{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T14:50:30Z","timestamp":1742914230837,"version":"3.40.3"},"publisher-location":"Cham","reference-count":45,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319288642"},{"type":"electronic","value":"9783319288659"}],"license":[{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015]]},"DOI":"10.1007\/978-3-319-28865-9_15","type":"book-chapter","created":{"date-parts":[[2016,1,23]],"date-time":"2016-01-23T03:40:02Z","timestamp":1453520402000},"page":"277-293","source":"Crossref","is-referenced-by-count":2,"title":["Practicality of Using Side-Channel Analysis for Software Integrity Checking of Embedded Systems"],"prefix":"10.1007","author":[{"given":"Hong","family":"Liu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hongmin","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Eugene Y.","family":"Vasserman","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"15_CR1","unstructured":"grsecurity. \n                    http:\/\/grsecurity.net\/"},{"key":"15_CR2","unstructured":"PIC16F631\/677\/685\/687\/689\/690 data sheet. Microchip Technology Inc. (2008). \n                    http:\/\/ww1.microchip.com\/downloads\/en\/DeviceDoc\/41262E.pdf"},{"key":"15_CR3","unstructured":"PICmicro mid-range MCU family - reference manual. Microchip Technology Inc. (1997). \n                    http:\/\/ww1.microchip.com\/downloads\/en\/DeviceDoc\/31000a.pdf"},{"key":"15_CR4","unstructured":"Trusted computing group (TCG). TPM 2.0 library specification (2014). \n                    http:\/\/www.trustedcomputinggroup.org\/resources\/tpm_library_specification"},{"key":"15_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"29","DOI":"10.1007\/3-540-36400-5_4","volume-title":"Cryptographic Hardware and Embedded Systems - CHES 2002","author":"D Agrawal","year":"2003","unstructured":"Agrawal, D., Archambeault, B., Rao, J.R., Rohatgi, P.: The EM side-channel(s). In: Kaliski Jr., B.S., Ko\u00e7, \u00c7.K., Paar, C. (eds.) CHES 2002. LNCS, vol. 2523, pp. 29\u201345. Springer, Heidelberg (2003)"},{"key":"15_CR6","doi-asserted-by":"crossref","unstructured":"Agrawal, D., Baktir, S., Karakoyunlu, D., Rohatgi, P., Sunar, B.: Trojan detection using IC fingerprinting. In: Proceedings of the IEEE Symposium on Security and Privacy, S&P (2007)","DOI":"10.1109\/SP.2007.36"},{"key":"15_CR7","doi-asserted-by":"crossref","unstructured":"Bletsch, T., Jiang, X., Freeh, V.W., Liang, Z.: Jump-oriented programming: a new class of code-reuse attack. In: Proceedings of the ACM Symposium on Information, Computer and Communications Security, ASIACCS (2011)","DOI":"10.1145\/1966913.1966919"},{"key":"15_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"16","DOI":"10.1007\/978-3-540-28632-5_2","volume-title":"Cryptographic Hardware and Embedded Systems - CHES 2004","author":"E Brier","year":"2004","unstructured":"Brier, E., Clavier, C., Olivier, F.: Correlation power analysis with a leakage model. In: Joye, M., Quisquater, J.-J. (eds.) CHES 2004. LNCS, vol. 3156, pp. 16\u201329. Springer, Heidelberg (2004)"},{"key":"15_CR9","doi-asserted-by":"crossref","unstructured":"Butterworth, J., Kallenberg, C., Kovah, X., Herzog, A.: BIOS chronomancy: fixing the core root of trust for measurement. In: Proceedings of the ACM Conference on Computer and Communications Security, CCS (2013)","DOI":"10.1145\/2508859.2516714"},{"key":"15_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"13","DOI":"10.1007\/3-540-36400-5_3","volume-title":"Cryptographic Hardware and Embedded Systems - CHES 2002","author":"S Chari","year":"2003","unstructured":"Chari, S., Rao, J.R., Rohatgi, P.: Template attacks. In: Kaliski Jr., B.S., Ko\u00e7, \u00c7.K., Paar, C. (eds.) CHES 2002. LNCS, vol. 2523, pp. 