AutoPatch: Automated Generation of Hotpatches for Real-Time Embedded Devices

• URL: http://arxiv.org/abs/2408.15372v1
• Date: Tue, 27 Aug 2024 19:11:39 GMT
• Title: AutoPatch: Automated Generation of Hotpatches for Real-Time Embedded Devices
• Abstract summary: Real-time embedded devices like medical or industrial devices are increasingly targeted by cyber-attacks. Hotpatching is an approach to apply a patch to mission-critical embedded devices without rebooting them. We propose AutoPatch, a new hotpatching technique that automatically generates equivalent hotpatches via static analysis of the official patches.
• Score: 8.026313049094147
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Real-time embedded devices like medical or industrial devices are increasingly targeted by cyber-attacks. Prompt patching is crucial to mitigate the serious consequences of such attacks on these devices. Hotpatching is an approach to apply a patch to mission-critical embedded devices without rebooting them. However, existing hotpatching approaches require developers to manually write the hotpatch for target systems, which is time-consuming and error-prone. To address these issues, we propose AutoPatch, a new hotpatching technique that automatically generates functionally equivalent hotpatches via static analysis of the official patches. AutoPatch introduces a new software triggering approach that supports diverse embedded devices, and preserves the functionality of the official patch. In contrast to prior work, AutoPatch does not rely on hardware support for triggering patches, or on executing patches in specialized virtual machines. We implemented AutoPatch using the LLVM compiler, and evaluated its efficiency, effectiveness and generality using 62 real CVEs on four embedded devices with different specifications and architectures running popular RTOSes. We found that AutoPatch can fix more than 90% of CVEs, and resolve the vulnerability successfully. The results revealed an average total delay of less than 12.7 $\mu s$ for fixing the vulnerabilities, representing a performance improvement of 50% over RapidPatch, a state-of-the-art approach. Further, our memory overhead, on average, was slightly lower than theirs (23%). Finally, AutoPatch was able to generate hotpatches for all four devices without any modifications.

Related papers

• PatchBench: Evaluating AI Agents for Vulnerability Patching [9.083611812336539]
  We propose a new benchmark for evaluating AI agents on realistic vulnerability patching tasks.<n> PatchBench selects vulnerabilities whose ground-truth fixes lie outside the crash stack and uses vulnerability transplant and code mutations to migrate historical vulnerabilities into new repository contexts.<n>Across 11 state-of-the-art agents, including the top three AIxCC agents, the original PoC-only validations the patching task solve rate of agents by 1.83$times$ on average.
  arXiv  Detail & Related papers  (2026-09-03T16:44:22Z)
• Patch Policy: Efficient Embodied Control via Dense Visual Representations [52.199962246592285]
  We develop Patch Policy to consume dense pre-trained patch tokens directly without the computational overhead of a full VLM.<n>Our method achieves a 40% relative improvement over policies using state-of-the-art global-pooled representations.<n>It surpasses fine-tuned OpenVLA-OFT by 18% while using roughly 0.7% of the parameters.
  arXiv  Detail & Related papers  (2026-07-20T17:59:41Z)
• Patchlings: Safety-Preserving Flash-Based Hotpatching for Automotive Microcontrollers [2.8577135915003034]
  We introduce Patchlings, the first hotpatching framework designed for compliance, safety, and persistence in automotive systems.<n>It fills the gap in applying hotpatching to automotive systems and fundamentally reduces the mean-time-to-mitigate (MTTM) for vulnerabilities and bugs.<n>Our results demonstrate low overhead (e.g. 3.3 $$s when a patch is applied), small firmware size increase (e.g., as low as 6.34%), and successful patching of different types of real CVEs.
  arXiv  Detail & Related papers  (2026-05-27T00:51:57Z)
• PatchBlock: A Lightweight Defense Against Adversarial Patches for Embedded EdgeAI Devices [5.082257334702858]
  Adrial attacks pose a significant challenge to the reliable deployment of machine learning models in EdgeAI applications.<n>We present PatchBlock, a framework designed to detect and neutralize adversarial patches in images.<n>We show that PatchBlock consistently improves robustness, recovering up to 77% of model accuracy under strong patch attacks.
