{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,19]],"date-time":"2025-12-19T09:34:57Z","timestamp":1766136897525,"version":"3.41.0"},"reference-count":38,"publisher":"Association for Computing Machinery (ACM)","issue":"5s","license":[{"start":{"date-parts":[[2017,9,27]],"date-time":"2017-09-27T00:00:00Z","timestamp":1506470400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Bavarian Ministry of State for Economics","award":["0704\/883 25"],"award-info":[{"award-number":["0704\/883 25"]}]},{"name":"German Federal Ministry of Education and Research","award":["01IS16025"],"award-info":[{"award-number":["01IS16025"]}]},{"DOI":"10.13039\/501100001659","name":"Deutsche Forschungsgemeinschaft","doi-asserted-by":"publisher","award":["SCHR 603\/9-2 & SFB\/TR89, Project C1"],"award-info":[{"award-number":["SCHR 603\/9-2 & SFB\/TR89, Project C1"]}],"id":[{"id":"10.13039\/501100001659","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Embed. Comput. Syst."],"published-print":{"date-parts":[[2017,10,31]]},"abstract":"<jats:p>Soft errors are a challenging and urging problem in the domain of safety-critical embedded systems. For decades, checking schemes have been investigated and improved to mitigate soft-error effects for the class of control-flow faults, with current industrial standards strongly recommending their use.<\/jats:p>\n          <jats:p>However, reality looks different: Taking a systems perspective, we implemented four representative Control-Flow Checking (CFC) schemes and put them through their paces in 396 fault-injection campaigns. In contrast to previous work, which typically relied on probability-based vulnerability metrics, we accounted for the influence of memory and time overheads on the fault-space dimensions and applied those in full-scan fault injections. This change in procedure alone severely degraded the perceived effectiveness of CFC.<\/jats:p>\n          <jats:p>In addition, we expanded the perspective to data-flow faults and their influence on the overall susceptibility, an aspect that so far has been largely ignored. Our results suggest that, without accompanying measures, any improvement regarding control-flow faults is dominated by the increase in data faults caused by the increased attack surface in terms of memory and runtime overhead. Moreover, CFC performance less depended on the detection capabilities than on general aspects of the concrete binary compilation and execution.<\/jats:p>\n          <jats:p>In conclusion, incorporating CFC is not as straightforward as often assumed and the vulnerability of systems with hardened control-flow may in many cases even be increased by the schemes themselves.<\/jats:p>","DOI":"10.1145\/3126503","type":"journal-article","created":{"date-parts":[[2017,9,27]],"date-time":"2017-09-27T12:33:53Z","timestamp":1506515633000},"page":"1-19","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["Demystifying Soft-Error Mitigation by Control-Flow Checking -- A New Perspective on its Effectiveness"],"prefix":"10.1145","volume":"16","author":[{"given":"Simon","family":"Schuster","sequence":"first","affiliation":[{"name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peter","family":"Ulbrich","sequence":"additional","affiliation":[{"name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Isabella","family":"Stilkerich","sequence":"additional","affiliation":[{"name":"Schaeffler Technologies AG 8 Co. KG"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Christian","family":"Dietrich","sequence":"additional","affiliation":[{"name":"Leibniz Universit\u00e4t Hannover (LUH)"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wolfgang","family":"Schr\u00f6Der-Preikschat","sequence":"additional","affiliation":[{"name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2017,9,27]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2011.5958244"},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/71.774911"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2013.2248373"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/MDT.2005.69"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/MM.2005.110"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/23.903758"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/945885.945892"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2950053"},{"key":"e_1_2_1_9_1","unstructured":"R. Feldt and A. Magazinius. 2010. Validity threats in empirical software engineering research-An Initial Survey. In SEKE. 374--379.  