{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,16]],"date-time":"2026-10-16T20:30:17Z","timestamp":1792182617845,"version":"4.4.0"},"reference-count":73,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2019,12,18]],"date-time":"2019-12-18T00:00:00Z","timestamp":1576627200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["J. Emerg. Technol. Comput. Syst."],"published-print":{"date-parts":[[2020,1,31]]},"abstract":"<jats:p>With the rise of Internet of Things (IoT), devices such as smartphones, embedded medical devices, smart home appliances, as well as traditional computing platforms such as personal computers and servers have been increasingly targeted with a variety of cyber attacks. Due to limited hardware resources for embedded devices and difficulty in wide-coverage and on-time software updates, software-only cyber defense techniques, such as traditional anti-virus and malware detectors, do not offer a silver-bullet solution. Hardware-based security monitoring and protection techniques, therefore, have gained significant attention. Monitoring devices using side-channel leakage information, e.g., power supply variation and electromagnetic (EM) radiation, is a promising avenue that promotes multiple directions in security and trust applications. In this article, we provide a taxonomy of hardware-based monitoring techniques against different cyber and hardware attacks, highlight the potentials and unique challenges, and display how power-based side-channel instruction-level monitoring can offer suitable solutions to prevailing embedded device security issues. Further, we delineate approaches for future research directions.<\/jats:p>","DOI":"10.1145\/3359621","type":"journal-article","created":{"date-parts":[[2019,12,18]],"date-time":"2019-12-18T13:21:11Z","timestamp":1576675271000},"page":"1-21","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":16,"title":["Leveraging Side-Channel Information for Disassembly and Security"],"prefix":"10.1145","volume":"16","author":[{"given":"Jungmin","family":"Park","sequence":"first","affiliation":[{"name":"Florida Institute for Cybersecurity Research, University of Florida, Gainesville, FL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fahim","family":"Rahman","sequence":"additional","affiliation":[{"name":"Florida Institute for Cybersecurity Research, University of Florida, Gainesville, FL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Apostol","family":"Vassilev","sequence":"additional","affiliation":[{"name":"National Institute of Standards and Technology, Gaithersburg, MD, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2794-7320","authenticated-orcid":false,"given":"Domenic","family":"Forte","sequence":"additional","affiliation":[{"name":"Florida Institute for Cybersecurity Research, University of Florida, Gainesville, FL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mark","family":"Tehranipoor","sequence":"additional","affiliation":[{"name":"Florida Institute for Cybersecurity Research, University of Florida, Gainesville, FL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2019,12,18]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102165"},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102165"},{"key":"e_1_2_1_4_1","volume-title":"Hackers are Increasingly Targeting IoT Devices with Mirai DDoS Malware. Retrieved on","author":"Amir Waqas","year":"2018"},{"key":"e_1_2_1_5_1","volume-title":"Confirmed: US and Israel Created Stuxnet, Lost Control of It.","author":"Anderson Nate","year":"2012"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/FDTC.2011.9"},{"key":"e_1_2_1_9_1","doi-asserted-by":"crossref","volume-title":"Correlation Power Analysis with a Leakage Model","author":"Brier Eric","DOI":"10.1007\/978-3-540-28632-5_2"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3054924"},{"key":"e_1_2_1_11_1","doi-asserted-by":"crossref","unstructured":"Suresh Chari Josyula R. Rao and Pankaj Rohatgi. 2003. Template Attacks. Springer Berlin 13--28. DOI:https:\/\/doi.org\/10.1007\/3-540-36400-5_3  Suresh Chari Josyula R. Rao and Pankaj Rohatgi. 2003. Template Attacks. Springer Berlin 13--28. DOI:https:\/\/doi.org\/10.1007\/3-540-36400-5_3","DOI":"10.1007\/3-540-36400-5_3"},{"key":"e_1_2_1_12_1","volume-title":"Kuhn","author":"Choudary Omar","year":"2014"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2857705.2857722"},{"key":"e_1_2_1_14_1","volume-title":"Proceedings of the 2013 USENIX Workshop on Health Information Technologies. USENIX, Washington, D.C. https:\/\/www.usenix.org\/conference\/healthtech13\/workshop-program\/presentation\/Clark.","author":"Clark Shane S.","year":"2013"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1741866.1741882"},{"key":"e_1_2_1_16_1","unstructured":"DARPA. 