{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T16:22:51Z","timestamp":1781713371646,"version":"3.54.5"},"reference-count":86,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62102175"],"award-info":[{"award-number":["62102175"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62002151"],"award-info":[{"award-number":["62002151"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Science Technology and Innovation Commission of Shenzhen Municipality","award":["SGDX20201103095408029"],"award-info":[{"award-number":["SGDX20201103095408029"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,1,1]]},"DOI":"10.1109\/tdsc.2021.3139840","type":"journal-article","created":{"date-parts":[[2021,12,31]],"date-time":"2021-12-31T20:41:35Z","timestamp":1640983295000},"page":"574-589","source":"Crossref","is-referenced-by-count":9,"title":["Revisiting ARM Debugging Features: Nailgun and its Defense"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7763-1079","authenticated-orcid":false,"given":"Zhenyu","family":"Ning","sequence":"first","affiliation":[{"name":"Southern University of Science and Technology, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7039-033X","authenticated-orcid":false,"given":"Chenxu","family":"Wang","sequence":"additional","affiliation":[{"name":"Southern University of Science and Technology, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yinhua","family":"Chen","sequence":"additional","affiliation":[{"name":"Southern University of Science and Technology, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3365-2526","authenticated-orcid":false,"given":"Fengwei","family":"Zhang","sequence":"additional","affiliation":[{"name":"Southern University of Science and Technology, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2725-2529","authenticated-orcid":false,"given":"Jiannong","family":"Cao","sequence":"additional","affiliation":[{"name":"Hong Kong Polytechnic University, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"64 and IA-32 architectures software developers manual,"},{"key":"ref2","article-title":"Architecture instruction set extensions and future features programming reference,"},{"key":"ref3","first-page":"167","article-title":"kAFL: Hardware-assisted feedback fuzzing for OS kernels","volume-title":"Proc. 26th USENIX Secur. Symp.","author":"Schumilo"},{"key":"ref4","first-page":"17","article-title":"Postmortem program analysis with hardware-enhanced post-crash artifacts","volume-title":"Proc. 26th USENIX Secur. Symp.","author":"Xu"},{"key":"ref5","article-title":"Architecture reference manual ARMv7-A and ARMv7-R edition,"},{"key":"ref6","article-title":"ARMv8-A reference manual,"},{"key":"ref7","article-title":"Embedded trace macrocell architecture specification,"},{"key":"ref8","article-title":"Embedded cross trigger,"},{"key":"ref9","article-title":"Standard for test access port and boundary-scan architecture,"},{"key":"ref10","article-title":"System debugger,"},{"key":"ref11","article-title":"DS-5 development studio,"},{"key":"ref12","article-title":"Open on-chip debugger,"},{"key":"ref13","article-title":"TrustZone security,"},{"key":"ref14","article-title":"Model B+,"},{"key":"ref15","article-title":"ARM servers,"},{"key":"ref16","article-title":"Cloud service,"},{"key":"ref17","article-title":"Cloud service,"},{"key":"ref18","article-title":"Nexus 6,"},{"key":"ref19","article-title":"Exynos processors,"},{"key":"ref20","article-title":"Kirin processors,"},{"key":"ref21","article-title":"Redmi 6,"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00061"},{"key":"ref23","article-title":"Nailgun: Break the privilege isolation in ARM devices,"},{"key":"ref24","article-title":"CoreSight components technical reference manual,"},{"key":"ref25","article-title":"Lifting the (hyper) visor: Bypassing Samsungs real-time kernel protection,"},{"key":"ref26","article-title":"Juno ARM development platform SoC technical reference manual,"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.42"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897867"},{"key":"ref29","first-page":"897","article-title":"Cache template attacks: Automating attacks on inclusive last-level caches","volume-title":"Proc. 24th USENIX Secur. Symp.","author":"Lipp"},{"key":"ref30","first-page":"549","article-title":"ARMageddon: Cache attacks on mobile devices","volume-title":"Proc. 25th USENIX Secur. Symp.","author":"Lipp"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.43"},{"key":"ref32","first-page":"1057","article-title":"CLKSCREW: Exposing the perils of security-oblivious energy management","volume-title":"Proc. 26th USENIX Secur. Symp.","author":"Tang"},{"key":"ref33","article-title":"i.MX53 quick start board,"},{"key":"ref34","article-title":"A set of code running on i.MX53 quick start board,","author":"Zhang"},{"key":"ref35","article-title":"OpenSSL cryptography and SSL\/TLS