D3.7: Solutions for Security Testing of Low-Level System Components (first version)

This deliverable presents the first version of the RESCALE solutions that target security testing of low-level system components. Specifically, we outline the features, functionalities, and architecture of the core solutions developed within Task 3.4. Our solutions focus on both software and hardware vulnerabilities that affect low-level system components. On the software side, we introduce SafeFetch, a solution to detect and mitigate double-fetch vulnerabilities–common issues in low-level system components. We also introduce FATex, a solution to perform firmware analysis for the purpose of security testing. On the hardware side, we present InSpectre Gadget, a solution to identify and analyze the exploitability of Spectre-type vulnerabilities, which remain a significant and poorly understood attack surface for low-level system components.