{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,15]],"date-time":"2026-09-15T22:08:14Z","timestamp":1789510094767,"version":"build-2803163510"},"publisher-location":"Cham","reference-count":51,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319664019","type":"print"},{"value":"9783319664026","type":"electronic"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1007\/978-3-319-66402-6_25","type":"book-chapter","created":{"date-parts":[[2017,8,11]],"date-time":"2017-08-11T13:44:11Z","timestamp":1502459051000},"page":"427-445","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":13,"title":["AVR Processors as a Platform for Language-Based Security"],"prefix":"10.1007","author":[{"given":"Florian","family":"Dewald","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Heiko","family":"Mantel","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alexandra","family":"Weber","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2017,8,12]]},"reference":[{"key":"25_CR1","doi-asserted-by":"crossref","unstructured":"Ac\u0131i\u00e7mez, O., Ko\u00e7, \u00c7.K., Seifert, J.-P.: Predicting secret keys via branch prediction. In: CT-RSA, pp. 225\u2013242 (2007)","DOI":"10.1007\/11967668_15"},{"key":"25_CR2","doi-asserted-by":"crossref","unstructured":"Agat, J.: Transforming out timing leaks. In: POPL, pp. 40\u201353 (2000)","DOI":"10.1145\/325694.325702"},{"key":"25_CR3","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511811432","volume-title":"Modern Compiler Implementation in Java","author":"AW Appel","year":"2002","unstructured":"Appel, A.W.: Modern Compiler Implementation in Java. Cambridge University Press, Cambridge (2002)"},{"key":"25_CR4","unstructured":"Atmel Corporation: Atmel ATmega2564RFR2\/ATmega1284RFR2\/ATmega644RFR2 Datasheet. Rev. 42073B-MCU Wireless-09\/14 (2014)"},{"key":"25_CR5","unstructured":"Atmel Corporation: Atmel ATmega640\/V-1280\/V-1281\/V-2560\/V-2561\/V Datasheet. Rev. 2549Q-AVR-02\/2014 (2014)"},{"key":"25_CR6","unstructured":"Atmel Corporation: Atmel AVR 8-bit Instruction Set: Instruction Set Manual. Rev. 0856K-AVR-05\/2016 (2016)"},{"key":"25_CR7","unstructured":"Atmel Corporation: Automotive AVR Microcontrollers (2016). http:\/\/www.atmel.com\/products\/microcontrollers\/avr\/Automotive_AVR.aspx. Accessed 21 Mar 2017"},{"key":"25_CR8","unstructured":"Atmel Corporation: Rad Tolerant Devices (2016). http:\/\/www.atmel.com\/products\/rad-hard\/rad-tolerant-devices\/. Accessed 21 Mar 2017"},{"key":"25_CR9","doi-asserted-by":"crossref","unstructured":"Barthe, G., Betarte, G., Campo, J.D., Luna, C., Pichardie, D.: System-level Non-interference for Constant-time Cryptography. In: CCS, pp. 1267\u20131279 (2014)","DOI":"10.1145\/2660267.2660283"},{"key":"25_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"125","DOI":"10.1007\/978-3-540-71316-6_10","volume-title":"Programming Languages and Systems","author":"G Barthe","year":"2007","unstructured":"Barthe, G., Pichardie, D., Rezk, T.: A certified lightweight non-interference java bytecode verifier. In: Nicola, R. (ed.) ESOP 2007. LNCS, vol. 4421, pp. 125\u2013140. Springer, Heidelberg (2007). doi:10.1007\/978-3-540-71316-6_10"},{"issue":"2","key":"25_CR11","first-page":"33","volume":"153","author":"G Barthe","year":"2006","unstructured":"Barthe, G., Rezk, T., Warnier, M.: Preventing timing leaks through transactional branching instructions. ENTCS 153(2), 33\u201355 (2006)","journal-title":"ENTCS"},{"key":"25_CR12","unstructured":"Bernstein, D.J.: Cache-timing attacks on AES. Technical report, University of Illinois at Chicago (2005)"},{"key":"25_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"84","DOI":"10.1007\/978-3-540-68351-3_8","volume-title":"New Stream Cipher Designs","author":"DJ Bernstein","year":"2008","unstructured":"Bernstein, D.J.: The Salsa20 family of stream ciphers. In: Robshaw, M., Billet, O. (eds.) New Stream Cipher Designs. LNCS, vol. 4986, pp. 84\u201397. Springer, Heidelberg (2008). doi:10.1007\/978-3-540-68351-3_8"},{"key":"25_CR14","unstructured":"Bernstein, D.J.: Extending the Salsa20 nonce. In: SKEW (2011)"},{"key":"25_CR15","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"32","DOI":"10.1007\/11502760_3","volume-title":"Fast