BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//talks.osfc.io//osfc-2026//talk//BHNZZ9
BEGIN:VTIMEZONE
TZID:Europe/Berlin
BEGIN:DAYLIGHT
DTSTART:20250917T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T030000
RDATE:20261025T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T030000
RDATE:20270328T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Automation of Firmware Analysis and Government Standard Reporting 
 - Paul Underhill
DTSTART;TZID=Europe/Berlin:20260917T100000
DTEND;TZID=Europe/Berlin:20260917T120000
DTSTAMP:20260817T090201Z
UID:pretalx-osfc-2026-BHNZZ9@talks.osfc.io
DESCRIPTION:This workshop introduces an early-stage web-based firmware ana
 lysis tool designed to make firmware security assessment more accessible t
 o students\, researchers\, and security practitioners. Many organisations 
 do not routinely include firmware analysis in their security workflows\, e
 ven though firmware may contain insecure services\, exposed credentials\, 
 weak configuration\, unsafe permissions\, or other security-relevant artef
 acts. The tool allows users to upload a firmware image and receive structu
 red findings generated through automated static analysis\, including extra
 ction results\, suspicious network indicators\, authentication artefacts\,
  permission issues\, and transport security indicators.\n\nThe workshop wi
 ll demonstrate how low-level firmware evidence can be converted into clear
 er security findings\, including severity information\, contextual explana
 tions\, and NIST-aligned reporting to support governance and remediation d
 iscussions. Participants will be guided through example firmware analysis 
 outputs and invited to critique the clarity\, usefulness\, and accuracy of
  the results. The session is intended to be practical and discussion-based
 \, focusing on improving the tool’s usability\, reporting structure\, an
 d relevance to real firmware security workflows. Feedback gathered during 
 the workshop will inform the next stage of development and evaluation.
LOCATION:2nd Room
URL:https://talks.osfc.io/osfc-2026/talk/BHNZZ9/
END:VEVENT
END:VCALENDAR