2015. Leveraging the Analog Domain for Security (LADS). Retrieved from http:\/\/www.darpa.mil\/program\/leveraging-the-analog-domain-for-security.  DARPA. 2015. Leveraging the Analog Domain for Security (LADS). Retrieved from http:\/\/www.darpa.mil\/program\/leveraging-the-analog-domain-for-security."},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/2593069.2596656"},{"key":"e_1_2_1_18_1","volume-title":"A survey of hardware-based control flow integrity (CFI). CoRR abs\/1706.07257","author":"de Clercq Ruan","year":"2017"},{"key":"e_1_2_1_19_1","volume-title":"Transactions on Computational Science X, Marina L","author":"Eisenbarth Thomas"},{"key":"e_1_2_1_20_1","volume-title":"Standard for a global embedded processor debug interface version 2.0","author":"Forum The Nexus"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455775"},{"key":"e_1_2_1_22_1","volume-title":"Daniel Page, and Michael Tunstall.","author":"Galea Jake Longo","year":"2015"},{"key":"e_1_2_1_23_1","doi-asserted-by":"crossref","volume-title":"Mutual Information Analysis","author":"Gierlichs Benedikt","DOI":"10.1007\/978-3-540-85053-3_27"},{"key":"e_1_2_1_24_1","volume-title":"NIST Non-Invasive Attack Testing Workshop. 158--172","author":"Goodwill Gilbert","year":"2011"},{"key":"e_1_2_1_25_1","volume-title":"KASLR is Dead: Long Live KASLR","author":"Gruss Daniel"},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2615609"},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/SMARTCOMP-W.2014.7046672"},{"key":"e_1_2_1_28_1","volume-title":"Proceedings of the 2001 IEEE International Workshop on Workload Characterization (WWC\u201901)","author":"Guthaus M. R.","year":"2001"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2566673"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2014.600"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-011-0023-x"},{"key":"e_1_2_1_32_1","series-title":"Lecture Notes in Computer Science","volume-title":"CARDIS","author":"Hutter Michael"},{"key":"e_1_2_1_33_1","first-page":"190","article-title":"The temperature side channel and heating fault attacks","volume":"2014","author":"Hutter Michael","year":"2014","journal-title":"IACR Cryptology ePrint Archive"},{"key":"e_1_2_1_34_1","volume-title":"Retrieved","author":"Hyatt Robert","year":"1999"},{"key":"e_1_2_1_35_1","unstructured":"Atmel Inc. 2016. AVR Instruction Set Manual. Retrieved from http:\/\/www.atmel.com\/images\/Atmel-0856-AVR-Instruction-Set-Manual.pdf.  Atmel Inc. 2016. AVR Instruction Set Manual. Retrieved from http:\/\/www.atmel.com\/images\/Atmel-0856-AVR-Instruction-Set-Manual.pdf."},{"key":"e_1_2_1_36_1","unstructured":"National Instruments. 2018. PXI Platform. Retrieved March 3 2018 from http:\/\/www.ni.com\/pxi\/.  National Instruments. 2018. PXI Platform. Retrieved March 3 2018 from http:\/\/www.ni.com\/pxi\/."},{"key":"e_1_2_1_37_1","volume-title":"Donghyuk Lee, Chris Wilkerson, Konrad Lai, and Onur Mutlu.","author":"Kim Yoongu","year":"2014"},{"key":"e_1_2_1_38_1","volume-title":"Proceedings of the 11th USENIX Security Symposium. USENIX Association","author":"Kiriansky Vladimir","year":"2029"},{"key":"e_1_2_1_39_1","volume-title":"Spectre attacks: Exploiting speculative execution. ArXiv e-prints (Jan","author":"Kocher Paul","year":"2018"},{"key":"e_1_2_1_40_1","doi-asserted-by":"crossref","volume-title":"Differential power analysis","author":"Kocher Paul","DOI":"10.1007\/3-540-48405-1_25"},{"key":"e_1_2_1_41_1","volume-title":"Blind source separation: Fundamentals and recent advances (a tutorial overview presented at SBrT-2001). ArXiv e-prints (March","author":"Kofidis E.","year":"2016"},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm.2015.7436314"},{"key":"e_1_2_1_43_1","unstructured":"Selena Larson. 2018. Major chip flaws affect billions of devices. Retrieved from http:\/\/money.cnn.com\/2018\/01\/03\/technology\/computer-chip-flaw-security\/index.html?iid&equals;hp-toplead-dom.  Selena Larson. 2018. Major chip flaws affect billions of devices. Retrieved from http:\/\/money.cnn.com\/2018\/01\/03\/technology\/computer-chip-flaw-security\/index.html?iid&equals;hp-toplead-dom."