Advances in Lightweight Cross-Architecture Procedural Debugging

As embedded software is becoming more and more prevalent in mission-critical devices such as self-driving vehicles or medical equipment, Product Security Incident Response Teams (PSIRTs) face the need to debug software across multiple architectures, often different from their host desktop machines. Concomitantly, recent updates to the European legislative framework, in particular the NIS2 and Cyber Resilience Act mandate that critical vulnerabilities be reported on a daily basis. To help bridge the gap between those upcoming regulations and the reality of the industry, this article focuses on facilitating cross-architecture vulnerability validation via partial proofs of vulnerabilities by leveraging binary libification and lightweight procedural debugging.