  arXiv  Detail & Related papers  (2026-01-01T15:04:16Z)
• Match & Mend: Minimally Invasive Local Reassembly for Patching N-day Vulnerabilities in ARM Binaries [5.645823801022895]
  Low-cost Internet of Things (IoT) devices are increasingly popular but often insecure due to poor update regimes.<n>We propose to patch IoT firmware at the binary level, without requiring vendor support.<n>In particular, we introduce minimally invasive local reassembly, a new technique for automatically patching known (n-day) vulnerabilities in IoT firmware.
  arXiv  Detail & Related papers  (2025-10-16T07:31:42Z)
• PatchVSR: Breaking Video Diffusion Resolution Limits with Patch-wise Video Super-Resolution [65.09345929328586]
  We propose an innovative approach, called PatchVSR, which integrates a dual-stream adapter for conditional guidance.<n> Experiments demonstrate that our method can synthesize high-fidelity, high-resolution details at the patch level.<n>We can achieve highly competitive 4K VSR based on a 512x512 resolution base model, with extremely high efficiency.
  arXiv  Detail & Related papers  (2025-09-30T09:55:14Z)
• Dynamic Vulnerability Patching for Heterogeneous Embedded Systems Using Stack Frame Reconstruction [10.905694063940425]
  Existing dynamic vulnerability patching techniques are not well-suited for embedded devices.<n>We propose a hot patching framework called StackPatch that facilitates patch development based on stack frame reconstruction.<n>We tested StackPatch on embedded devices featuring three major microcontroller (MCU) architectures: ARM, RISC-V, and Xtensa.
  arXiv  Detail & Related papers  (2025-09-12T13:00:45Z)
• Optimization-Free Patch Attack on Stereo Depth Estimation [51.792201754821804]
  We present PatchHunter, the first adversarial patch attack against Stereo Depth Estimation (SDE)<n>PatchHunter formulates patch generation as a reinforcement learning-driven search over a structured space of visual patterns crafted to disrupt SDE assumptions.<n>We validate PatchHunter across three levels: the KITTI dataset, the CARLA simulator, and real-world vehicle deployment.
  arXiv  Detail & Related papers  (2025-06-21T08:23:02Z)
• AutoPatch: Multi-Agent Framework for Patching Real-World CVE Vulnerabilities [7.812032134834162]
  Large Language Models (LLMs) have emerged as promising tools in software development.<n>Their knowledge is limited to a fixed cutoff date, making them prone to generating code vulnerable to newly disclosed CVEs.<n>We propose AutoPatch, a framework designed to patch vulnerable LLM-generated code.
  arXiv  Detail & Related papers  (2025-05-07T07:49:05Z)
• Automated Software Vulnerability Patching using Large Language Models [24.958856670970366]
  We leverage the power and merits of pre-trained large language models (LLMs) to enable automated vulnerability patching. To elicit LLMs to effectively reason about vulnerable code behaviors, we introduce adaptive prompting on LLMs. Our evaluation of LLM on real-world vulnerable code including zeroday vulnerabilities demonstrates its superior performance to both existing prompting methods and state-of-the-art non-LLM-based techniques.
  arXiv  Detail & Related papers  (2024-08-24T14:51:50Z)
• Automating Zero-Shot Patch Porting for Hard Forks [12.622409703778604]
  We propose a large language model (LLM) based approach to automatically port patches for hard forks on a function-wise basis. PPatHF can correctly port 131 (42.3%) patches and automate 57% of the manual edits required for the developer to port the patch.
  arXiv  Detail & Related papers  (2024-04-27T17:40:39Z)
• SKU-Patch: Towards Efficient Instance Segmentation for Unseen Objects in Auto-Store [102.45729472142526]
  In large-scale storehouses, precise instance masks are crucial for robotic bin picking. This paper presents a new patch-guided instance segmentation solution, leveraging only a few image patches for each incoming new SKU. SKU-Patch yields an average of nearly 100% grasping success rate on more than 50 unseen SKUs in a robot-aided auto-store logistic pipeline.
