{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,6]],"date-time":"2026-10-06T10:55:54Z","timestamp":1791284154100,"version":"4.1.0"},"publisher-location":"Cham","reference-count":45,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032387011","type":"print"},{"value":"9783032387028","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,10,7]],"date-time":"2026-10-07T00:00:00Z","timestamp":1791331200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,10,7]],"date-time":"2026-10-07T00:00:00Z","timestamp":1791331200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2027]]},"DOI":"10.1007\/978-3-032-38702-8_28","type":"book-chapter","created":{"date-parts":[[2026,10,6]],"date-time":"2026-10-06T10:40:28Z","timestamp":1791283228000},"page":"568-587","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["TransBit: Efficient Hotpatching for\u00a0Real-Time Microcontroller-Based Embedded Devices"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-3778-3885","authenticated-orcid":false,"given":"Qihang","family":"He","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-7823-4564","authenticated-orcid":false,"given":"Yunzhi","family":"Ke","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1807-4185","authenticated-orcid":false,"given":"Yi","family":"He","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8776-8730","authenticated-orcid":false,"given":"Qi","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8967-8525","authenticated-orcid":false,"given":"Qian","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,10,7]]},"reference":[{"key":"28_CR1","doi-asserted-by":"crossref","unstructured":"Amar, S., et al.: CHERIoT RTOS: an OS for fine-grained memory-safe compartments on low-cost embedded devices. In: Proceedings of the ACM SIGOPS 31st Symposium on Operating Systems Principles, pp. 67\u201384. SOSP \u201925. Association for Computing Machinery, New York (2025)","DOI":"10.1145\/3731569.3764844"},{"key":"28_CR2","unstructured":"Amazon Web Services: Amazon FreeRTOS. https:\/\/aws.amazon.com\/freertos\/, Accessed 2026-04-13"},{"key":"28_CR3","unstructured":"Android Open Source Project: A\/B (Seamless) System Updates. https:\/\/source.android.com\/docs\/core\/ota\/ab. Accessed 2026-04-13"},{"key":"28_CR4","unstructured":"Apache NuttX: Apache NuttX. https:\/\/nuttx.apache.org\/. Accessed 2026-04-13"},{"key":"28_CR5","unstructured":"Arm: About the Flash Patch and Breakpoint unit (FPB). https:\/\/developer.arm.com\/documentation\/ddi0337\/. Accessed 2026-04-13"},{"key":"28_CR6","unstructured":"Arm: Cortex-m4 technical reference manual. https:\/\/developer.arm.com\/documentation\/. Accessed 2026-04-15"},{"key":"28_CR7","unstructured":"Arm: Tightly coupled memory. https:\/\/developer.arm.com\/documentation\/ (2026). Accessed 2026-04-18"},{"key":"28_CR8","doi-asserted-by":"crossref","unstructured":"Arnold, J., Kaashoek, M.F.: Ksplice: Automatic rebootless kernel updates. In: Proceedings of the 4th ACM European Conference on Computer Systems, pp. 187\u2013198. Association for Computing Machinery, Nuremberg, Germany (2009)","DOI":"10.1145\/1519065.1519085"},{"key":"28_CR9","doi-asserted-by":"crossref","unstructured":"Bansal, A., Kandikuppa, A., Hasan, M., Chen, C., Bates, A., Mohan, S.: System auditing for real-time systems. ACM Trans. Privacy Secur. 