R. Feldt and A. Magazinius. 2010. Validity threats in empirical software engineering research-An Initial Survey. In SEKE. 374--379."},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.5028\/jatm.v5i3.224"},{"key":"e_1_2_1_11_1","volume-title":"Symp. on Control, Computers, Communication in Transportation (CCCT\u201989)","author":"Forin P.","year":"1989","unstructured":"P. Forin . 1989 . Vital coded microprocessor principles and application for various transit systems . In Symp. on Control, Computers, Communication in Transportation (CCCT\u201989) . 79--84. P. Forin. 1989. Vital coded microprocessor principles and application for various transit systems. In Symp. on Control, Computers, Communication in Transportation (CCCT\u201989). 79--84."},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/IOLTS.2005.16"},{"volume-title":"18th IEEE International Symposium on Defect and Fault Tolerance in VLSI Systems, 2003. Proceedings. 581--588","author":"Goloubeva O.","key":"e_1_2_1_13_1","unstructured":"O. Goloubeva , M. Rebaudengo , M. S. Reorda , and M. Violante . 2003. Soft-error detection using control flow assertions . In 18th IEEE International Symposium on Defect and Fault Tolerance in VLSI Systems, 2003. Proceedings. 581--588 . O. Goloubeva, M. Rebaudengo, M. S. Reorda, and M. Violante. 2003. Soft-error detection using control flow assertions. In 18th IEEE International Symposium on Defect and Fault Tolerance in VLSI Systems, 2003. Proceedings. 581--588."},{"volume-title":"Annual Reliability and Maintainability Symposium, 2005. Proceedings. 583--589","author":"Goloubeva O.","key":"e_1_2_1_14_1","unstructured":"O. Goloubeva , M. Rebaudengo , M. S. Reorda , and M. Violante . 2005. Improved software-based processor control-flow errors detection technique . In Annual Reliability and Maintainability Symposium, 2005. Proceedings. 583--589 . O. Goloubeva, M. Rebaudengo, M. S. Reorda, and M. Violante. 2005. Improved software-based processor control-flow errors detection technique. In Annual Reliability and Maintainability Symposium, 2005. Proceedings. 583--589."},{"key":"e_1_2_1_15_1","unstructured":"O. Goloubeva M. Rebaudengo M. S. Reorda and M. Violante. 2006. Software-Implemented Hardware Fault Tolerance. Springer US.   O. Goloubeva M. Rebaudengo M. S. Reorda and M. Violante. 2006. Software-Implemented Hardware Fault Tolerance. Springer US."},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1002\/j.1538-7305.1950.tb00463.x"},{"key":"e_1_2_1_17_1","doi-asserted-by":"crossref","unstructured":"F. Irom and D. Nguyen. 2007. IEEE Transactions on Nuclear Science 54 6 (Dec 2007) 2547--2553.  F. Irom and D. Nguyen. 2007. IEEE Transactions on Nuclear Science 54 6 (Dec 2007) 2547--2553.","DOI":"10.1109\/TNS.2007.909984"},{"volume-title":"Road vehicles -- Functional safety -- Part 9: Automotive Safety Integrity Level (ASIL)-oriented and safety-oriented analyses","author":"ISO","key":"e_1_2_1_18_1","unstructured":"ISO 26262-9. 2011. ISO 26262-9:2011 : Road vehicles -- Functional safety -- Part 9: Automotive Safety Integrity Level (ASIL)-oriented and safety-oriented analyses . ISO , Geneva, Switzerland . ISO 26262-9. 2011. ISO 26262-9:2011: Road vehicles -- Functional safety -- Part 9: Automotive Safety Integrity Level (ASIL)-oriented and safety-oriented analyses. ISO, Geneva, Switzerland."},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/MASCOTS.2010.71"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/MM.2013.67"},{"volume-title":"Proceedings of the USENIX Annual Technical Conference (ATC\u201907)","author":"Li X.","key":"e_1_2_1_21_1","unstructured":"X. Li , K. Shen , M. C. Huang , and L. Chu . 2007. A memory soft error measurement on production systems . In Proceedings of the USENIX Annual Technical Conference (ATC\u201907) . USENIX Association, Berkeley, CA, USA, Article 21, 6 pages. http:\/\/dl.acm.org\/citation.cfm?id&equals;1364385.1364406. X. Li, K. Shen, M. C. Huang, and L. Chu. 2007. A memory soft error measurement on production systems. In Proceedings of the USENIX Annual Technical Conference (ATC\u201907). USENIX Association, Berkeley, CA, USA, Article 21, 6 pages. http:\/\/dl.acm.org\/citation.cfm?id&equals;1364385.1364406."},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/12.2145"},{"issue":"4","key":"e_1_2_1_23_1","first-page":"1","article-title":"Characterization of multi-bit soft error events in advanced SRAMs. In Intern. Electron Devices Meeting (IEDM\u201903). IEEE Press, New York","volume":"21","author":"Maiz J.","year":"2003","unstructured":"J. Maiz , S. Hareland , K. Zhang , and P. Armstrong . 