{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,16]],"date-time":"2026-04-16T05:22:43Z","timestamp":1776316963179,"version":"3.50.1"},"reference-count":38,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2021,7,31]],"date-time":"2021-07-31T00:00:00Z","timestamp":1627689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Guangdong Province Key Area R & D Programme","award":["2018B010107004"],"award-info":[{"award-number":["2018B010107004"]}]},{"DOI":"10.13039\/501100003074","name":"Agencia Nacional de Promoci\u00f3n Cient\u00edfica y Tecnol\u00f3gica","doi-asserted-by":"crossref","award":["PICT-2017-3894"],"award-info":[{"award-number":["PICT-2017-3894"]}],"id":[{"id":"10.13039\/501100003074","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100001659","name":"Deutsche Forschungsgemeinschaft","doi-asserted-by":"publisher","award":["389792660"],"award-info":[{"award-number":["389792660"]}],"id":[{"id":"10.13039\/501100001659","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100010007","name":"Sino-German Center for Research Promotion","doi-asserted-by":"crossref","award":["1023"],"award-info":[{"award-number":["1023"]}],"id":[{"id":"10.13039\/501100010007","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Secretar\u00eda de Ciencia y Tecnolog\u00eda - Universidad Nacional de C\u00f3rdoba","award":["33620180100354CB"],"award-info":[{"award-number":["33620180100354CB"]}]},{"DOI":"10.13039\/501100000781","name":"European Research Council","doi-asserted-by":"publisher","award":["695614"],"award-info":[{"award-number":["695614"]}],"id":[{"id":"10.13039\/501100000781","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Model. Comput. Simul."],"published-print":{"date-parts":[[2021,7,31]]},"abstract":"<jats:p>\n            The software running in embedded or cyber-physical systems is typically of proprietary nature, so users do not know precisely what the systems they own are (in)capable of doing. Most malfunctionings of such systems are not intended by the manufacturer, but some are, which means these cannot be classified as bugs or security loopholes. The most prominent examples have become public in the diesel emissions scandal, where millions of cars were found to be equipped with software violating the law, altogether polluting the environment and putting human health at risk. The behaviour of the software embedded in these cars was intended by the manufacturer, but it was not in the interest of society, a phenomenon that has been called\n            <jats:italic>software doping<\/jats:italic>\n            . Due to the unavailability of a specification, the analysis of doped software is significantly different from that for buggy or insecure software and hence classical verification and testing techniques have to be adapted.\n          <\/jats:p>\n          <jats:p>The work presented in this article builds on existing definitions of software doping and lays the theoretical foundations for conducting software doping tests, so as to enable uncovering unethical manufacturers. The complex nature of software doping makes it very hard to effectuate doping tests in practice. We explain the main challenges and provide efficient solutions to realise doping tests despite this complexity.<\/jats:p>","DOI":"10.1145\/3449354","type":"journal-article","created":{"date-parts":[[2021,8,24]],"date-time":"2021-08-24T16:44:33Z","timestamp":1629823473000},"page":"1-27","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["Doping Tests for Cyber-physical Systems"],"prefix":"10.1145","volume":"31","author":[{"given":"Sebastian","family":"Biewer","sequence":"first","affiliation":[{"name":"Saarland University, Saarland Informatics Campus, Saarbr\u00fccken, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pedro R.","family":"D\u2019argenio","sequence":"additional","affiliation":[{"name":"Universidad Nacional de C\u00f3rdoba, FAMAF, Argentina and CONICET, Argentina and Saarland University, Saarland Informatics Campus, Saarbr\u00fccken, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Holger","family":"Hermanns","sequence":"additional","affiliation":[{"name":"Saarland University, Saarland Informatics Campus, Germany and Institute of Intelligent Software, Huan Shi Da Dao Xi, Nansha, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2021,8,24]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-63387-9_24"},{"key":"#cr-split#-e_1_2_1_2_1.1","doi-asserted-by":"crossref","unstructured":"Yashwanth Annpureddy Che Liu Georgios E. Fainekos and Sriram Sankaranarayanan. 2011. S-TaLiRo: A tool for temporal logic falsification for hybrid systems. In Proceedings of the 17th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS'11) Held as Part of the Joint European Conferences on Theory and Practice of Software (ETAPS'11) Lecture Notes in Computer Science Vol. 6605. Springer 254-257. https:\/\/doi.org\/10.1007\/978-3-642-19835-9_21 10.1007\/978-3-642-19835-9_21","DOI":"10.1007\/978-3-642-19835-9_21"},{"key":"#cr-split#-e_1_2_1_2_1.2","doi-asserted-by":"crossref","unstructured":"Yashwanth Annpureddy Che Liu Georgios E. Fainekos and Sriram Sankaranarayanan. 