Automating Firmware Vulnerability Triage via High-Level Representations and Similarity Digests

This repository contains the dataset, target artifacts, and analysis scripts used in the paper 'Automating Firmware Vulnerability Triage via High-Level Representations and Similarity Digests'.

📂 Repository Structure

openwrt-binary-analysis-corpus/
├── analysis/ # Results and output data
│ ├── final_report.json # Full results (TLSH function hashes + metadata)
│ ├── vuln_functions.json # Manually extracted vulnerable functions (TLSH)
│ └── analysis_summary.json # Summary of the analysis
├── firmware_images/ # OpenWrt firmware images (18.06.0 - 24.10.4)
│ ├── 18.06.0-x86_64-openwrt-18.06.0-x86-64-rootfs-ext4.img
│ ├── 18.06.0-arm-openwrt-18.06.0-armvirt-64-default-rootfs.tar.gz
│ └── ...
├── target_binaries/ # Analyzed target binaries
│ ├── x86/
│ │ ├── dnsmasq-18.06.0
│ │ ├── opkg-18.06.0
│ │ ├── uhttpd-18.06.0
│ │ └── ...
│ └── arm/
│ └── ...
├── scripts/ # Automation tools
| ├── apotheosis/ # APOTHEOSIS index construction script
│ ├── script.py # Main analysis script
│ └── requirements.txt # Python dependencies
└── README.md