2003 . Characterization of multi-bit soft error events in advanced SRAMs. In Intern. Electron Devices Meeting (IEDM\u201903). IEEE Press, New York , NY, USA , 21 . 4 . 1 -- 21 .4.4. J. Maiz, S. Hareland, K. Zhang, and P. Armstrong. 2003. Characterization of multi-bit soft error events in advanced SRAMs. In Intern. Electron Devices Meeting (IEDM\u201903). IEEE Press, New York, NY, USA, 21.4.1--21.4.4.","journal-title":"NY, USA"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/24.994926"},{"key":"e_1_2_1_25_1","doi-asserted-by":"crossref","unstructured":"T. Santini C. Borchert C. Dietrich H. Schirmeier M. Hoffmann O. Spinczyk D. Lohmann F. R. Wagner and P. Rech. 2017. Effectiveness of software-based hardening for radiation-induced soft errors in real-time operating systems. Lecture Notes in Computer Science (LNCS) (2017) 3--15.  T. Santini C. Borchert C. Dietrich H. Schirmeier M. Hoffmann O. Spinczyk D. Lohmann F. R. Wagner and P. Rech. 2017. Effectiveness of software-based hardening for radiation-induced soft errors in real-time operating systems. Lecture Notes in Computer Science (LNCS) (2017) 3--15.","DOI":"10.1007\/978-3-319-54999-6_1"},{"volume-title":"29th Int. Conf. on Comp. Safety, Reliability, and Security (SAFECOMP\u201910)","author":"Schiffel U.","key":"e_1_2_1_26_1","unstructured":"U. Schiffel , A. Schmitt , M. S\u00fc\u00dfkraut , and C. Fetzer . 2010. ANB- and ANBDmem-Encoding: Detecting hardware errors in software . In 29th Int. Conf. on Comp. Safety, Reliability, and Security (SAFECOMP\u201910) , Erwin Schoitsch (Ed.). Springer, Heidelberg, Germany, 169--182. U. Schiffel, A. Schmitt, M. S\u00fc\u00dfkraut, and C. Fetzer. 2010. ANB- and ANBDmem-Encoding: Detecting hardware errors in software. In 29th Int. Conf. on Comp. Safety, Reliability, and Security (SAFECOMP\u201910), Erwin Schoitsch (Ed.). Springer, Heidelberg, Germany, 169--182."},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2015.44"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/EDCC.2015.28"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2593069.2593195"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/2694344.2694348"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3035542"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/2491899.2465571"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.1755"},{"volume-title":"Proceedings of the Conference on Design, Automation and Test in Europe (DATE\u201913)","author":"Thei\u00dfing N.","key":"e_1_2_1_34_1","unstructured":"N. Thei\u00dfing , D. Merli , M. Smola , F. Stumpf , and G. Sigl . 2013. Comprehensive analysis of software countermeasures against fault attacks . In Proceedings of the Conference on Design, Automation and Test in Europe (DATE\u201913) . EDA Consortium, San Jose, CA, USA, 404--409. N. Thei\u00dfing, D. Merli, M. Smola, F. Stumpf, and G. Sigl. 2013. Comprehensive analysis of software countermeasures against fault attacks. In Proceedings of the Conference on Design, Automation and Test in Europe (DATE\u201913). EDA Consortium, San Jose, CA, USA, 404--409."},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043910.2043925"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1850771.1850788"},{"key":"e_1_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/1982185.1982267"},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.5555\/1009382.1009722"}],"container-title":["ACM Transactions on Embedded Computing Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3126503","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3126503","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T19:05:01Z","timestamp":1750273501000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3126503"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,9,27]]},"references-count":38,"journal-issue":{"issue":"5s","published-print":{"date-parts":[[2017,10,31]]}},"alternative-id":["10.1145\/3126503"],"URL":"https:\/\/doi.org\/10.1145\/3126503","relation":{},"ISSN":["1539-9087","1558-3465"],"issn-type":[{"type":"print","value":"1539-9087"},{"type":"electronic","value":"1558-3465"}],"subject":[],"published":{"date-parts":[[2017,9,27]]},"assertion":[{"value":"2017-03-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2017-06-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2017-09-27","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}