{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T05:55:21Z","timestamp":1781675721203,"version":"3.54.5"},"reference-count":89,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,11]],"date-time":"2026-05-11T00:00:00Z","timestamp":1778457600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,11]],"date-time":"2026-05-11T00:00:00Z","timestamp":1778457600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,11]]},"DOI":"10.1109\/rtas68450.2026.00038","type":"proceedings-article","created":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T19:42:26Z","timestamp":1781638946000},"page":"344-359","source":"Crossref","is-referenced-by-count":0,"title":["Balancing Security and Schedulability: WCET Evaluation and Security Optimization in CPS"],"prefix":"10.1109","author":[{"given":"Zihan","family":"Li","sequence":"first","affiliation":[{"name":"Washington University,St. Louis"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marion","family":"Sudvarg","sequence":"additional","affiliation":[{"name":"Washington University,St. Louis"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ching-Hsiang","family":"Chan","sequence":"additional","affiliation":[{"name":"Washington University,St. Louis"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ryan","family":"Burrow","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nathan","family":"Burow","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Cailani","family":"Lemieux-Mack","sequence":"additional","affiliation":[{"name":"Vanderbilt University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sanjoy","family":"Baruah","sequence":"additional","affiliation":[{"name":"Washington University,St. Louis"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ning","family":"Zhang","sequence":"additional","affiliation":[{"name":"Washington University,St. Louis"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bryan C.","family":"Ward","sequence":"additional","affiliation":[{"name":"Vanderbilt University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"SchedCAT: Schedulability test collection and toolkit","year":"2020"},{"key":"ref2","volume-title":"AFL","year":"2021"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102165"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SIES.2015.7185039"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978358"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23420"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/s11241-021-09376-1"},{"key":"ref8","article-title":"A secure resilient real-time recovery model, scheduler, and analysis","volume-title":"Proc. 9th Workshop on Mixed Criticality Systems (WMC), RTSS","author":"Al Arafat"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/RTCSA66114.2025.00023"},{"key":"ref10","author":"Alexander","year":"2013","journal-title":"Barnaby Jack could hack your pacemaker and make your heart explode"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24016"},{"key":"ref12","volume-title":"ArduPilot"},{"key":"ref14","volume-title":"reference hw"},{"key":"ref15","volume-title":"An ILP representation of response time analysis","author":"Baruah","year":"2021"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS59052.2023.00015"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/11795490_24"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/s11241-005-0507-9"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS59052.2023.00012"},{"key":"ref20","article-title":"Scheduling and Locking in Multiprocessor Real-Time Operating Systems","volume-title":"PhD thesis","author":"Brandenburg","year":"2011"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3411496.3421224"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3054924"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00076"},{"key":"ref24","first-page":"147","article-title":"Securing software by enforcing data-flow integrity","volume-title":"Proceedings of the 7th symposium on Operating systems design and implementation","author":"Castro"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS.2019.00016"},{"key":"ref26","first-page":"9","article-title":"On the pitfalls of resource augmentation factors and utilization bounds in real-time scheduling","volume-title":"29th Euromicro Conference on Real-Time Systems (ECRTS 2017)","author":"Chen"},{"key":"ref27","first-page":"65","article-title":"ACES: Automatic compartments for embedded systems","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Clements"},{"key":"ref28","volume-title":"2024 CWE top 25 most dangerous software weaknesses"},{"key":"ref29","volume-title":"CVEdetails"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/502090.502091"},{"key":"ref31","first-page":"627","article-title":"A compiler for deterministic, decomposable negation normal form","author":"Darwiche","year":"2002","journal-title":"AAAI\/IAAI"},{"key":"ref32","volume-title":"Dexcom G7 Continuous Glucose Monitoring (CGM) System"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3264671"},{"key":"ref34","first-page":"2281","article-title":"Holistic control-flow protection on real-time embedded systems with Kage","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Du"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS.2015.16"},{"key":"ref36","article-title":"Instruction caches in static WCET analysis of artificially diversified software","volume-title":"30th Euromicro Conference on Real-Time Systems (ECRTS 2018)","author":"Fellmuth"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1023\/A:1025120124771"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3341105.3374014"},{"key":"ref39","year":"2024","journal-title":"Gurobi Optimizer Reference Manual"},{"key":"ref40","first-page":"136","article-title":"The M\u00e4lardalen WCET Benchmarks: Past, Present And Future. In B. Lisper, editor","volume-title":"10th International Workshop on Worst-Case Execution Time