Results of Firmware Downloader AMOS Project with Siemens Energy (Video and Report, Summer 2022 Project)

Symbolic picture for the article. The link opens the image in a large view.

This project is one of eight Scrum projects with industry partners that were part of the Summer 2022 AMOS Projects. Below please find the video (you may also like the other videos) and the project summary which details the final result of the project. We run these projects every semester, so please be in touch if you would like to motivate one of your own!

Project Summary

Project nameEMBA Firmware Downloader
Project missionThe mission of this project is to create a fully automated and modularized firmware crawler, that can crawl vendor websites regularly and unsupervised for previously unknown firmware images. The found images are then added to EMBArk, where the vulnerability analysis is executed, logged and visualized.
Industry partnerSiemens Energy
Team logo
Project summaryOur project consisted of two major tasks. 1. Building modules that crawl the different vendors’ website and download the available firmware files and 2. to have a robust framework, which calls the modules and handles the connection to the database and EMBArk. As vendor websites might change their design or their location over time, which might cause errors, we focused on making the framework and the modules as error tolerant as possible. This focus limited the number of vendor modules that were developed. The framework could be finished by the end of the project, as well as some modules, that proof the functionality of the software. Extending the number of modules is a possible future task.
Project illustration
Team photo
Project repository