26(4), 50:1\u201350:37 (2023)","DOI":"10.1145\/3625229"},{"key":"28_CR10","unstructured":"Baumann, A., Appavoo, J., Wisniewski, R.W., Silva, D.D., Krieger, O., Heiser, G.: Reboots are for hardware: Challenges and solutions to updating an operating system on the fly. In: USENIX Annual Technical Conference (USENIX ATC 07). USENIX Association, Santa Clara (2007)"},{"key":"28_CR11","unstructured":"Canonical: Livepatch | Security. https:\/\/ubuntu.com\/security\/livepatch. Accessed 2026-04-15"},{"key":"28_CR12","unstructured":"Chen, Y., Zhang, Y., Wang, Z., Xia, L., Bao, C., Wei, T.: Adaptive android kernel live patching. In: 26th USENIX Security Symposium (USENIX Security 17), pp. 1253\u20131270. USENIX Association, Vancouver, BC (2017)"},{"key":"28_CR13","unstructured":"eclipse-threadx\/threadx: Integer wraparounds, under-allocations, and heap buffer overflows in eclipse ThreadX xQueueCreate() and xQueueCreateSet(). https:\/\/github.com\/eclipse-threadx\/threadx\/security\/advisories\/. Accessed 2026-04-13"},{"key":"28_CR14","unstructured":"Espressif Systems: ESP-IDF Programming Guide: OTA updates. https:\/\/docs.espressif.com\/projects\/esp-idf\/. Accessed 2026-04-13"},{"issue":"3","key":"28_CR15","doi-asserted-by":"publisher","first-page":"207","DOI":"10.1109\/TSE.2016.2584066","volume":"43","author":"C Giuffrida","year":"2017","unstructured":"Giuffrida, C., Iorgulescu, C., Tamburrelli, G., Tanenbaum, A.S.: Automating live update for generic server programs. IEEE Trans. Software Eng. 43(3), 207\u2013225 (2017)","journal-title":"IEEE Trans. Software Eng."},{"key":"28_CR16","doi-asserted-by":"crossref","unstructured":"Gu, J., Xian, M., Chen, T., Du, R.: A linux rootkit improvement based on inline hook. In: Proceedings of the 2nd International Conference on Advances in Mechanical Engineering and Industrial Informatics (AMEII 2016), pp. 793\u2013798. Atlantis Press (2016)","DOI":"10.2991\/ameii-16.2016.155"},{"key":"28_CR17","doi-asserted-by":"crossref","unstructured":"Gustafson, E., et al.: Shimware: Toward practical security retrofitting for monolithic firmware images. In: Proceedings of the 26th International Symposium on Research in Attacks, Intrusions and Defenses (RAID), pp. 32\u201345. ACM (2023)","DOI":"10.1145\/3607199.3607217"},{"key":"28_CR18","doi-asserted-by":"crossref","unstructured":"Hayden, C.M., Smith, E.K., Denchev, M., Hicks, M., Foster, J.S.: Kitsune: efficient, general-purpose dynamic software updating for C. In: Proceedings of the ACM International Conference on Object Oriented Programming Systems Languages and Applications, Tucson, AZ, USA (2012)","DOI":"10.1145\/2384616.2384635"},{"key":"28_CR19","unstructured":"He, Y., Zou, Z., Sun, K., Liu, Z., Xu, K., Wang, Q., Shen, C., Wang, Z., Li, Q.: RapidPatch: Firmware hotpatching for real-time embedded devices. In: 31st USENIX Security Symposium (USENIX Security 22). pp. 2225\u20132242. USENIX Association, Boston, MA (Aug 2022)"},{"key":"28_CR20","doi-asserted-by":"crossref","unstructured":"Hsu, C.F., Zheng, H.S., Liu, Y.Y., Yeh, T.T.: StreamNet++: Memory-efficient streaming TinyML model compilation on microcontrollers. ACM Trans. Embedded Comput. Syst. 24(2) (2025)","DOI":"10.1145\/3706107"},{"key":"28_CR21","unstructured":"Huawei: Huawei LiteOS: A Heavyweight in IoT Connectivity. https:\/\/www.huawei.com\/en\/huaweitech\/publication\/84\/lite-os-smart-iot. Accessed: 2026-04-13"},{"key":"28_CR22","unstructured":"Hunt, G., Brubacher, D.: Detours: Binary interception of win32 functions. In: Third USENIX Windows NT Symposium. USENIX Association, Seattle, WA (1999)"},{"key":"28_CR23","unstructured":"Infineon Technologies: Nor flash: Faqs. https:\/\/community.infineon.com\/t5\/Knowledge-Base-Articles\/ (2025). Accessed 2026-04-15"},{"key":"28_CR24","doi-asserted-by":"crossref","unstructured":"Jiang, P., et al.: Predictable and secure system auditing for real-time systems. In: 2025 IEEE Real-Time Systems Symposium (RTSS), pp. 244\u2013257. IEEE, Boston, MA, USA (Dec 2025)","DOI":"10.1109\/RTSS66672.2025.00028"},{"key":"28_CR25","unstructured":"Khan, A., Kim, H., Lee, B., Xu, D., Bianchi, A., Tian, D.J.: M2MON: Building an MMIO-based security reference monitor for unmanned vehicles. In: 30th USENIX Security Symposium (USENIX Security 21), pp. 285\u2013302. USENIX Association (2021)"},{"key":"28_CR26","unstructured":"Mackensen, P., Niesler, C., Blanco, R., Davi, L., Moonsamy, V.: Kintsugi: Secure hotpatching for code-shadowing real-time embedded systems. In: 34th USENIX Security Symposium (USENIX Security 25), pp. 1847\u20131866. USENIX Association, Seattle, WA, USA (Aug 2025)"},{"key":"28_CR27","doi-asserted-by":"crossref","unstructured":"Mera, A., Chen, Y.H., Sun, R., Kirda, E., Lu, L.: D-Box: DMA-enabled compartmentalization for embedded applications. In: Proceedings of the Network and Distributed System Security Symposium (NDSS) 2022. The Internet Society, San Diego, CA, USA (2022)","DOI":"10.14722\/ndss.2022.24053"},{"key":"28_CR28","unstructured":"Microsoft: Hotpatch for Windows Server. https:\/\/learn.microsoft.com\/en-us\/windows-server\/get-started\/hotpatch. Accessed 2026-04-15"},{"key":"28_CR29","doi-asserted-by":"crossref","unstructured":"Niesler, C., Surminski, S., Davi, L.: HERA: Hotpatching of embedded real-time applications. In: Proceedings of the Network and Distributed System Security Symposium (NDSS) (2021)","DOI":"10.14722\/ndss.2021.24159"},{"key":"28_CR30","doi-asserted-by":"crossref","unstructured":"Poudel, P., Ray, B., Milenkovic, A.: Flashmark: watermarking of NOR flash memories for counterfeit detection. In: 2020 57th ACM\/IEEE Design Automation Conference (DAC), pp. 1\u20136. IEEE (2020)","DOI":"10.1109\/DAC18072.2020.9218521"},{"key":"28_CR31","doi-asserted-by":"crossref","unstructured":"Qu, S., Zhang, X., Zhang, C., Gu, D.: Trapped by your words: (ab)using processor exception for generic binary instrumentation on bare-metal embedded devices. In: Proceedings of the 61st ACM\/IEEE Design Automation Conference (DAC), pp. 285:1\u2013285:6 (2024)","DOI":"10.1145\/3649329.3655687"},{"key":"28_CR32","unstructured":"Rajput, P.H.N., Doumanidis, C., Maniatakos, M.: ICSPatch: Automated vulnerability localization and Non-Intrusive hotpatching in industrial control systems using data dependence graphs. In: 32nd USENIX Security Symposium (USENIX Security 23 (2023)"},{"key":"28_CR33","unstructured":"Red Hat: A guide to kernel live patching on Red Hat Enterprise Linux 7, 8, and 9. https:\/\/access.redhat.com\/articles\/2475321. Accessed 2026-04-15"},{"key":"28_CR34","unstructured":"Renesas Electronics: An500: Nor flash memory erase operation. https:\/\/www.renesas.com\/en\/products\/AN500 (2024). Accessed 2026-04-15"},{"key":"28_CR35","unstructured":"Rommel, F., et al.: From global to local quiescence: Wait-Free code patching of Multi-Threaded processes. In: 14th USENIX Symposium on Operating Systems Design and Implementation (OSDI 20) (2020)"},{"key":"28_CR36","doi-asserted-by":"crossref","unstructured":"Salehi, M., Pattabiraman, K.: Autopatch: Automated generation of hotpatches for real-time embedded devices. In: Proceedings of the 2024 ACM SIGSAC Conference on Computer and Communications Security, pp. 