{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,6]],"date-time":"2026-09-06T17:37:53Z","timestamp":1788716273581,"version":"build-2803163510"},"reference-count":140,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100003032","name":"Agence Nationale Recherche Technologie (ANRT) to Orange Cyberdefense, France","doi-asserted-by":"publisher","award":["2020\/1361"],"award-info":[{"award-number":["2020\/1361"]}],"id":[{"id":"10.13039\/501100003032","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3298833","type":"journal-article","created":{"date-parts":[[2023,7,27]],"date-time":"2023-07-27T17:47:40Z","timestamp":1690480060000},"page":"77952-77979","source":"Crossref","is-referenced-by-count":14,"title":["Firmware Integrity Protection: A Survey"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1914-2829","authenticated-orcid":false,"given":"Antoine","family":"Marchand","sequence":"first","affiliation":[{"name":"Orange Cyberdefense, Paris La Défense, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Youcef","family":"Imine","sequence":"additional","affiliation":[{"name":"LAMIH, CNRS, UMR 8201, Université Polytechnique Hauts-de-France, Valenciennes, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hamza","family":"Ouarnoughi","sequence":"additional","affiliation":[{"name":"LAMIH, CNRS, UMR 8201, Université Polytechnique Hauts-de-France, Valenciennes, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Titouan","family":"Tarridec","sequence":"additional","affiliation":[{"name":"Orange Cyberdefense, Paris La Défense, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9457-7112","authenticated-orcid":false,"given":"Antoine","family":"Gallais","sequence":"additional","affiliation":[{"name":"LAMIH, CNRS, UMR 8201, Université Polytechnique Hauts-de-France, Valenciennes, France"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ReCoSoC.2011.5981501"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/SAMOS.2017.8344637"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2018.8599705"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1983.1056650"},{"key":"ref53","article-title":"Titan: Enabling a transparent silicon root of trust for cloud","author":"johnson","year":"2018"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1147\/JRD.2020.3008097"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ISQED.2019.8697657"},{"key":"ref54","year":"2021","journal-title":"Unified Extensible Firmware Interface Specification Version 2 2d"},{"key":"ref51","article-title":"What if you can’t trust your network card?","author":"duflot","year":"2011"},{"key":"ref50","article-title":"SEDAT: Security enhanced device attestation with TPM2.0","author":"dave","year":"2021","journal-title":"arXiv 2101 06362"},{"key":"ref46","author":"hudson","year":"2016","journal-title":"Bootstraping a Slightly More Secure Laptop"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-171r2"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095812"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046711"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2009.5425280"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ICCW.2008.78"},{"key":"ref44","article-title":"Security and privacy controls for information systems and organizations","year":"2020","journal-title":"National Institute of Standards and Technology"},{"key":"ref43","first-page":"542","article-title":"A practical hardware-assisted approach to customize trusted boot for mobile devices","author":"gonz\u00e1lez","year":"2014","journal-title":"Information Security"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11203-9_13"},{"key":"ref8","author":"matrosov","year":"2019","journal-title":"Breaking Through Another Side–Bypassing Firmware Security Boundaries From Embedded Controller"},{"key":"ref7","year":"2008","journal-title":"NSA ANT Catalog"},{"key":"ref9","author":"kallenberg","year":"2014","journal-title":"Defeating Signed BIOS Enforcement"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/1460877.1460892"},{"key":"ref3","author":"wecherowski","year":"2009","journal-title":"A Real Smm Rootkit Reversing and Hooking Bios Smi Handlers"},{"key":"ref6","year":"2003","journal-title":"Intel Platform Innovation Framework for EFI System Management Mode Core Interface Specification (SMM CIS)"},{"key":"ref5","author":"oleksiuk","year":"2015","journal-title":"Building reliable smm backdoor for UEFI based platforms"},{"key":"ref100","first-page":"15","article-title":"SMART: Secure and minimal architecture for (establishing a dynamic) root of trust","author":"eldefrawy","year":"2012","journal-title":"Proc NDSS"},{"key":"ref101","article-title":"ERASMUS: Efficient remote attestation via self-measurement for unattended settings","author":"carpent","year":"2017","journal-title":"arXiv 1707 09043"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-007-5699-1_90"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/GIOTS.2017.8016282"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/1641944.1641952"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2010.5439154"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2012.6289278"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOMW.2010.5700307"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/1127777.1127822"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2018.8383885"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_24"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TIE.2011.2178214"},{"key":"ref38","article-title":"A decentralized approach towards secure firmware updates and testing over commercial IoT devices","author":"gupta","year":"2020","journal-title":"arXiv 2011 12052"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2013.04.004"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.vlsi.2021.03.002"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ISGTEurope.2011.6162728"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/THS.2010.5655094"},{"key":"ref20","article-title":"Remote attestation: A literature review","author":"sprog\u00f8 banks","year":"2021","journal-title":"arXiv 2105 02466"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.23919\/ICACT53585.2022.9728840"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102498"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2022.100467"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2020.100312"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2005.44"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ISVLSI51109.2021.00069"},{"key":"ref12","first-page":"139","article-title":"Don’t brick your car: Firmware confidentiality and rollback for vehicles","author":"mansor","year":"2015","journal-title":"Proc 10th Int Conf Availability Rel Secur"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2988546"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2013.6581569"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2890277"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1109\/HOST45689.2020.9300126"},{"key":"ref97","author":"vliegen","year":"2019","journal-title":"A novel FPGA architecture and protocol for the self-attestation of configurable hardware"},{"key":"ref126","article-title":"Apple T2 security chip—Security overview","year":"2018","journal-title":"Apple Inc"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.10.008"},{"key":"ref127","article-title":"Project Cerberus—Security architecture overview specification","author":"kelly","year":"2017"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.102150"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS45731.2020.9180850"},{"key":"ref124","first-page":"143","author":"ruan","year":"2014","journal-title":"Boot with Integrity or Don’t Boot"},{"key":"ref10","article-title":"Remote exploitation of an unaltered