{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T07:58:03Z","timestamp":1772006283184,"version":"3.50.1"},"reference-count":65,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T00:00:00Z","timestamp":1765152000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T00:00:00Z","timestamp":1765152000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100003725","name":"National Research Foundation of Korea","doi-asserted-by":"publisher","award":["RS-2023-00217689"],"award-info":[{"award-number":["RS-2023-00217689"]}],"id":[{"id":"10.13039\/501100003725","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100014188","name":"MSIT","doi-asserted-by":"publisher","award":["IITP-2025-RS-2023-00259967"],"award-info":[{"award-number":["IITP-2025-RS-2023-00259967"]}],"id":[{"id":"10.13039\/501100014188","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,12,8]]},"DOI":"10.1109\/acsac67867.2025.00030","type":"proceedings-article","created":{"date-parts":[[2026,2,24]],"date-time":"2026-02-24T20:54:58Z","timestamp":1771966498000},"page":"198-211","source":"Crossref","is-referenced-by-count":0,"title":["ELK: Effective Lock-and-Key Technique for Temporal Memory Safety on Embedded Devices in ARMv8-M"],"prefix":"10.1109","author":[{"given":"Jeonghwan","family":"Kang","sequence":"first","affiliation":[{"name":"Pusan National University,Busan,Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kyounghwan","family":"Kim","sequence":"additional","affiliation":[{"name":"Pusan National University,Busan,Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Donghyun","family":"Kwon","sequence":"additional","affiliation":[{"name":"Pusan National University,Busan,Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Armv8-m memory model and memory protection user guide","year":"2016"},{"key":"ref2","volume-title":"ARMv8-M Architecture Reference Manual","year":"2021"},{"key":"ref3","volume-title":"ARM Memory System and Address Space","year":"2023"},{"key":"ref4","volume-title":"STM32 NUCLEO-144 Development Board","year":"2024"},{"key":"ref5","volume-title":"LLVM 15.x","year":"2025"},{"key":"ref6","volume-title":"Memory management in riot os","year":"2025"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00013"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00058"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ISCTrkiye64784.2024.10779269"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.TN.1995"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2338965.2336769"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3503222.3507780"},{"key":"ref13","article-title":"Ics advisory icsa-21\u2013119-04, multiple rtos","volume-title":"CISA ICS-CERT","year":"2022"},{"key":"ref14","author":"Cui","year":"2013","journal-title":"When firmware modifications attack: A case study of embedded exploitation"},{"key":"ref15","first-page":"815","article-title":"Oscar: A practical {Page-Permissions-Based} scheme for thwarting dangling pointers","volume-title":"26th USENIX security symposium (USENIX security 17)","author":"Dang","year":"2017"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3650200.3656606"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3503222.3507712"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3399068"},{"key":"ref19","first-page":"1037","article-title":"{PTAuth}: Temporal memory safety via robust points-to authentication","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Mirzazade Farkhani","year":"2021"},{"key":"ref20","article-title":"GD32E503xx Datasheet","year":"2024","journal-title":"GigaDevice Semiconductor Inc"},{"key":"ref21","article-title":"Rangesanitizer: Detecting memory errors with efficient range checks","author":"Gorter","year":"2025","journal-title":"USENIX Security"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833610"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2016.124"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3460319.3464835"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/WWC.2001.990739"},{"key":"ref26","article-title":"Infineon Technologies AG","year":"2024","journal-title":"PSoC 62 MCU Family Datasheet"},{"key":"ref27","first-page":"1","article-title":"Look before you access: Efficient heap memory safety for embedded systems on armv8-m","volume-title":"Proceedings of the 61st ACM\/IEEE Design Automation Conference","author":"Kang","year":"2024"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3133850.3133867"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3300368"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23238"},{"key":"ref31","article-title":"An {Off-Chip} attack on hardware enclaves via the memory bus","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Lee","year":"2020"},{"key":"ref32","volume-title":"Linux