2370\u20132384. ACM (2024)","DOI":"10.1145\/3658644.3690255"},{"key":"28_CR37","unstructured":"Shamrei, Y.: Impact of internet of things on business and the economy in 2026. https:\/\/sumatosoft.com\/blog\/impact-of-internet-of-things-iot-on-the-business-economy-trends, sumatoSoft blog, Accessed 2026-04-13"},{"key":"28_CR38","unstructured":"STMicroelectronics: An4276: Ecc management on spc560x. https:\/\/www.st.com\/resource\/en\/application_note\/an4276 (2013). Accessed 2026-04-18"},{"key":"28_CR39","unstructured":"The Linux Kernel Project: Livepatch \u2014 the linux kernel documentation. https:\/\/docs.kernel.org\/livepatch\/livepatch.html. Accessed 2026-04-13"},{"key":"28_CR40","doi-asserted-by":"crossref","unstructured":"Watson, J., Agrawal, S., Tsang, R., Luo, S., Popa, R.A., Dutta, P.: Retcon: live updates for embedded event-driven applications. In: 2024 ACM\/IEEE International Conference on Information Processing in Sensor Networks (IPSN), pp. 126\u2013137. IEEE, Hong Kong, China (2024)","DOI":"10.1109\/IPSN61024.2024.00015"},{"key":"28_CR41","unstructured":"Wu, Y., Wang, J., Wang, Y., Zhai, S., Li, Z., He, Y., Sun, K., Li, Q., Zhang, N.: Your firmware has arrived: A study of firmware update vulnerabilities. In: 33rd USENIX Security Symposium (USENIX Security 24), pp. 5627\u20135644. USENIX Association, Philadelphia, PA (Aug 2024)"},{"key":"28_CR42","unstructured":"zephyrproject-rtos\/zephyr: net: icmp: Out of bound memory read. https:\/\/github.com\/zephyrproject-rtos\/zephyr\/security\/advisories\/. Accessed 2026-04-13"},{"key":"28_CR43","unstructured":"zephyrproject-rtos\/zephyr: Out of bounds read when unpacking dns answers. https:\/\/github.com\/zephyrproject-rtos\/zephyr\/security\/advisories\/. Accessed 2026-04-13"},{"key":"28_CR44","doi-asserted-by":"crossref","unstructured":"Zhao, B., et al.: A large-scale empirical analysis of the vulnerabilities introduced by third-party components in iot firmware. In: Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis, pp. 442\u2013454. Association for Computing Machinery, New York (2022) ISSTA '22","DOI":"10.1145\/3533767.3534366"},{"key":"28_CR45","doi-asserted-by":"crossref","unstructured":"Zhou, M., Hu, X., Wang, Z., Wang, H., Wen, H., Sun, L., Zhang, P.: Dynamic vulnerability patching for heterogeneous embedded systems using stack frame reconstruction. In: Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security (CCS \u201925), pp. 3855\u20133869. Association for Computing Machinery, Taipei, Taiwan (Oct 2025)","DOI":"10.1145\/3719027.3765200"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2026"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-38702-8_28","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,10,6]],"date-time":"2026-10-06T10:40:49Z","timestamp":1791283249000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-38702-8_28"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10,7]]},"ISBN":["9783032387011","9783032387028"],"references-count":45,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-38702-8_28","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,10,7]]},"assertion":[{"value":"7 October 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Rome","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Italy","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 September 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 September 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2026.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}