passenger vehicle","author":"valasek","year":"2015"},{"key":"ref98","first-page":"1429","article-title":"VRASED: A verified hardware\/software co-design for remote attestation","author":"nunes","year":"2019","journal-title":"Proc 28th USENIX Secur Symp"},{"key":"ref125","author":"yao","year":"2020","journal-title":"Building Secure Firmware—Armoring the Foundation of the Platform"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3333165.3333169"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/Cybermatics_2018.2018.00051"},{"key":"ref19","article-title":"A survey on hardware approaches for remote attestation in network infrastructures","author":"sfyrakis","year":"2020","journal-title":"arXiv 2005 12453"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/IMITEC45504.2019.9015845"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1007\/11601494_3"},{"key":"ref133","first-page":"857","article-title":"Sanctum: Minimal hardware extensions for strong software isolation","author":"costan","year":"2016","journal-title":"Proc 25th USENIX Conf Secur Symp"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128847"},{"key":"ref134","first-page":"5","article-title":"La cryptographie militaire","volume":"9","author":"kerckhoffs","year":"1883","journal-title":"J Sci Militaires"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1016\/j.scico.2008.09.005"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1109\/PRIME.2018.8430370"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74477-1_97"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2018.8383919"},{"key":"ref130","article-title":"Whitepaper: Samsung Knox security solution","year":"2017","journal-title":"Samsung Research America"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557569"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-13869-0_2"},{"key":"ref89","article-title":"SRACARE: Secure remote attestation with code authentication and resilience engine","author":"dave","year":"2021","journal-title":"arXiv 2101 06148"},{"key":"ref139","first-page":"2057","article-title":"TPM-FAIL: TPM meets timing and lattice attacks","author":"moghimi","year":"2020","journal-title":"Proc 29th USENIX Secur Symp (USENIX Secur )"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/1998412.1998432"},{"key":"ref137","article-title":"TPM genie: Interposer attacks against the trusted platform module serial bus","author":"boone","year":"2018"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1162"},{"key":"ref138","first-page":"1229","article-title":"A bad dream: Subverting trusted platform module while you are sleeping","author":"han","year":"2018","journal-title":"Proc 27th USENIX Secur Symp (USENIX Secur )"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/ICCPS48487.2020.00036"},{"key":"ref135","first-page":"1","article-title":"Now you see It. TOCTOU attacks against BootGuard","author":"bosch","year":"2019","journal-title":"Proc Hack Box Secur Conf"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301329"},{"key":"ref136","article-title":"On the TOCTOU problem in remote attestation","author":"nunes","year":"2020","journal-title":"arXiv 2005 03873"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.06.008"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-63688-7_19"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS.2007.31"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01141-3_7"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2019.100199"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-131a"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.3390\/cryptography4040026"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511813603"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-53273-4_8"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/APCC.2011.6152919"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-90Ar1"},{"key":"ref107","article-title":"Recommendation for random bit generator (RBG) constructions","author":"barker","year":"2016"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/ICCE-Berlin47944.2019.8966174"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/PerComW.2012.6197498"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2016.7448561"},{"key":"ref105","article-title":"Security requirements for cryptographic modules","author":"evans","year":"2001"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/VLSI-SoC.2019.8920348"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1145\/3418685"},{"key":"ref76","first-page":"325","article-title":"Secure code updates for smart embedded devices based on PUFs","author":"feng","year":"2018","journal-title":"Cryptology and Network Security"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813670"},{"key":"ref2","year":"2008","journal-title":"System Management Mode Hack Using SMM for ‘Other Purposes"},{"key":"ref1","year":"2009","journal-title":"Persistent BIOS Infection"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6367"},{"key":"ref111","first-page":"2033","article-title":"Research of reliable trusted boot in embedded systems","volume":"3","author":"li","year":"2011","journal-title":"Proc Int Conf Comput Sci Netw Technol"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6655"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1155\/2016\/4516596"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.17487\/RFC7905"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6209"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2011.160"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/3312614.3312649"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/IPDPS.2011.141"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/i-PACT44901.2019.8959992"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1997.601317"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.17487\/rfc5288"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1109\/ISQED51717.2021.9424322"},{"key":"ref64","article-title":"Crypto-Bootloader - Secure in-field firmware updates for ultra-low power MCUs","author":"guillen","year":"2015"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/CIS.2017.00079"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/MASSW.2019.00026"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00011"},{"key":"ref66","article-title":"Código network: A decentralized firmware update framework for IoT devices","author":"nanopoulos","year":"2018"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-47719-5_12"},{"key":"ref65","article-title":"UpdaThing: A secure and open firmware update system for Internet of Things devices","author":"de pinho","year":"2016"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/TMSCS.2016.2569467"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-016-1870-0"},{"key":"ref122","article-title":"Technical whitepaper—HP sure start Gen3","year":"2017","journal-title":"HP Development Company"},{"key":"ref123","article-title":"Technical white paper—HP sure start","year":"2019","journal-title":"HP Development Company"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAIS.2013.6720571"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1109\/ReCoSoC.2017.8016144"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-30440-9_18"},{"key":"ref121","article-title":"Technical whitepaper HP sure start","year":"2016","journal-title":"HP Development Company"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10196361.pdf?arnumber=10196361","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,8,21]],"date-time":"2023-08-21T18:03:13Z","timestamp":1692640993000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10196361\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":140,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3298833","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}