Firmalice - Automatic Detection of Authentication Bypass Vulnerabilities in Binary Firmware.
Valgrind: a framework for heavyweight dynamic binary instrumentation