13\u201328. Springer, Heidelberg (2003)"},{"key":"15_CR11","doi-asserted-by":"crossref","unstructured":"Checkoway, S., Feldman, A.J., Kantor, B., Halderman, J.A., Felten, E.W., Shacham, H.: Can DREs provide long-lasting security? the case of return-oriented programming and the AVC advantage. In: Proceedings of the Conference on Electronic Voting Technology\/Workshop on Trustworthy Elections, EVT\/WOTE (2009)","DOI":"10.1145\/1866307.1866370"},{"key":"15_CR12","unstructured":"Clark, S.S., Ransford, B., Rahmati, A., Guineau, S., Sorber, J., Fu, K., Xu, W.: WattsUpDoc: power side channels to nonintrusively discover untargeted malware on embedded medical devices. In: Proceedings of the USENIX Conference on Safety, Security, Privacy and Interoperability of Health Information Technologies, HealthTech, p. 9. USENIX Association, Berkeley (2013)"},{"key":"15_CR13","unstructured":"Cui, A., Costello, M., Stolfo, S.: When firmware modifications attack: a case study of embedded exploitation. In: NDSS (2013)"},{"key":"15_CR14","unstructured":"Davi, L., Sadeghi, A.-R., Lehmann, D., Monrose, F.: Stitching the gadgets: on the ineffectiveness of coarse-grained control-flow integrity protection. In: Proceedings of the USENIX Security Symposium, SEC (2014)"},{"key":"15_CR15","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"378","DOI":"10.1007\/978-3-642-23644-0_20","volume-title":"Recent Advances in Intrusion Detection","author":"L Duflot","year":"2011","unstructured":"Duflot, L., Perez, Y.-A., Morin, B.: What If you can\u2019t trust your network card? In: Sommer, R., Balzarotti, D., Maier, G. (eds.) RAID 2011. LNCS, vol. 6961, pp. 378\u2013397. Springer, Heidelberg (2011)"},{"key":"15_CR16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"78","DOI":"10.1007\/978-3-642-17499-5_4","volume-title":"Transactions on Computational Science X","author":"T Eisenbarth","year":"2010","unstructured":"Eisenbarth, T., Paar, C., Weghenkel, B.: Building a side channel based disassembler. In: Gavrilova, M.L., Tan, C.J.K., Moreno, E.D. (eds.) Transactions on Computational Science X. LNCS, vol. 6340, pp. 78\u201399. Springer, Heidelberg (2010)"},{"key":"15_CR17","unstructured":"Falliere, N., Murchu, L.O., Chien, E.: W32. stuxnet dossier version 1.4 (2011)"},{"key":"15_CR18","doi-asserted-by":"crossref","unstructured":"Francillon, A., Castelluccia, C.: Code injection attacks on harvard-architecture devices. In: Proceedings of the ACM Conference on Computer and Communications Security, CCS (2008)","DOI":"10.1145\/1455770.1455775"},{"key":"15_CR19","doi-asserted-by":"crossref","unstructured":"G\u00f6ktas, E., Athanasopoulos, E., Bos, H., Portokalidis, G.: Out of control: overcoming control-flow integrity. In: Proceedings of the IEEE Symposium on Security and Privacy, S&P (2014)","DOI":"10.1109\/SP.2014.43"},{"key":"15_CR20","unstructured":"Goldack, M.: Side-channel based reverse engineering for microcontrollers. Master\u2019s thesis, Ruhr-Universit\u00e4t Bochum, Germany (2008)"},{"key":"15_CR21","doi-asserted-by":"crossref","unstructured":"Gu, L., Ding, X., Deng, R.H., Xie, B., Mei, H.: Remote attestation on program execution. In: Proceedings of the ACM Workshop on Scalable Trusted Computing, STC (2008)","DOI":"10.1145\/1456455.1456458"},{"key":"15_CR22","doi-asserted-by":"crossref","unstructured":"Guo, S., Zhao, X., Zhang, F., Wang, T., Shi, Z., Standaert, F.