Abstract: A computer-implemented method for detecting vulnerabilities, malware and implants within infrastructure binaries includes receiving an infrastructure binary associated with infrastructure components, extracting the binary using binary analysis tools to decompose and retrieve individual executable components, and applying multiple analysis techniques. The techniques include decompiling the extracted binary using a rule-based decompiler that utilizes interprocedural analysis, implements reverse engineering techniques including type recovery and discovery using convolutional neural networks trained on disassembled code patterns, constructs control flow graphs through parallel processing, and conducts whole-program analysis.

Abstract: Systems and methods are provided herein for monitoring and identifying potential security vulnerabilities in hardware and/or firmware of host devices. In an example, a client system includes a data interface, a processor, and a storage device storing instructions executable by the processor to collect firmware and/or hardware information relating to the client system and transmit, via the data interface, data associated with the firmware and/or hardware information to a remote device.