System emulation and firmware re-hosting have become popular techniques to answer various security and performance related questions, such as determining whether a firmware contain security vulnerabilities or meet timing requirements when run on a specific hardware platform. While this motivation for emulation and binary analysis has previously been explored and reported, starting to either work or research in the field is difficult. To this end, we provide a comprehensive guide for the practitioner or system emulation researcher. We layout common challenges faced during firmware re-hosting, explaining successive steps and surveying common tools used to overcome these challenges. We provide classification techniques on five different axes, including emulator methods, system type, fidelity, emulator purpose, and control. These classifications and comparison criteria enable the practitioner to determine the appropriate tool for emulation. We use our classifications to categorize popular works in the field and present 28 common challenges faced when creating, emulating, and analyzing a system from obtaining firmwares to post emulation analysis.

中文翻译：

---

固件重新托管、仿真和分析方面的挑战

系统仿真和固件重新托管已成为回答各种安全和性能相关问题的流行技术，例如确定固件在特定硬件平台上运行时是否包含安全漏洞或满足时序要求。虽然先前已经探索和报告了这种仿真和二进制分析的动机，但开始在该领域工作或研究是困难的。为此，我们为从业者或系统仿真研究人员提供了全面的指南。我们列出了固件重新托管期间面临的常见挑战，解释了连续步骤并调查了用于克服这些挑战的常用工具。我们在五个不同的轴上提供分类技术，包括仿真器方法、系统类型、保真度、仿真器目的和控制。这些分类和比较标准使从业者能够确定合适的仿真工具。我们使用我们的分类对该领域的流行作品进行分类，并提出在创建、仿真和分析系统时面临的 28 个常见挑战，从获取固件到仿真后分析。