Combining Static Analysis and Dynamic Symbolic Execution in a Toolchain to detect Fault Injection Vulnerabilities

Guilhem Lacombe (1, 2) , David Feliot (3) , Etienne Boespflug (1, 4) , Marie-Laure Potet (1, 4)

1 UGA - Université Grenoble Alpes
2 CEA-LETI - Commissariat à l'énergie atomique et aux énergies alternatives - Laboratoire d'Electronique et de Technologie de l'Information
3 DSYS - Département Systèmes
4 VERIMAG - IMAG - VERIMAG

Mots clés: fault injection robustness evaluation; source code static analysis; symbolic execution; WooKey bootloader use-case

Domaines: Informatique; Génie logiciel [cs.SE]

Guilhem Lacombe, David Feliot, Etienne Boespflug, Marie-Laure Potet. Combining Static Analysis and Dynamic Symbolic Execution in a Toolchain to detect Fault Injection Vulnerabilities. PROOFS WORKSHOP (SECURITY PROOFS FOR EMBEDDED SYSTEMS), Sep 2021, Beijing, China. ⟨cea-03499614⟩