1. Load the baseband firmware to ida with the idb-creation directory.
2. Find the integrity protection function in the firmware with the function-identification directory.
3. Symbolic execution and automated comparative analysis can be done with the symbolic-execution directory.

Specific details are instructed in the README file of each directory.

• Eunsoo Kim ([email protected])
• Min Woo Baek ([email protected])
• CheolJun Park ([email protected])
• Dongkwan Kim ([email protected])
• Yongdae Kim ([email protected])
• Insu Yun ([email protected])

@proceedings{kim:basecomp,
 address = {Anaheim, CA},
 author = {Eunsoo Kim and Min Woo Baek and CheolJun Park and Dongkwan Kim and Yongdae Kim and Insu Yun},
 booktitle = {Proceedings of the 32nd USENIX Security Symposium (Security)},
 month = {August},
 title = {{BaseComp: A Comparative Analysis for Integrity Protection in Cellular Baseband Software (to appear)}},
 year = {2023}
}