Software Encryption","author":"DJ Bernstein","year":"2005","unstructured":"Bernstein, D.J.: The Poly1305-AES message-authentication code. In: Gilbert, H., Handschuh, H. (eds.) FSE 2005. LNCS, vol. 3557, pp. 32\u201349. Springer, Heidelberg (2005). doi:10.1007\/11502760_3"},{"key":"25_CR16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"355","DOI":"10.1007\/978-3-642-23822-2_20","volume-title":"Computer Security \u2013 ESORICS 2011","author":"BB Brumley","year":"2011","unstructured":"Brumley, B.B., Tuveri, N.: Remote timing attacks are still practical. In: Atluri, V., Diaz, C. (eds.) ESORICS 2011. LNCS, vol. 6879, pp. 355\u2013371. Springer, Heidelberg (2011). doi:10.1007\/978-3-642-23822-2_20"},{"issue":"5","key":"25_CR17","doi-asserted-by":"publisher","first-page":"701","DOI":"10.1016\/j.comnet.2005.01.010","volume":"48","author":"D Brumley","year":"2005","unstructured":"Brumley, D., Boneh, D.: Remote timing attacks are practical. Comput. Netw. 48(5), 701\u2013716 (2005)","journal-title":"Comput. Netw."},{"key":"25_CR18","unstructured":"Cohen, E.S.: Information transmission in sequential programs. In: Foundations of Secure Computation, pp. 297\u2013335. Academic Press(1978)"},{"key":"25_CR19","unstructured":"Das Labor: AVR-Crypto-Lib (2014). http:\/\/avrcryptolib.das-labor.org\/trac. Accessed 23 Mar 2017"},{"issue":"5","key":"25_CR20","doi-asserted-by":"publisher","first-page":"236","DOI":"10.1145\/360051.360056","volume":"19","author":"DE Denning","year":"1976","unstructured":"Denning, D.E.: A lattice model of secure information flow. Commun. ACM 19(5), 236\u2013243 (1976)","journal-title":"Commun. ACM"},{"issue":"7","key":"25_CR21","doi-asserted-by":"publisher","first-page":"504","DOI":"10.1145\/359636.359712","volume":"20","author":"DE Denning","year":"1977","unstructured":"Denning, D.E., Denning, P.J.: Certification of programs for secure information flow. Commun. ACM 20(7), 504\u2013513 (1977)","journal-title":"Commun. ACM"},{"issue":"1","key":"25_CR22","doi-asserted-by":"publisher","first-page":"4:1","DOI":"10.1145\/2756550","volume":"18","author":"G Doychev","year":"2015","unstructured":"Doychev, G., K\u00f6pf, B., Mauborgne, L., Reineke, J.: Cacheaudit: a tool for the static analysis of cache side channels. ACM TISSEC 18(1), 4:1\u20134:32 (2015)","journal-title":"ACM TISSEC"},{"key":"25_CR23","unstructured":"Editors of the GCC Wiki: GCC Wiki page on avr-gcc: Calling Convention (2016). https:\/\/gcc.gnu.org\/wiki\/avr-gcc#Calling_Convention. Accessed 15 Apr 2017"},{"key":"25_CR24","doi-asserted-by":"crossref","unstructured":"Fardan, N.J.A., Paterson, K.G.: Lucky thirteen: breaking the TLS and DTLS record protocols. In: S&P, pp. 526\u2013540 (2013)","DOI":"10.1109\/SP.2013.42"},{"issue":"3","key":"25_CR25","doi-asserted-by":"publisher","first-page":"319","DOI":"10.1145\/24039.24041","volume":"9","author":"J Ferrante","year":"1987","unstructured":"Ferrante, J., Ottenstein, K.J., Warren, J.D.: The program dependence graph and its use in optimization. ACM TOPLAS 9(3), 319\u2013349 (1987)","journal-title":"ACM TOPLAS"},{"key":"25_CR26","doi-asserted-by":"crossref","unstructured":"Goguen, J.A., Meseguer, J.: Security policies and security models. In: S&P, pp. 11\u201320 (1982)","DOI":"10.1109\/SP.1982.10014"},{"key":"25_CR27","doi-asserted-by":"crossref","unstructured":"Hagberg, A.A., Schult, D.S., Swart, P.J.: Exploring network structure, dynamics, and function using NetworkX. In: SciPy, pp. 11\u201315 (2008)","DOI":"10.25080\/TCWV9851"},{"issue":"1","key":"25_CR28","first-page":"163","volume":"141","author":"D Hedin","year":"2005","unstructured":"Hedin, D., Sands, D.: Timing aware information flow security for a javacard-like bytecode. ENTCS 141(1), 163\u2013182 (2005)","journal-title":"ENTCS"},{"key":"25_CR29","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"156","DOI":"10.1007\/978-3-642-38553-7_9","volume-title":"Progress in Cryptology \u2013 AFRICACRYPT 2013","author":"M Hutter","year":"2013","unstructured":"Hutter, M., Schwabe, P.: NaCl on 8-Bit AVR microcontrollers. In: Youssef, A., Nitaj, A., Hassanien, A.E. (eds.) AFRICACRYPT 