Juniper Networks, Inc.

ZhenYing Li

Tian Chen

Haiyu Wang

Yu Jia

A software patch is generated by determining the binary differences between a more secure version of the embedded system firmware and the currently operating, vulnerable version. The differences are extracted and analyzed to determine their basis in the source code for the more secure version. Source code that affects the binary differences may be compiled into a binary file and linked, off-line, with the binary executable file that contains the machine code for the currently operating version of the embedded system firmware, producing a security patch. The security patch may be installed on the embedded system at run-time, and it is then executed to modify the currently operating firmware to redirect firmware operation from vulnerable procedures toward the new, secure procedures contained in the software patch.

Growing community of inventors

Beijing, China

ZhenYing Li