  arXiv  Detail & Related papers  (2023-11-08T12:44:38Z)
• Patch-CLIP: A Patch-Text Pre-Trained Model [6.838615442552715]
  patch representation learning has emerged as a necessary research direction for exploiting the capabilities of machine learning in software generation. We introduce. theweak-CLIP, a novel pre-training framework for patches and natural language text. We show that. theweak-CLIP sets new state-of-the-art performance, consistently outperforming the state-of-the-art in metrics like BLEU, ROUGE-L, METEOR, and Recall.
  arXiv  Detail & Related papers  (2023-10-19T14:00:19Z)
• RAP-Gen: Retrieval-Augmented Patch Generation with CodeT5 for Automatic Program Repair [75.40584530380589]
  We propose a novel Retrieval-Augmented Patch Generation framework (RAP-Gen) RAP-Gen explicitly leveraging relevant fix patterns retrieved from a list of previous bug-fix pairs. We evaluate RAP-Gen on three benchmarks in two programming languages, including the TFix benchmark in JavaScript, and Code Refinement and Defects4J benchmarks in Java.
  arXiv  Detail & Related papers  (2023-09-12T08:52:56Z)
• Task-agnostic Defense against Adversarial Patch Attacks [25.15948648034204]
  Adversarial patch attacks mislead neural networks by injecting adversarial pixels within a designated local region. We present PatchZero, a task-agnostic defense against white-box adversarial patches. Our method achieves SOTA robust accuracy without any degradation in the benign performance.
  arXiv  Detail & Related papers  (2022-07-05T03:49:08Z)
• Defending Object Detectors against Patch Attacks with Out-of-Distribution Smoothing [21.174037250133622]
  We introduce OODSmoother, which characterizes the properties of approaches that aim to remove adversarial patches. This framework naturally guides us to design 1) a novel adaptive attack that breaks existing patch attack defenses on object detectors, and 2) a novel defense approach SemPrior that takes advantage of semantic priors. We find that SemPrior alone provides up to a 40% gain, or up to a 60% gain when combined with existing defenses.
  arXiv  Detail & Related papers  (2022-05-18T15:20:18Z)
• Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection [142.24869736769432]
  Adversarial patch attacks pose a serious threat to state-of-the-art object detectors. We propose Segment and Complete defense (SAC), a framework for defending object detectors against patch attacks. We show SAC can significantly reduce the targeted attack success rate of physical patch attacks.
  arXiv  Detail & Related papers  (2021-12-08T19:18:48Z)
• DPT: Deformable Patch-based Transformer for Visual Recognition [57.548916081146814]
  We propose a new Deformable Patch (DePatch) module which learns to adaptively split the images into patches with different positions and scales in a data-driven way. The DePatch module can work as a plug-and-play module, which can easily be incorporated into different transformers to achieve an end-to-end training.
  arXiv  Detail & Related papers  (2021-07-30T07:33:17Z)
• PatchmatchNet: Learned Multi-View Patchmatch Stereo [70.14789588576438]
  We present PatchmatchNet, a novel and learnable cascade formulation of Patchmatch for high-resolution multi-view stereo. With high speed and low memory requirement, PatchmatchNet can process higher resolution imagery and is more suited to run on resource limited devices than competitors that employ 3D cost volume regularization.
  arXiv  Detail & Related papers  (2020-12-02T18:59:02Z)
• PatchAttack: A Black-box Texture-based Attack with Reinforcement Learning [31.255179167694887]
  Patch-based attacks introduce a perceptible but localized change to the input that induces misclassification. Our proposed PatchAttack is query efficient and can break models for both targeted and non-targeted attacks.
  arXiv  Detail & Related papers  (2020-04-12T19:31:09Z)
• (De)Randomized Smoothing for Certifiable Defense against Patch Attacks [136.79415677706612]
  We introduce a certifiable defense against patch attacks that guarantees for a given image and patch attack size. Our method is related to the broad class of randomized smoothing robustness schemes. Our results effectively establish a new state-of-the-art of certifiable defense against patch attacks on CIFAR-10 and ImageNet.
  arXiv  Detail & Related papers  (2020-02-25T08:39:46Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.