Repository logo

Infoscience

  • English
  • French
Log In
Logo EPFL, École polytechnique fédérale de Lausanne

Infoscience

  • English
  • French
Log In
  1. Home
  2. Academic and Research Output
  3. Conferences, Workshops, Symposiums, and Seminars
  4. Reverse Engineering of Binary Device Drivers with RevNIC
 
conference paper

Reverse Engineering of Binary Device Drivers with RevNIC

Chipounov, Vitaly  
•
Candea, George  
2010
Proceedings of the 5th ACM SIGOPS/EuroSys European Conference on Computer Systems (EuroSys)
5th ACM SIGOPS/EuroSys European Conference on Computer Systems (EuroSys)

This paper presents a technique that helps automate the reverse engineering of device drivers. It takes a closed-source binary driver, automatically reverse engineers the driver’s logic, and synthesizes new device driver code that implements the exact same hardware protocol as the original driver. This code can be targeted at the same or a different OS. No vendor documentation or source code is required. Drivers are often proprietary and available for only one or two operating systems, thus restricting the range of device support on all other OSes. Restricted device support leads to low market viability of new OSes and hampers OS researchers in their efforts to make their ideas available to the “real world.” Reverse engineering can help automate the porting of drivers, as well as produce replacement drivers with fewer bugs and fewer security vulnerabilities. Our technique is embodied in RevNIC, a tool for reverse engineering network drivers. We use RevNIC to reverse engineer four proprietary Windows drivers and port them to four different OSes, both for PCs and embedded systems. The synthesized network drivers deliver performance nearly identical to that of the original drivers.

  • Files
  • Details
  • Metrics
Type
conference paper
DOI
10.1145/1755913.1755932
Web of Science ID

WOS:000279535100013

Author(s)
Chipounov, Vitaly  
Candea, George  
Date Issued

2010

Published in
Proceedings of the 5th ACM SIGOPS/EuroSys European Conference on Computer Systems (EuroSys)
Start page

167

End page

180

Subjects

Device drivers

•

Reverse engineering

•

Binary Closed-source

•

Proprietary software

Editorial or Peer reviewed

REVIEWED

Written at

EPFL

EPFL units
DSLAB  
Event nameEvent placeEvent date
5th ACM SIGOPS/EuroSys European Conference on Computer Systems (EuroSys)

Paris, France

April 2010

Available on Infoscience
February 23, 2010
Use this identifier to reference this record
https://infoscience.epfl.ch/handle/20.500.14299/47655
Logo EPFL, École polytechnique fédérale de Lausanne
  • Contact
  • infoscience@epfl.ch

  • Follow us on Facebook
  • Follow us on Instagram
  • Follow us on LinkedIn
  • Follow us on X
  • Follow us on Youtube
AccessibilityLegal noticePrivacy policyCookie settingsEnd User AgreementGet helpFeedback

Infoscience is a service managed and provided by the Library and IT Services of EPFL. © EPFL, tous droits réservés