Analysis (WCET 2010), volume 15 of Open Access Series in Informatics (OASIcs)","author":"Gustafsson"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS.2016.021"},{"key":"ref42","first-page":"2225","article-title":"RapidPatch: Firmware hotpatching for real-time embedded devices","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"He"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.38"},{"key":"ref44","first-page":"7","article-title":"Microgadgets: size does matter in turing-complete return-oriented programming","volume-title":"Proceedings of the 6th USENIX conference on Offensive Technologies","author":"Homescu"},{"key":"ref45","article-title":"Optimizing Memory-Corruption Security Defenses for Real-Time Systems","volume-title":"PhD thesis","author":"Horne","year":"2022"},{"key":"ref46","volume-title":"Jackal UGV"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1093\/comjnl\/29.5.390"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179285"},{"key":"ref49","article-title":"Vulnerability analysis and mitigation of directed timing inference based attacks on time-triggered systems","volume-title":"Euromicro Conference on Real-Time Systems","author":"Kr\u00fcger"},{"key":"ref50","doi-asserted-by":"crossref","DOI":"10.1145\/3129743.3129748","article-title":"Code-pointer integrity","volume-title":"11th USENIX Symposium on Operating Systems Design and Implementation","author":"Kuznetsov"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.25"},{"key":"ref52","article-title":"Optimizing runtime security in real-time embedded systems","volume-title":"Proc. of Workshop on Optimization for Embedded and Real-time Systems (OPERA)","author":"Lemieux-Mack"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS61025.2024.00033"},{"key":"ref54","first-page":"1807","article-title":"Software availability protection in cyber-physical systems","volume-title":"34th USENIX Security Symposium (USENIX Security 25)","author":"Li"},{"key":"ref55","first-page":"445","article-title":"Data-flow availability: Achieving timing assurance in autonomous systems","volume-title":"18th USENIX Symposium on Operating Systems Design and Implementation (OSDI 24)","author":"Li"},{"key":"ref56","volume-title":"LLVM released version 13.0.1"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ICESS.2009.24"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS62706.2024.00027"},{"key":"ref59","volume-title":"A detailed description of the Data Execution Prevention (DEP) feature in Windows XP Service Pack 2, Windows XP Tablet PC Edition 2005, and Windows Server 2003","year":"2006"},{"issue":"S 91","key":"ref60","first-page":"1","article-title":"Remote exploitation of an unaltered passenger vehicle","volume":"2015","author":"Miller","year":"2015","journal-title":"Black Hat USA"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/ECRTS.2014.28"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542504"},{"key":"ref63","volume-title":"NVD-CVE-2022-28711"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24159"},{"key":"ref65","year":"2003","journal-title":"Openbsd 3.3"},{"key":"ref66","year":"2003","journal-title":"PaX address space layout randomization"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS.2015.7108450"},{"key":"ref68","volume-title":"ROBOTIS OP3 Humanoid"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/3722041.3723094"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134633"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00010"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.240264"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS62706.2024.00040"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00042"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.13"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS65571.2025.00027"},{"key":"ref77","volume-title":"Turtlebot3"},{"key":"ref78","volume-title":"Unitree Quadruped Robot Go1"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP63326.2025.00064"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/CDC40024.2019.9030144"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833604"},{"key":"ref82","first-page":"2761","article-title":"{ARI}: Attestation of real-time mission execution integrity","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Wang"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS62706.2024.00042"},{"key":"ref84","first-page":"6615","article-title":"Opportunistic data flow integrity for real-time cyber-physical systems using worst case execution time reservation","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Wang"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS61025.2024.00036"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/2659787.2659811"},{"key":"ref87","volume-title":"Waymo One: Autonomous rides in San Francisco"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/RTCSA.2010.40"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS.2016.7461362"},{"key":"ref90","first-page":"1219","article-title":"Silhouette: Efficient protected shadow stacks for embedded systems","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Zhou"}],"event":{"name":"2026 IEEE 32nd Real-Time and Embedded Technology and Applications Symposium (RTAS)","location":"Saint Malo, France","start":{"date-parts":[[2026,5,11]]},"end":{"date-parts":[[2026,5,14]]}},"container-title":["2026 IEEE 32nd Real-Time and Embedded Technology and Applications Symposium (RTAS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11558268\/11558364\/11558406.pdf?arnumber=11558406","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T05:24:49Z","timestamp":1781673889000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11558406\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,11]]},"references-count":89,"URL":"https:\/\/doi.org\/10.1109\/rtas68450.2026.00038","relation":{},"subject":[],"published":{"date-parts":[[2026,5,11]]}}}