{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,14]],"date-time":"2026-10-14T16:46:25Z","timestamp":1791996385646,"version":"4.4.0"},"reference-count":45,"publisher":"IEEE","license":[{"start":{"date-parts":[[2021,5,1]],"date-time":"2021-05-01T00:00:00Z","timestamp":1619827200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2021,5,1]],"date-time":"2021-05-01T00:00:00Z","timestamp":1619827200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000006","name":"Office of Naval Research","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100016311","name":"Arm","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100016311","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,5]]},"DOI":"10.1109\/sp40001.2021.00018","type":"proceedings-article","created":{"date-parts":[[2021,8,26]],"date-time":"2021-08-26T17:03:31Z","timestamp":1629997411000},"page":"1938-1954","source":"Crossref","is-referenced-by-count":56,"title":["DICE: Automatic Emulation of DMA Input Channels for Dynamic Firmware Analysis"],"prefix":"10.1109","author":[{"given":"Alejandro","family":"Mera","sequence":"first","affiliation":[{"name":"Northeastern University,Khoury College of Computer Sciences,Boston,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bo","family":"Feng","sequence":"additional","affiliation":[{"name":"Northeastern University,Khoury College of Computer Sciences,Boston,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Long","family":"Lu","sequence":"additional","affiliation":[{"name":"Northeastern University,Khoury College of Computer Sciences,Boston,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Engin","family":"Kirda","sequence":"additional","affiliation":[{"name":"Northeastern University,Khoury College of Computer Sciences,Boston,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","article-title":"NMEA data","year":"0"},{"key":"ref35","article-title":"Gd32vf103 user manual","year":"2019"},{"key":"ref12","article-title":"Gartner says 5.8 billion enterprise and automotive iot endpoints will be in use in 2020","year":"0"},{"key":"ref34","article-title":"Symdrive: Testing drivers without devices","author":"renzelmann","year":"2012","journal-title":"OSDI"},{"key":"ref15","article-title":"Toward the analysis of embedded firmware through automated re-hosting","author":"gustafson","year":"2019","journal-title":"International Symposium on Research in Attacks Intrusions and Defenses (RAID) 2019)"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301329"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CNS48642.2020.9162164"},{"key":"ref36","article-title":"Qemu for mips pic32","author":"serge","year":"0"},{"key":"ref31","article-title":"CVE-2019-6496","year":"2019"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23166"},{"key":"ref11","article-title":"Direct memory attack the kernel","author":"frisk","year":"2016","journal-title":"Proceedings of DEFCON’24"},{"key":"ref33","article-title":"Over the air: Exploiting broadcom’s wi-fi stack","year":"2017"},{"key":"ref10","article-title":"P2im: Scalable and hardware-independent firmware testing via automatic peripheral interface modeling","author":"feng","year":"2020","journal-title":"29th USENIX Security Symposium"},{"key":"ref32","article-title":"A case study of toyota unintended acceleration and software safety","author":"phil","year":"2014"},{"key":"ref2","article-title":"Halucinator: Firmware re-hosting through abstraction layer emulation","year":"2020","journal-title":"29th USENIX Security Symposium"},{"key":"ref1","year":"0"},{"key":"ref17","article-title":"PARTEMU: Enabling dynamic analysis of real-world trustzone software using emulation","author":"harrison","year":"2020","journal-title":"29th USENIX Security Symposium"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23176"},{"key":"ref16","first-page":"127","article-title":"Application memory isolation on ultra-low-power mcus","author":"hardin","year":"2018","journal-title":"2018 USENIX Annual Technical Conference USENIX ATC 2018"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.17"},{"key":"ref19","article-title":"The mcclean report 2017 - april update","year":"0"},{"key":"ref18","article-title":"Triforceafl","author":"hertz","year":"0"},{"key":"ref24","article-title":"Microchip product portfolio march 2019","year":"2019"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23194"},{"key":"ref45","article-title":"american fuzzy lop","author":"zalewski","year":"0"},{"key":"ref26","article-title":"Quick reference guide 32bit microcontrollers","year":"2019"},{"key":"ref25","article-title":"Quick reference guide 16bit microcontrollers","year":"2019"},{"key":"ref20","article-title":"Embedded security testing with peripheral device caching and runtime program state approximation","author":"kammerstetter","year":"2016","journal-title":"10th International Conference on Emerging Security Information Systems and Technologies (SECUWARE)"},{"key":"ref42","article-title":"Charm: Facilitating dynamic analysis of device drivers of mobile systems","author":"talebi","year":"2018","journal-title":"27th USENIX Security Symp"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00042"},{"key":"ref22","article-title":"Surrogates: En-abling near-real-time dynamic analyses of embedded systems","author":"koscher","year":"2015","journal-title":"WOOT"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23229"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590301"},{"key":"ref43","article-title":"Stuxnet","year":"2010"},{"key":"ref28","article-title":"Remote exploitation of an unaltered passenger vehicle","author":"charlie","year":"0"},{"key":"ref27","article-title":"Quick reference guide 8bit microcontrollers","year":"2019"},{"key":"ref29","article-title":"Avatar 2: A multi-target orchestration platform","author":"muench","year":"2018","journal-title":"Bar"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897900"},{"key":"ref7","article-title":"Inception: system-wide security testing of real-world embedded systems software","author":"corteggiani","year":"2018","journal-title":"27th USENIX Security Symp"},{"key":"ref9","article-title":"ChibiOS","author":"di sirio","year":"2017"},{"key":"ref4","article-title":"Qemu features\/softmmu","author":"bellar","year":"0"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/B978-0-932376-00-8.50016-5"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23415"},{"key":"ref5","article-title":"Comprehensive experimental analyses of automotive attack surfaces","author":"checkoway","year":"2011","journal-title":"20th USENIX Security Symposium"},{"key":"ref40","article-title":"Stm32f4 reference manual","year":"2019"}],"event":{"name":"2021 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2021,5,24]]},"end":{"date-parts":[[2021,5,27]]}},"container-title":["2021 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9519381\/9519382\/09519398.pdf?arnumber=9519398","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,8]],"date-time":"2023-11-08T18:25:06Z","timestamp":1699467906000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9519398\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,5]]},"references-count":45,"URL":"https:\/\/doi.org\/10.1109\/sp40001.2021.00018","relation":{},"subject":[],"published":{"date-parts":[[2021,5]]}}}