REAFFIRM by GrammaTech is a platform for firmware analysis, component identification and extraction, and testing in emulation. It automates the unpacking, disassembly, and analysis of firmware, supporting many common firmware architectures such as IA32/X64, ARM, PPC, and MIPS. REAFFIRM provides an end-to-end pipeline from raw binary packages to actionable results: unpacking and extraction prepare available packages, such as vendor firmware updates, and find components to analyze. Deep static analysis reveals functionality, including potentially unintended design flaws. Targeted dynamic analysis (fuzzing) on firmware components finds hidden weaknesses. Multiple interfaces support workflow integration: Jupyter Notebook graphical interface, command-line interface, and Python API. REAFFIRM improves analysis efficiency and automation for quicker identification of security risks. It delivers actionable information to security analysts and reverse engineers in a user-friendly environment. REAFFIRM facilitates cyber security assessments for cyber-physical systems used in military, critical infrastructure, and everyday applications. It identifies and ranks meaningful components by relevance, aiding in cyber security assessments and evaluations of firmware for reuse. Cyber security testers can extract key components for testing, as the system isolates and virtualizes hardware-coupled firmware components, allowing testing in a virtualized environment without the risks of using real hardware. Through data science tools like Jupyter notebooks, REAFFIRM supports reproducibility and automation of reverse-engineering and testing workflows.