-X., Ma, C.: Exploiting the incomplete diffusion feature: A specialized analytical side-channel attack against the AES and its application to microcontroller implementations. IEEE Transactions on Information Forensics and Security 9(6) (2014)","DOI":"10.1109\/TIFS.2014.2315534"},{"key":"15_CR23","unstructured":"Hanna, S., Rolles, R., Molina-Markham, A., Poosankam, P., Fu, K., Song, D.: Take two software updates and see me in the morning: the case for software security evaluations of medical devices. In: Proceedings of the USENIX Conference on Health Security and Privacy, HealthSec (2011)"},{"key":"15_CR24","unstructured":"Jin, Y., Makris, Y.: Hardware trojan detection using path delay fingerprint. In: Proceedings of the IEEE International Workshop on Hardware-Oriented Security and Trust, HST (2008)"},{"key":"15_CR25","unstructured":"Nohl, K., Kri\u00dfler, S., Lell, J.: BadUSB - on accessories that turn evil. \n                    https:\/\/srlabs.de\/blog\/wp-content\/uploads\/2014\/07\/SRLabs-BadUSB-BlackHat-v1.pdf"},{"key":"15_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"388","DOI":"10.1007\/3-540-48405-1_25","volume-title":"Advances in Cryptology - CRYPTO \u201999","author":"PC Kocher","year":"1999","unstructured":"Kocher, P.C., Jaffe, J., Jun, B.: Differential power analysis. In: Wiener, M. (ed.) CRYPTO 1999. LNCS, vol. 1666, pp. 388\u2013397. Springer, Heidelberg (1999)"},{"key":"15_CR27","doi-asserted-by":"crossref","unstructured":"Li, Y., McCune, J.M., Perrig, A.: VIPER: verifying the integrity of PERipherals\u2019 firmware. In: Proceedings of the ACM Conference on Computer and Communications Security, CCS (2011)","DOI":"10.1145\/2046707.2046711"},{"key":"15_CR28","unstructured":"Mangard, S., Oswald, E., Popp, T.: Power Analysis Attacks: Revealing the Secrets of Smart Cards, 1st edn. Springer Publishing Company, Incorporated (2010)"},{"key":"15_CR29","doi-asserted-by":"crossref","unstructured":"Mason, J., Small, S., Monrose, F., MacManus, G.: English shellcode. In: Proceedings of the ACM Conference on Computer and Communications Security, CCS (2009)","DOI":"10.1145\/1653662.1653725"},{"key":"15_CR30","doi-asserted-by":"crossref","unstructured":"McCune, J.M., Li, Y., Qu, N., Zhou, Z., Datta, A., Gligor, V., Perrig, A.: TrustVisor: efficient TCB reduction and attestation. In: Proceedings of the IEEE Symposium on Security and Privacy, S&P (2010)","DOI":"10.1109\/SP.2010.17"},{"key":"15_CR31","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"261","DOI":"10.1007\/978-3-319-10175-0_18","volume-title":"Constructive Side-Channel Analysis and Secure Design","author":"M Msgna","year":"2014","unstructured":"Msgna, M., Markantonakis, K., Naccache, D., Mayes, K.: Verifying software integrity in embedded systems: a side channel approach. In: Prouff, E. (ed.) COSADE 2014. LNCS, vol. 8622, pp. 261\u2013280. Springer, Heidelberg (2014)"},{"key":"15_CR32","unstructured":"Nakutis, Z.: Embedded systems power consumption measurement methods overview (2009)"},{"key":"15_CR33","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"659","DOI":"10.1007\/11599555_63","volume-title":"Embedded Software and Systems","author":"F Rodr\u00edguez","year":"2005","unstructured":"Rodr\u00edguez, F., Serrano, J.J.: Control flow error checking with ISIS. In: Yang, L.T., Zhou, X., Zhao, W., Wu, Z., Zhu, Y., Lin, M. (eds.) ICESS 2005. LNCS, vol. 3820, pp. 659\u2013670. Springer, Heidelberg (2005)"},{"key":"15_CR34","unstructured":"Seshadri, A., Perrig, A., Doorn, L.V., Khosla, P.: SWATT: software-based ATTestation for embedded devices. In: Proceedings of the IEEE Symposium on Security and Privacy, S&P (2004)"},{"key":"15_CR35","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1007\/978-3-642-33027-8_2","volume-title":"Cryptographic Hardware and Embedded Systems \u2013 CHES 2012","author":"S Skorobogatov","year":"2012","unstructured":"Skorobogatov, S., Woods, C.: Breakthrough silicon scanning discovers backdoor in military chip. In: Prouff, E., Schaumont, P. (eds.) CHES 2012. LNCS, vol. 7428, pp. 23\u201340. Springer, Heidelberg (2012)"},{"key":"15_CR36","doi-asserted-by":"crossref","unstructured":"Soll, O., Korak, T., Muehlberghuber, M., Hutter, M.: EM-based detection of hardware trojans on FPGAs. In: IEEE International Symposium on Hardware-Oriented Security and Trust, HOST, May 2014","DOI":"10.1109\/HST.2014.6855574"},{"key":"15_CR37","doi-asserted-by":"crossref","unstructured":"Song, P., Stellari, F., Pfeiffer, D., Culp, J., Weger, A., Bonnoit, A., Wisnieff, B., Taubenblatt, M.: MARVEL: malicious alteration recognition and verification by emission of light. In: IEEE International Symposium on Hardware-Oriented Security and Trust, HOST (2011)","DOI":"10.1109\/HST.2011.5955007"},{"key":"15_CR38","unstructured":"Stajano, F., Anderson, R.: The grenade timer: fortifying the watchdog timer against malicious mobile code. In: Proceedings of International Workshop on Mobile Multimedia Communications, MoMuC (2000)"},{"key":"15_CR39","doi-asserted-by":"crossref","unstructured":"Strobel, D., Oswald, D., Richter, B., Schellenberg, F., Paar, C.: Microcontrollers as (in)security devices for pervasive computing applications. Proceedings of the IEEE 102(8) (2014)","DOI":"10.1109\/JPROC.2014.2325397"},{"key":"15_CR40","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"159","DOI":"10.1007\/978-3-642-40349-1_10","volume-title":"Cryptographic Hardware and Embedded Systems - CHES 2013","author":"T Sugawara","year":"2013","unstructured":"Sugawara, T., Suzuki, D., Saeki, M., Shiozaki, M., Fujino, T.: On measurable side-channel leaks inside ASIC design primitives. In: Bertoni, G., Coron, J.-S. (eds.) CHES 2013. LNCS, vol. 8086, pp. 159\u2013178. Springer, Heidelberg (2013)"},{"key":"15_CR41","unstructured":"Theodoridis, S., Koutroumbas, K.. Pattern Recognition, 4th edn. Academic Press (2008)"},{"key":"15_CR42","unstructured":"Xu, R., Sa\u00efdi, H., Anderson, R.: Aurasium: practical policy enforcement for android applications. In: Proceedings of the USENIX Security Symposium, SEC (2012)"},{"issue":"2","key":"15_CR43","doi-asserted-by":"publisher","first-page":"33:1","DOI":"10.1145\/2661639","volume":"11","author":"Y Yang","year":"2014","unstructured":"Yang, Y., Su, L., Khan, M., Lemay, M., Abdelzaher, T., Han, J.: Power-based diagnosis of node silence in remote high-end sensing systems. ACM Trans. Sen. Netw. 11(2), 33:1\u201333:33 (2014)","journal-title":"ACM Trans. Sen. Netw."},{"key":"15_CR44","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"219","DOI":"10.1007\/978-3-319-11203-9_13","volume-title":"Computer Security - ESORICS 2014","author":"F Zhang","year":"2014","unstructured":"Zhang, F., Wang, H., Leach, K., Stavrou, A.: A framework to secure peripherals at runtime. In: Kuty\u0142owski, M., Vaidya, J. (eds.) ESORICS 2014, Part I. LNCS, vol. 8712, pp. 219\u2013238. Springer, Heidelberg (2014)"},{"key":"15_CR45","doi-asserted-by":"crossref","unstructured":"Zhou, Z., Gligor, V.D., Newsome, J., McCune, J.M.: Building verifiable trusted path on commodity x86 computers. In: Proceedings of the IEEE Symposium on Security and Privacy, S&P (2012)","DOI":"10.1109\/SP.2012.42"}],"container-title":["Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","Security and Privacy in Communication Networks"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-28865-9_15","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T07:18:16Z","timestamp":1559373496000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-28865-9_15"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"ISBN":["9783319288642","9783319288659"],"references-count":45,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-28865-9_15","relation":{},"ISSN":["1867-8211","1867-822X"],"issn-type":[{"type":"print","value":"1867-8211"},{"type":"electronic","value":"1867-822X"}],"subject":[],"published":{"date-parts":[[2015]]}}}