{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,13]],"date-time":"2026-11-13T17:54:15Z","timestamp":1794592455389,"version":"4.9.1"},"reference-count":94,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,5]]},"DOI":"10.1109\/sp46215.2023.10179285","type":"proceedings-article","created":{"date-parts":[[2023,7,21]],"date-time":"2023-07-21T17:18:15Z","timestamp":1689959895000},"page":"2990-3007","source":"Crossref","is-referenced-by-count":21,"title":["EC: Embedded Systems Compartmentalization via Intra-Kernel Isolation"],"prefix":"10.1109","author":[{"given":"Arslan","family":"Khan","sequence":"first","affiliation":[{"name":"Purdue University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dongyan","family":"Xu","sequence":"additional","affiliation":[{"name":"Purdue University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dave Jing","family":"Tian","sequence":"additional","affiliation":[{"name":"Purdue University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Cve - cve-2021-31571"},{"key":"ref2","volume-title":"Cve - cve-2021-31572"},{"key":"ref3","volume-title":"Nvd - cve-2022-0895"},{"key":"ref4","volume-title":"Nvd - cve-2022-23120"},{"key":"ref5","volume-title":"Nvd - cve-2022-23603"},{"key":"ref6","volume-title":"posborne\/cmsis-svd: Aggegration of arm cortex-m (and other) cmsis svds and related tools"},{"key":"ref7","volume-title":"Project zero: Over the air - vol. 2, pt. 1: Exploiting the wi-fi stack on apple devices"},{"key":"ref8","volume-title":"Project zero: Over the air: Exploiting broadcom\u2019s wi-fi stack (part 1)"},{"key":"ref9","volume-title":"Project zero: Over the air: Exploiting broadcom\u2019s wi-fi stack (part 1)"},{"key":"ref10","volume-title":"Stm32f769i-eval - evaluation board with stm32f769ni mcu - stmicro-electronics"},{"key":"ref11","volume-title":"Stmicroelectronics\/stm32cubef4: Stm32cube mcu full package for the stm32f4 series - (hal + ll drivers, cmsis core, cmsis device, mw libraries plus a set of projects running on all boards provided by st (nucleo, evaluation and discovery kits))"},{"key":"ref12","volume-title":"Stmicroelectronics\/stm32cubef7: Stm32cube mcu full package for the stm32f7 series - (hal + ll drivers, cmsis core, cmsis device, mw libraries plus a set of projects running on all boards provided by st (nucleo, evaluation and discovery kits))"},{"key":"ref13","volume-title":"Systick timer (systick)"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3447786.3456249"},{"key":"ref15","article-title":"urai: Return address integrity for embedded systems","volume-title":"Technical report","author":"Almakhdhub","year":"2020"},{"key":"ref16","article-title":"Common microcontroller software interface standard (cmsis) \u2013 arm developer"},{"key":"ref17","article-title":"System view description"},{"key":"ref18","volume-title":"L4 user manual.","author":"Au","year":"1998"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660350"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23009"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1165389.945462"},{"key":"ref22","article-title":"Freertos - market leading rtos (real time operating system) for embedded systems with internet of things extensions","author":"Barry"},{"issue":"7","key":"ref23","first-page":"4982","article-title":"Common security attacks on drones","volume":"13","author":"Bonilla","year":"2018","journal-title":"International Journal of Applied Engineering Research"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.14569\/IJACSA.2016.070463"},{"key":"ref25","article-title":"Is less really more? why reducing code reuse gadget counts via software debloating doesn\u2019t necessarily indicate improved security","author":"Brown","year":"2019"},{"key":"ref26","first-page":"19","article-title":"Towards taming privilege-escalation attacks on android","volume-title":"NDSS","volume":"17","author":"Bugiel"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.12"},{"key":"ref28","first-page":"65","article-title":"{ACES}: Automatic compartments for embedded systems","volume-title":"27th {USENIX} Security Symposium ({USENIX} Security 18)","author":"Clements"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.37"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294295"},{"key":"ref31","article-title":"When firmware modifications attack: A case study of embedded exploitation","author":"Cui","year":"2013","journal-title":"NDSS"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/2694344.2694386"},{"key":"ref33","article-title":"Controlling uavs with sensor input spoofing attacks","volume-title":"10th {USENIX} Workshop on Offensive Technologies ({WOOT} 16)","author":"Davidson"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/I-SMAC.2017.8058363"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2694344.2694383"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2517349.2522720"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2017.7927214"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/780822.781133"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/54289.871709"},{"key":"ref40","first-page":"489","article-title":"Hodor: Intra-process isolation for high-throughput data plane libraries","volume-title":"2019 {USENIX} Annual