Embedded Firmware Dynamic Analysis Environment

# Embedded Firmware Dynamic Analysis Environment

AI Summary

Purpose:

Record Hyunwook Kim's 2019 hands-on embedded/PLC firmware dynamic-analysis environment work from the 2021 portfolio PDF, without duplicating the existing UART acquisition and fuzzing portfolio cards.

Key points:

Project window: 2019.03–2019.10 during Sejong University M.S. research.
Public-safe scope: building dynamic analysis environments for PLC/control-device firmware and real embedded devices using On-Chip Debugging, debug shells, UART/JTAG, and static-analysis procedures.
Distinct from the existing UART paper page: this entry focuses on turning physical/debug access into a repeatable dynamic-analysis environment and shell-level device inspection, including VxWorks shell access and magic-key recovery on router targets.

Relevant when:

Explaining graduate-school hands-on firmware analysis beyond fuzzing papers and patents.
Adding or reviewing technical portfolio items about embedded/PLC/OT firmware analysis.

Do not read full document unless:

Linked documents:

Exact device/vendor list beyond the PDF's visible TL-WR886N and "several routers" is not verified here.
Do not claim vulnerability IDs or exploit outcomes from this project unless separately sourced.

Primary source:

ai/sources/academic/2021-portfolio-extract.md, extracted from the user's uploaded 2021 portfolio PDF.

This work sits between firmware acquisition and automated fuzzing:

Identify or create a route into the device via hardware/debug interfaces.
Use On-Chip Debugging, debug shell, UART/JTAG, or device-provided features to observe firmware behavior.
Document static/dynamic analysis setup procedures, including IDA-based static-analysis steps and environment-specific debugging methods.
Use the environment to inspect control-device/embedded firmware and prepare later vulnerability-analysis or fuzzing work.

Source-PDF fields:

Source-PDF results:

Built an environment to dynamically analyze PLC/control-device firmware.
Built firmware analysis environments through On-Chip Debugging.
Used debug shells and other device-provided functions as analysis routes.
Identified additional dynamic-analysis environment setup methods.
Researched static/dynamic firmware-analysis methodology.
Documented static-analysis procedures such as IDA usage.
Documented environment setup procedures and debugging methods for each environment.
Proposed a methodology for control-system firmware vulnerability-analysis environments.
Produced a research result report.

Source-PDF fields:

Section: Embedded Analysis.
Period: 2019.03–2019.10.
Research purpose: graduate lab research project; obtain embedded-device shells through UART/JTAG.
Development content: connect UART and JTAG to real devices and obtain a VxWorks shell.
Result: recovered magic keys from several routers and reached VxWorks shells.

Visual evidence in the source PDF:

Use this as a standalone portfolio item only if the page clearly avoids overlap:

Do not re-sell the existing UART paper as a new item.
Do not re-sell IoTFirmFuzz/EF-Fuzz results.
Focus on the operational analysis environment: physical access, debug interfaces, static/dynamic workflow, and shell-level firmware inspection.

Suggested public title:

Suggested tags:

PLC, Firmware Analysis, UART/JTAG, VxWorks, On-Chip Debugging, IDA Pro, Embedded Security