},{"key":"e_1_2_1_44_1","volume-title":"ArXiv e-prints (Jan","author":"Lipp Moritz","year":"2018"},{"key":"e_1_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2013.6691149"},{"key":"e_1_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978299"},{"key":"e_1_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/SOCC.2014.6948949"},{"key":"e_1_2_1_48_1","volume-title":"ELMO: Emulating Leaks for the ARM Cortex-M0 without Access to a Side Channel Lab. Cryptology ePrint Archive, Report 2016\/517","author":"McCann David","year":"2016"},{"key":"e_1_2_1_49_1","volume-title":"Forecast: The internet of things, worldwide","author":"Middleton Peter","year":"2013"},{"key":"e_1_2_1_50_1","series-title":"Lecture Notes in Computer Science","volume-title":"Precise Instruction-Level Side Channel Profiling of Embedded Processors","author":"Msgna Mehari"},{"key":"e_1_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3079856.3080223"},{"key":"e_1_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2012.6263957"},{"key":"e_1_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1007\/11605805_1"},{"key":"e_1_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3195970.3196094"},{"key":"e_1_2_1_55_1","unstructured":"Siman Parker. 2017. Understanding the Physical Damage of Cyber Attacks. Retrieved from https:\/\/www.infosecurity-magazine.com\/opinions\/physical-damage-cyber-attacks\/.  Siman Parker. 2017. Understanding the Physical Damage of Cyber Attacks. Retrieved from https:\/\/www.infosecurity-magazine.com\/opinions\/physical-damage-cyber-attacks\/."},{"key":"e_1_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3061639.3062202"},{"key":"e_1_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2017.7966373"},{"key":"e_1_2_1_59_1","volume-title":"A Generic Method for Secure SBox Implementation","author":"Prouff Emmanuel"},{"key":"e_1_2_1_60_1","doi-asserted-by":"crossref","volume-title":"Leakage Assessment Methodology","author":"Schneider Tobias","DOI":"10.1007\/978-3-662-48324-4_25"},{"key":"e_1_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2016.7783762"},{"key":"e_1_2_1_62_1","volume-title":"SoK: Systematic classification of side-channel attacks on mobile devices. CoRR abs\/1611.03748","author":"Spreitzer Raphael","year":"2016"},{"key":"e_1_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.7873\/DATE.2015.0639"},{"key":"e_1_2_1_64_1","doi-asserted-by":"crossref","volume-title":"Machine Learning in Non-Stationary Environments: Introduction to Covariate Shift Adaptation","author":"Sugiyama Masashi","DOI":"10.7551\/mitpress\/9780262017091.001.0001"},{"key":"e_1_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/782814.782838"},{"key":"e_1_2_1_66_1","volume-title":"Stolfo","author":"Tang Adrian","year":"2014"},{"key":"e_1_2_1_67_1","volume-title":"USENIX Security Symposium.","author":"Tang Adrian"},{"key":"e_1_2_1_68_1","volume-title":"Gaydadjiev","author":"Vermoen Dennis","year":"2007"},{"key":"e_1_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1109\/CICC.2008.4672007"},{"key":"e_1_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1109\/TMSCS.2016.2569467"},{"key":"e_1_2_1_71_1","volume-title":"Sponge-based control-flow protection for IoT devices. CoRR abs\/1802.06691","author":"Werner Mario","year":"2018"},{"key":"e_1_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1109\/TMSCS.2016.2569446"},{"key":"e_1_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2017.7926977"},{"key":"e_1_2_1_74_1","volume-title":"Proceedings of the 23rd USENIX Conference on Security Symposium (SEC\u201914)","author":"Yarom Yuval","year":"2014"},{"key":"e_1_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.1145\/2744769.2744869"},{"key":"e_1_2_1_76_1","volume-title":"Luis Vega Gutierrez, and Michael Bedford Taylor","author":"Zhang Lu","year":"2016"},{"key":"e_1_2_1_77_1","volume-title":"Retrieved","author":"Zhou YongBin","year":"2005"}],"container-title":["ACM Journal on Emerging Technologies in Computing Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3359621","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3359621","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:23:06Z","timestamp":1750202586000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3359621"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,12,18]]},"references-count":73,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2020,1,31]]}},"alternative-id":["10.1145\/3359621"],"URL":"https:\/\/doi.org\/10.1145\/3359621","relation":{},"ISSN":["1550-4832","1550-4840"],"issn-type":[{"value":"1550-4832","type":"print"},{"value":"1550-4840","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,12,18]]},"assertion":[{"value":"2018-03-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2019-08-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2019-12-18","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}