{"id":"https://openalex.org/W7165762342","doi":"https://doi.org/10.48550/arxiv.2606.24549","title":"FirmCure:Towards Autonomous and Adaptive Rehosting of Linux-Based Firmware","display_name":"FirmCure:Towards Autonomous and Adaptive Rehosting of Linux-Based Firmware","publication_year":2026,"publication_date":"2026-06-23","ids":{"openalex":"https://openalex.org/W7165762342","doi":"https://doi.org/10.48550/arxiv.2606.24549"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.24549","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.24549","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.24549","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052512997","display_name":"Chuan Hong","orcid":"https://orcid.org/0000-0001-7056-9559"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hong, Chuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139220190","display_name":"Zheng Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Zheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139240846","display_name":"Lei Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Lei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139226775","display_name":"Laisong Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Laisong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042487776","display_name":"Chenyifan Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Chenyifan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011086655","display_name":"Z Zhangqin Huang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Ze","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113903386","display_name":"X J Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Xu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5013806282","display_name":"Peihong Lin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lin, Peihong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.5667999982833862,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.5667999982833862,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.11069999635219574,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.05649999901652336,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.9553999900817871},{"id":"https://openalex.org/keywords/initialization","display_name":"Initialization","score":0.7268999814987183},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5655999779701233},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4837999939918518},{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.39649999141693115},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.3644999861717224},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.31790000200271606}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.9553999900817871},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7567999958992004},{"id":"https://openalex.org/C114466953","wikidata":"https://www.wikidata.org/wiki/Q6034165","display_name":"Initialization","level":2,"score":0.7268999814987183},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5655999779701233},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.5289999842643738},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4837999939918518},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.40389999747276306},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.39649999141693115},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.3644999861717224},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.31790000200271606},{"id":"https://openalex.org/C2780615836","wikidata":"https://www.wikidata.org/wiki/Q2471869","display_name":"USable","level":2,"score":0.28999999165534973},{"id":"https://openalex.org/C63540848","wikidata":"https://www.wikidata.org/wiki/Q3140932","display_name":"Fault tolerance","level":2,"score":0.28529998660087585},{"id":"https://openalex.org/C175551986","wikidata":"https://www.wikidata.org/wiki/Q47089","display_name":"Fault (geology)","level":2,"score":0.2849999964237213},{"id":"https://openalex.org/C22174128","wikidata":"https://www.wikidata.org/wiki/Q175869","display_name":"Microcode","level":2,"score":0.27469998598098755},{"id":"https://openalex.org/C2775928411","wikidata":"https://www.wikidata.org/wiki/Q2041312","display_name":"Fault injection","level":3,"score":0.2651999890804291},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.26440000534057617},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.25540000200271606}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.24549","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.24549","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.24549","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.24549","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.4153454005718231,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Full-system":[0],"rehosting":[1,37,61,75,82],"plays":[2],"a":[3,103,143],"critical":[4],"role":[5],"in":[6,35,59],"the":[7,36,65,71],"security":[8,177],"analysis":[9],"of":[10,83],"Linux-based":[11,84],"firmware.":[12,85,167],"It":[13],"matches":[14],"commonly":[15],"deployed":[16],"firmware":[17,95,132],"with":[18],"sufficient":[19],"background":[20],"knowledge.":[21],"However,":[22],"for":[23,78,107,118],"custom":[24],"devices,":[25],"existing":[26],"approaches":[27],"struggle":[28],"to":[29,93],"handle":[30],"initialization":[31],"and":[32,43,57,80,111,126,149,174],"runtime":[33,123],"obstacles":[34],"process":[38],"caused":[39],"by":[40,102],"specialized":[41],"architectures":[42],"hardware-dependent":[44],"configuration,":[45],"which":[46],"heavily":[47],"rely":[48],"on":[49],"expert":[50],"intervention.":[51],"This":[52],"ultimately":[53],"creates":[54],"fundamental":[55],"bottlenecks":[56],"results":[58],"low":[60],"efficiency.":[62],"To":[63],"address":[64],"above":[66],"challenges,":[67],"we":[68],"propose":[69],"FirmCure,":[70],"first":[72],"LLM-driven":[73],"full-system":[74],"framework":[76,169],"designed":[77],"autonomous":[79],"adaptive":[81],"FirmCure":[86,141],"develops":[87],"an":[88,113],"Adaptive":[89],"Perception":[90],"Inference":[91],"mechanism":[92],"extract":[94],"structural":[96],"dependencies":[97],"via":[98],"static":[99],"analysis,":[100],"followed":[101],"Reflective":[104],"Synthesis":[105],"module":[106,117],"iterative":[108],"configuration":[109],"optimization,":[110],"finally":[112],"Autonomous":[114],"Runtime":[115],"Intervention":[116],"real-time":[119],"error":[120],"remediation":[121],"through":[122],"fault":[124],"diagnosis":[125],"monitoring.":[127],"We":[128],"evaluated":[129],"21":[130],"IoT":[131],"images":[133],"from":[134],"10":[135],"vendors":[136],"across":[137,165],"5":[138],"architectures,":[139],"while":[140],"achieved":[142],"100%":[144],"network":[145],"port":[146],"opening":[147],"rate":[148],"90.5%":[150],"service":[151],"interactivity,":[152],"substantially":[153],"outperforming":[154],"state-of-the-art":[155],"baselines.":[156],"Our":[157],"experiments":[158],"confirm":[159],"that":[160],"FirmCure's":[161],"intervention":[162],"strategies":[163],"generalize":[164],"heterogeneous":[166],"The":[168],"successfully":[170],"reproduces":[171],"known":[172],"vulnerabilities":[173],"discovers":[175],"new":[176],"flaws.":[178]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-25T00:00:00"}