kernel document. Kernel concurrency sanitizer (kcsan)","year":"2019"},{"key":"ref33","article-title":"Kernel address sanitizer (kasan)","volume-title":"Linux kernel document","year":"2023"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243826"},{"key":"ref35","first-page":"1","article-title":"Effectively sanitizing embedded operating systems","volume-title":"Proceedings of the 61st ACM\/IEEE Design Automation Conference","author":"Liu","year":"2024"},{"key":"ref36","volume-title":"Mibench2","author":"Hicks","year":"2023"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.24053"},{"key":"ref38","first-page":"5323","article-title":"{SHiFT}: Semi-hosted fuzz testing for embedded applications","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Mera","year":"2024"},{"key":"ref39","year":"2022","journal-title":"SAM L11 Family Data Sheet"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/1806651.1806657"},{"key":"ref41","article-title":"Cve-2017\u201314201 detail","volume-title":"National Vulnerability Database (NVD)","year":"2017"},{"key":"ref42","article-title":"Cve-2019\u201318178 detail","volume-title":"National Vulnerability Database (NVD)","year":"2019"},{"key":"ref43","article-title":"Cve-2019\u20135096 detail","volume-title":"National Vulnerability Database (NVD)","year":"2019"},{"key":"ref44","article-title":"Cve-2020\u201311900 detail","volume-title":"National Vulnerability Database (NVD)","year":"2020"},{"key":"ref45","article-title":"Cve-2020\u201327295 detail","volume-title":"National Vulnerability Database (NVD)","year":"2020"},{"key":"ref46","article-title":"Cve-2021\u201322156 detail","volume-title":"National Vulnerability Database (NVD)","year":"2021"},{"key":"ref47","article-title":"Cve-2024\u201327099 detail","volume-title":"National Vulnerability Database (NVD)","year":"2024"},{"key":"ref48","article-title":"Cve-2024\u20133187 detail","volume-title":"National Vulnerability Database (NVD)","year":"2024"},{"key":"ref49","article-title":"NXP Semiconductors","year":"2023","journal-title":"LPC55S6x 32-bit ARM Cortex-M33 Microcon-troller Datasheet"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3642974.3652285"},{"key":"ref51","article-title":"Beebs: Open benchmarks for energy measurements on embedded platforms","author":"Pallister","year":"2013","journal-title":"ar Xiv preprint"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.24804"},{"key":"ref53","first-page":"309","article-title":"{AddressSanitizer}: A fast address sanity checker","volume-title":"2012 USENIX annual technical conference (USENIX ATC 12)","author":"Serebryany","year":"2012"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23541"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-75208-2_1"},{"key":"ref56","year":"2024","journal-title":"EFR32MG21 Series 2 Wireless Gecko SoC Datasheet"},{"key":"ref57","article-title":"STMicroelectronics","year":"2024","journal-title":"STM32L562xx Ultra-Low-Power Arm Cortex-M33 MCUs"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.13"},{"key":"ref59","first-page":"149","article-title":"{SoK}:{Where\u2019s} the {\u201cup\u201d?}! a comprehensive (bottom-up) study on the security of arm {Cortex-M} systems","volume-title":"18th USeNIX WOOT conference on offensive technologies (WOOT 24)","author":"Tan","year":"2024"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3064176.3064211"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-15462-2_12"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00088"},{"key":"ref63","first-page":"1081","article-title":"{DMAAUTH}: A lightweight pointer integrity-based secure architecture to defeat {DMA} attacks","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Wang","year":"2024"},{"key":"ref64","first-page":"2453","article-title":"Preventing {Use-After-Free} attacks with fast forward allocation","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Wickman","year":"2021"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23190"}],"event":{"name":"2025 IEEE Annual Computer Security Applications Conference (ACSAC)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,12,8]]},"end":{"date-parts":[[2025,12,12]]}},"container-title":["2025 IEEE Annual Computer Security Applications Conference (ACSAC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11391636\/11391706\/11391797.pdf?arnumber=11391797","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T07:01:08Z","timestamp":1772002868000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11391797\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,8]]},"references-count":65,"URL":"https:\/\/doi.org\/10.1109\/acsac67867.2025.00030","relation":{},"subject":[],"published":{"date-parts":[[2025,12,8]]}}}