toolkit,"},{"key":"ref36","article-title":"Trusted firmware,"},{"key":"ref37","article-title":"ARM development platform software,"},{"key":"ref38","article-title":"Ascend mate 7,"},{"key":"ref39","article-title":"E4 plus,"},{"key":"ref40","article-title":"Motorola E4 plus - More than just a fingerprint reader,"},{"key":"ref41","article-title":"Huawei unveils big ambitions with the 6-inch Huawei ascend mate 7,","author":"Grush"},{"key":"ref42","article-title":"Fingerprint scanner: The ultimate security system,","author":"Sasmal"},{"key":"ref43","article-title":"FPC1020 touch sensor,"},{"key":"ref44","article-title":"Product specification FPC1020,"},{"key":"ref45","article-title":"FPC1020 driver,","author":"Wu"},{"key":"ref46","article-title":"Fixed Virtual Platforms,"},{"key":"ref47","article-title":"Arm architecture reference manual supplement Armv9, for Armv9-A architecture profile,"},{"key":"ref48","article-title":"ARM architecture reference manual supplement - ARMv8, for the ARMv8-R AArch32 architecture profile,"},{"key":"ref49","article-title":"Arm architecture reference manual supplement - Armv8, for Armv8-R AArch64 architecture profile,"},{"key":"ref50","article-title":"ARMv7-M architecture reference manual,"},{"key":"ref51","article-title":"ARMv8-M architecture reference manual,"},{"key":"ref52","article-title":"SmartBond DA1469x product family,"},{"key":"ref53","article-title":"LPC552x\/S2x: Mainstream Arm Cortex-M33-based microcontroller family,"},{"key":"ref54","article-title":"nRF9160,"},{"key":"ref55","article-title":"48MHz Arm Cortex-M23 ultra-low power general purpose microcontroller,"},{"key":"ref56","article-title":"STM32L5 Series,"},{"key":"ref57","article-title":"World-Class, Award-Winning SAM L10 and SAM L11 Microcontroller Family,"},{"key":"ref58","article-title":"LPC55S69-EVK: LPCXpresso55S69 Development Board,"},{"key":"ref59","article-title":"nRF5340,"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2009.53"},{"key":"ref61","article-title":"Why (special agent) Johnny (still) cant encrypt: A security analysis of the APCO project 25 two-way radio system","volume-title":"Proc. 20th USENIX Secur. Symp.","author":"Clark"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3065913.3065919"},{"key":"ref63","first-page":"309","article-title":"Inception: System-wide security testing of real-world embedded systems software","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Corteggiani"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23313"},{"key":"ref65","article-title":"SURROGATES: Enabling near-real-time dynamic analyses of embedded systems","volume-title":"Proc. 9th USENIX Workshop Offensive Technol.","author":"Koscher"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/2768566.2768569"},{"key":"ref67","first-page":"232","article-title":"A security analysis of an in-vehicle infotainment and app platform","volume-title":"Proc. 10th USENIX Workshop Offensive Technol.","author":"Mazloom"},{"key":"ref68","first-page":"33","article-title":"Ninja: Towards transparent tracing and debugging on ARM","volume-title":"Proc. 26th USENIX Secur. Symp.","author":"Ning"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23229"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134618"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/2872362.2872390"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/2485922.2485970"},{"key":"ref73","first-page":"1075","article-title":"AutoLock: Why cache attacks on ARM are harder than You think","volume-title":"Proc. 26th USENIX Secur. Symp.","author":"Green"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00021"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.11"},{"key":"ref76","article-title":"Fault attacks on secure chips: From glitch to flash","author":"Skorobogatov","year":"2011"},{"key":"ref77","article-title":"i.MX53 multimedia applications processor reference manual,"},{"key":"ref78","article-title":"SuperSU,","author":"Jongma"},{"key":"ref79","article-title":"Xen ARM with virtualization extensions,"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/ccnc08.2007.64"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/2541940.2541946"},{"key":"ref82","article-title":"Raspbian kernel source code,"},{"key":"ref83","article-title":"Raspberry PI Processors,"},{"key":"ref84","article-title":"Nbench,","author":"Mayer"},{"key":"ref85","article-title":"Sysbench,"},{"key":"ref86","article-title":"Unixbench,"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10016903\/09667279.pdf?arnumber=9667279","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,13]],"date-time":"2024-01-13T22:08:12Z","timestamp":1705183692000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9667279\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,1,1]]},"references-count":86,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2021.3139840","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,1,1]]}}}