Technical Conference ({USENIX} {ATC} 19)","author":"Hedayati"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2016.7795496"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978327"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP57164.2023.00065"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3458864.3466627"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-20398-5_4"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-5906-5_646"},{"key":"ref47","article-title":"Evolution of the pikeos microkernel","volume-title":"First International Workshop on Microkernels for Embedded Systems","volume":"50","author":"Kaiser"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/SP.1987.10011"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/uemcon53757.2021.9666706"},{"key":"ref50","article-title":"M2mon: Building an mmio-based security reference monitor for unmanned vehicles","volume-title":"30th {USENIX} Security Symposium ({USENIX} Security 21)","author":"Khan"},{"key":"ref51","first-page":"273","article-title":"Privman: A library for partitioning applications","volume-title":"USENIX Annual Technical Conference, FREENIX Track","author":"Kilpatrick"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23107"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833567"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629596"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/2592798.2592824"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2006.08.039"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-27139-2_7"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/ITME.2016.0087"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354218"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23194"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/2872362.2872379"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.24053"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3381052.3381328"},{"key":"ref64","first-page":"241","article-title":"libmpk: Software abstraction for intel memory protection keys (intel{MPK})","volume-title":"2019 USENIX Annual Technical Conference ({USENIX} {ATC} 19)","author":"Park"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS.2019.00032"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00041"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1147\/JRD.2013.2284403"},{"key":"ref68","article-title":"Poster: Automatic detection of confused-deputy attacks on arm trustzone environments","author":"Suciu","year":"2018","journal-title":"IEEE SecDev"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/2892208.2892235"},{"key":"ref70","first-page":"1221","article-title":"{ERIM}: Secure, efficient in-process isolation with protection keys ({MPK})","volume-title":"28th {USENIX} Security Symposium ({USENIX} Security 19)","author":"Vahldiek-Oberwagner"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.30"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1155\/2011\/530354"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/605397.605429"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095814"},{"key":"ref75","volume-title":"Armv8-m architecture reference manual"},{"key":"ref76","volume-title":"Cve - cve-2008-3024"},{"key":"ref77","volume-title":"Cve - cve-2018-16525"},{"key":"ref78","volume-title":"Cve - cve-2018-16526"},{"key":"ref79","volume-title":"Cve - cve-2018-16528"},{"key":"ref80","volume-title":"Cve - cve-2019-11482"},{"key":"ref81","volume-title":"Cve - cve-2019-17102"},{"key":"ref82","volume-title":"Cve - cve-2020-10066"},{"key":"ref83","volume-title":"Cve - cve-2020-1939"},{"key":"ref84","volume-title":"Cve - cve-2021-30145"},{"key":"ref85","volume-title":"Cve - cve-2021-3322"},{"key":"ref86","volume-title":"Cve - cve-2021-43041"},{"key":"ref87","volume-title":"L4linux"},{"key":"ref88","volume-title":"L4re \u2013 the l4 runtime environment"},{"key":"ref89","volume-title":"M-profile architectures \u2013 arm developer"},{"key":"ref90","volume-title":"Nvd - cve-2021-35331"},{"key":"ref91","volume-title":"Stm32f4discovery - discovery kit with stm32f407vg mcu * new order code stm32f407g-disc1 (replaces stm32f4discovery) - stmicroelectronics"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1179"},{"key":"ref93","article-title":"Lightblue: Automatic profile-aware debloating of bluetooth stacks","volume-title":"Proceedings of the USENIX Security Symposium (USENIX Security)","author":"Wu"},{"key":"ref94","first-page":"2135","article-title":"{DnD}: A {Cross-Architecture} deep neural network decompiler","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Wu"}],"event":{"name":"2023 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2023,5,21]]},"end":{"date-parts":[[2023,5,25]]}},"container-title":["2023 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10179215\/10179280\/10179285.pdf?arnumber=10179285","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,7,20]],"date-time":"2024-07-20T05:12:45Z","timestamp":1721452365000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10179285\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5]]},"references-count":94,"URL":"https:\/\/doi.org\/10.1109\/sp46215.2023.10179285","relation":{},"subject":[],"published":{"date-parts":[[2023,5]]}}}