2013. LNCS, vol. 7918, pp. 156\u2013172. Springer, Heidelberg (2013). doi:10.1007\/978-3-642-38553-7_9"},{"key":"25_CR30","doi-asserted-by":"crossref","unstructured":"Kizhvatov, I.: Side channel analysis of AVR XMEGA crypto engine. In: WESS, pp. 8:1\u20138:7 (2009)","DOI":"10.1145\/1631716.1631724"},{"key":"25_CR31","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"104","DOI":"10.1007\/3-540-68697-5_9","volume-title":"Advances in Cryptology \u2014 CRYPTO \u201996","author":"PC Kocher","year":"1996","unstructured":"Kocher, P.C.: Timing attacks on implementations of Diffie-Hellman, RSA, DSS, and other systems. In: Koblitz, N. (ed.) CRYPTO 1996. LNCS, vol. 1109, pp. 104\u2013113. Springer, Heidelberg (1996). doi:10.1007\/3-540-68697-5_9"},{"key":"25_CR32","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"388","DOI":"10.1007\/3-540-48405-1_25","volume-title":"Advances in Cryptology \u2014 CRYPTO \u201999","author":"P Kocher","year":"1999","unstructured":"Kocher, P., Jaffe, J., Jun, B.: Differential power analysis. In: Wiener, M. (ed.) CRYPTO 1999. LNCS, vol. 1666, pp. 388\u2013397. Springer, Heidelberg (1999). doi:10.1007\/3-540-48405-1_25"},{"issue":"2","key":"25_CR33","doi-asserted-by":"publisher","first-page":"107","DOI":"10.1007\/s10207-007-0016-z","volume":"6","author":"B K\u00f6pf","year":"2007","unstructured":"K\u00f6pf, B., Mantel, H.: Transformational typing and unification for automatically correcting insecure programs. Int. J. Inf. Sec. 6(2), 107\u2013131 (2007)","journal-title":"Int. J. Inf. Sec."},{"key":"25_CR34","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"256","DOI":"10.1007\/11847083_25","volume-title":"Integrated Circuit and System Design. Power and Timing Modeling, Optimization and Simulation","author":"G Kucuk","year":"2006","unstructured":"Kucuk, G., Basaran, C.: Reducing energy dissipation of wireless sensor processors using silent-store-filtering MoteCache. In: Vounckx, J., Azemard, N., Maurine, P. (eds.) PATMOS 2006. LNCS, vol. 4148, pp. 256\u2013266. Springer, Heidelberg (2006). doi:10.1007\/11847083_25"},{"key":"25_CR35","doi-asserted-by":"crossref","unstructured":"Liu, A., Ning, P.: TinyECC: a configurable library for elliptic curve cryptography in wireless sensor networks. In: IPSN, pp. 245\u2013256 (2008)","DOI":"10.1109\/IPSN.2008.47"},{"key":"25_CR36","doi-asserted-by":"crossref","unstructured":"Liu, F., Yarom, Y., Ge, Q., Heiser, G., Lee, R.B.: Last-level cache side-channel attacks are practical. In: S&P, pp. 605\u2013622 (2015)","DOI":"10.1109\/SP.2015.43"},{"key":"25_CR37","doi-asserted-by":"crossref","unstructured":"Lortz, S., Mantel, H., Starostin, A., B\u00e4hr, T., Schneider, D., Weber, A.: Cassandra: Towards a Certifying App. Store for Android. In: SPSM, pp. 93\u2013104 (2014)","DOI":"10.1145\/2666620.2666631"},{"issue":"4","key":"25_CR38","doi-asserted-by":"publisher","first-page":"303","DOI":"10.1007\/s13389-011-0021-z","volume":"1","author":"A Lux","year":"2011","unstructured":"Lux, A., Starostin, A.: A tool for static detection of timing channels in java. J. Crypt. Eng. 1(4), 303\u2013313 (2011)","journal-title":"J. Crypt. Eng."},{"key":"25_CR39","doi-asserted-by":"crossref","unstructured":"Mantel, H.: Information flow and noninterference. In: van Tilborg, H.C.A. Jajodia, S. (eds.) Encyclopedia of Cryptography and Security, 2nd edn. pp. 605\u2013607. Springer, Heidelberg (2011)","DOI":"10.1007\/978-1-4419-5906-5_874"},{"key":"25_CR40","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"447","DOI":"10.1007\/978-3-319-24174-6_23","volume-title":"Computer Security \u2013 ESORICS 2015","author":"H Mantel","year":"2015","unstructured":"Mantel, H., Starostin, A.: Transforming out timing leaks, more or less. In: Pernul, G., Ryan, P.Y.A., Weippl, E. (eds.) ESORICS 2015. LNCS, vol. 9326, pp. 447\u2013467. Springer, Cham (2015). doi:10.1007\/978-3-319-24174-6_23"},{"key":"25_CR41","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"156","DOI":"10.1007\/11734727_14","volume-title":"Information Security and Cryptology - ICISC 2005","author":"D Molnar","year":"2006","unstructured":"Molnar, D., Piotrowski, M., Schultz, D., Wagner, D.: The program counter security model: automatic detection and removal of control-flow side channel attacks. In: Won, D.H., Kim, S. (eds.) ICISC 2005. LNCS, vol. 3935, pp. 156\u2013168. Springer, Heidelberg (2006). doi:10.1007\/11734727_14"},{"key":"25_CR42","doi-asserted-by":"crossref","unstructured":"O\u2019Flynn, C., Chen, Z.: ChipWhisperer: an open-source platform for hardware embedded security research. In: COSADE, pp. 243\u2013260 (2014)","DOI":"10.1007\/978-3-319-10175-0_17"},{"key":"25_CR43","doi-asserted-by":"crossref","unstructured":"O\u2019Flynn, C., Chen, Z.: Power analysis attacks against IEEE 802.15.4 Nodes. In: COSADE, pp. 55\u201370 (2016)","DOI":"10.1007\/978-3-319-43283-0_4"},{"issue":"169","key":"25_CR44","first-page":"1","volume":"2002","author":"D Page","year":"2002","unstructured":"Page, D.: Theoretical use of cache memory as a cryptanalytic side-channel. IACR Cryptol. ePrint Arch. 2002(169), 1\u201323 (2002)","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"25_CR45","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"58","DOI":"10.1007\/978-3-319-40667-1_4","volume-title":"Detection of Intrusions and Malware, and Vulnerability Assessment","author":"S Pastrana","year":"2016","unstructured":"Pastrana, S., Tapiador, J., Suarez-Tangil, G., Peris-L\u00f3pez, P.: AVRAND: a software-based defense against code reuse attacks for AVR embedded devices. In: Caballero, J., Zurutuza, U., Rodr\u00edguez, R.J. (eds.) DIMVA 2016. LNCS, vol. 9721, pp. 58\u201377. Springer, Cham (2016). doi:10.1007\/978-3-319-40667-1_4"},{"key":"25_CR46","doi-asserted-by":"crossref","unstructured":"Prosser, R.T.: Applications of Boolean matrices to the analysis of flow diagrams. In: EJCC, pp. 133\u2013138 (1959)","DOI":"10.1145\/1460299.1460314"},{"key":"25_CR47","doi-asserted-by":"crossref","unstructured":"Ronen, E., O\u2019Flynn, C., Shamir, A., Weingarten, A.O.: IoT goes nuclear: creating a zigbee chain reaction. In: S&P, pp. 195\u2013212 (2017)","DOI":"10.1109\/SP.2017.14"},{"issue":"1","key":"25_CR48","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1109\/JSAC.2002.806121","volume":"21","author":"A Sabelfeld","year":"2003","unstructured":"Sabelfeld, A., Myers, A.C.: Language-based information-flow security. IEEE J. Sel. Areas Commun. 21(1), 5\u201319 (2003)","journal-title":"IEEE J. Sel. Areas Commun."},{"key":"25_CR49","doi-asserted-by":"crossref","unstructured":"Volpano, D., Smith, G.: Eliminating covert flows with minimum typings. In: CSFW, pp. 156\u2013168 (1997)","DOI":"10.1109\/CSFW.1997.596807"},{"key":"25_CR50","doi-asserted-by":"crossref","unstructured":"Zhang, D., Askarov, A., Myers, A.C.: Language-based control and mitigation of timing channels. In: PLDI, pp. 99\u2013109 (2012)","DOI":"10.1145\/2345156.2254078"},{"key":"25_CR51","doi-asserted-by":"crossref","unstructured":"Zhang, D., Wang, Y., Suh, G.E., Myers, A.C.: A hardware design language for timing-sensitive information-flow security. In: ASPLOS, pp. 503\u2013516 (2015)","DOI":"10.1145\/2775054.2694372"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2017"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-66402-6_25","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,24]],"date-time":"2025-06-24T22:00:01Z","timestamp":1750802401000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-66402-6_25"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9783319664019","9783319664026"],"references-count":51,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-66402-6_25","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017]]},"assertion":[{"value":"12 August 2017","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Oslo","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Norway","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2017","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 September 2017","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15 September 2017","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2017","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/deic.uab.cat\/conferences\/dpm\/dpm2017\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}