Important Update: We have updated the repository to include firmware download links in firmware_download_list.csv and firmware_ftp_list.csv. This firmware can be downloaded using tools like wget. We will continue to update the list as we collect more firmware images in the future.
We collected 16.9 TB of firmware images from the official websites of vendors, open FTP sites, and open-source repositories. Currently, 157,141 firmware images (about 6 TB) from 204 vendors have been pre-processed. The corresponding products of these firmware images are commonly used in consumer markets, such as networking devices, cameras, and smart home devices. The pre-processing for other firmware images is still running since these procedures requires a large amount of computation. The pre-processed firmware images are open-source for research purposes, the distribution of their architecture type and OS type is shown in the Fig.1. For more details, please see our paper "Work-in-Progress: Measuring Security Protection in Real-time Embedded Firmware".
If you find our dataset helpful, please consider citing our papers.
@inproceedings{wu2024firmware,
title={Your Firmware Has Arrived: A Study of Firmware Update Vulnerabilities},
author={Wu, Yuhao and Wang, Jinwen and Wang, Yujie and Zhai, Shixuan and Li, Zihan and He, Yi and Sun, Kun and Li, Qi and Zhang, Ning},
booktitle={USENIX Security Symposium},
year={2024}
}
@inproceedings{wu2022measuring,
title={Work-in-Progress: Measuring Security Protection in Real-time Embedded Firmware},
author={Wu, Yuhao and Wang, Yujie and Zhai, Shixuan and Li, Zihan and Li, Ao and Wang, Jinwen and Zhang, Ning},
booktitle={IEEE Real-Time Systems Symposium (RTSS)},
year={2022}
}