{"value":"Towards Evaluating the Security Risks of Using Third-Party Components in IoT Firmware"}],"uid":"28475","created_gmt":"2023-06-02 19:17:07","changed_gmt":"2023-06-02 19:17:07","author":"Daniela Staiculescu","boilerplate_text":"","field_publication":"","field_article_url":"","field_event_time":{"event_time_start":"2023-06-20T11:00:00-04:00","event_time_end":"2023-06-20T13:00:00-04:00","event_time_end_last":"2023-06-20T13:00:00-04:00","gmt_time_start":"2023-06-20 15:00:00","gmt_time_end":"2023-06-20 17:00:00","gmt_time_end_last":"2023-06-20 17:00:00","rrule":null,"timezone":"America\/New_York"},"location":"Online","extras":[],"related_links":[{"url":"https:\/\/gatech.zoom.us\/j\/95450406637","title":"Zoom link"}],"groups":[{"id":"434381","name":"ECE Ph.D. Dissertation Defenses"}],"categories":[],"keywords":[{"id":"192484","name":"PhD Defense, graduate students"}],"core_research_areas":[],"news_room_topics":[],"event_categories":[{"id":"1788","name":"Other\/Miscellaneous"}],"invited_audience":[{"id":"78771","name":"Public"}],"affiliations":[],"classification":[],"areas_of_expertise":[],"news_and_recent_appearances":[],"phone":[],"contact":[],"email":[],"slides":[],"orientation":[],"userdata":""}}}