2011. S-TaLiRo: A tool for temporal logic falsification for hybrid systems. In Proceedings of the 17th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS'11) Held as Part of the Joint European Conferences on Theory and Practice of Software (ETAPS'11) Lecture Notes in Computer Science Vol. 6605. Springer 254-257. https:\/\/doi.org\/10.1007\/978-3-642-19835-9_21","DOI":"10.1007\/978-3-642-19835-9_21"},{"key":"#cr-split#-e_1_2_1_3_1.1","doi-asserted-by":"crossref","unstructured":"Gilles Barthe Pedro R. D'Argenio Bernd Finkbeiner and Holger Hermanns. 2016. Facets of software doping. See Reference Margaria and Steffen [26] 601-608. http:\/\/dx.doi.org\/10.1007\/978-3-319-47169-3_46 10.1007\/978-3-319-47169-3_46","DOI":"10.1007\/978-3-319-47169-3_46"},{"key":"#cr-split#-e_1_2_1_3_1.2","doi-asserted-by":"crossref","unstructured":"Gilles Barthe Pedro R. D'Argenio Bernd Finkbeiner and Holger Hermanns. 2016. Facets of software doping. See Reference Margaria and Steffen [26] 601-608. http:\/\/dx.doi.org\/10.1007\/978-3-319-47169-3_46","DOI":"10.1007\/978-3-319-47169-3_46"},{"key":"#cr-split#-e_1_2_1_4_1.1","doi-asserted-by":"crossref","unstructured":"Kevin Baum. 2016. What the hack is wrong with software doping? See Reference Margaria and Steffen [26] 633-647. https:\/\/doi.org\/10.1007\/978-3-319-47169-3_49 10.1007\/978-3-319-47169-3_49","DOI":"10.1007\/978-3-319-47169-3_49"},{"key":"#cr-split#-e_1_2_1_4_1.2","doi-asserted-by":"crossref","unstructured":"Kevin Baum. 2016. What the hack is wrong with software doping? See Reference Margaria and Steffen [26] 633-647. https:\/\/doi.org\/10.1007\/978-3-319-47169-3_49","DOI":"10.1007\/978-3-319-47169-3_49"},{"key":"e_1_2_1_5_1","volume-title":"Retrieved","author":"BBC.","year":"2018","unstructured":"BBC. 2018 . Audi Chief Rupert Stadler Arrested in Diesel Emissions Probe . Retrieved January 28, 2019 from https:\/\/www.bbc.com\/news\/business-44517753. BBC. 2018. Audi Chief Rupert Stadler Arrested in Diesel Emissions Probe. Retrieved January 28, 2019 from https:\/\/www.bbc.com\/news\/business-44517753."},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-30281-8_18"},{"key":"#cr-split#-e_1_2_1_7_1.1","unstructured":"Sebastian Biewer Pedro R. D'Argenio and Holger Hermanns. 2021. Doping tests for cyber-physical systems-Tool. DOI:https:\/\/doi.org\/10.5281\/zenodo.4709389 10.5281\/zenodo.4709389"},{"key":"#cr-split#-e_1_2_1_7_1.2","unstructured":"Sebastian Biewer Pedro R. D'Argenio and Holger Hermanns. 2021. Doping tests for cyber-physical systems-Tool. DOI:https:\/\/doi.org\/10.5281\/zenodo.4709389"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1706299.1706308"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-54792-8_15"},{"key":"e_1_2_1_10_1","volume-title":"Hyperproperties. In Proceedings of the Computer Security Foundations Symposium (CSF\u201908)","author":"Michael","year":"2008","unstructured":"Michael R. Clarkson and Fred B. Schneider. 2008 . Hyperproperties. In Proceedings of the Computer Security Foundations Symposium (CSF\u201908) . 51\u201365. http:\/\/dx.doi.org\/10.1109\/CSF. 2008 .7 10.1109\/CSF.2008.7 Michael R. Clarkson and Fred B. Schneider. 2008. Hyperproperties. In Proceedings of the Computer Security Foundations Symposium (CSF\u201908). 51\u201365. http:\/\/dx.doi.org\/10.1109\/CSF.2008.7"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.66"},{"key":"e_1_2_1_12_1","volume-title":"Proceedings of the 26th European Symposium on Programming (ESOP\u201917)","volume":"10201","author":"D\u2019Argenio Pedro R.","year":"2017","unstructured":"Pedro R. D\u2019Argenio , Gilles Barthe , Sebastian Biewer , Bernd Finkbeiner , and Holger Hermanns . 2017 . Is your software on dope? Formal analysis of surreptitiously \u201cenhanced\u201d programs . In Proceedings of the 26th European Symposium on Programming (ESOP\u201917) , Lecture Notes in Computer Science , Vol. 10201 . Springer, 83\u2013110. https:\/\/doi.org\/10.1007\/978-3-662-54434-1_4 10.1007\/978-3-662-54434-1_4 Pedro R. D\u2019Argenio, Gilles Barthe, Sebastian Biewer, Bernd Finkbeiner, and Holger Hermanns. 2017. Is your software on dope? Formal analysis of surreptitiously \u201cenhanced\u201d programs. In Proceedings of the 26th European Symposium on Programming (ESOP\u201917), Lecture Notes in Computer Science, Vol. 10201. Springer, 83\u2013110. https:\/\/doi.org\/10.1007\/978-3-662-54434-1_4"},{"key":"e_1_2_1_13_1","volume-title":"Proceedings of the Formal Approaches to Testing of Software 2001 (FATES\u201901)","author":"de Vries R. G.","year":"2001","unstructured":"R. G. de Vries . 2001 . Towards formal test purposes . In Proceedings of the Formal Approaches to Testing of Software 2001 (FATES\u201901) BRICS Notes Series. BRICS, University of Aarhus, 61\u201376. R. G. de Vries. 2001. Towards formal test purposes. In Proceedings of the Formal Approaches to Testing of Software 2001 (FATES\u201901)BRICS Notes Series. BRICS, University of Aarhus, 61\u201376."},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/s100090050044"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24953-7_35"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSD.2010.26"},{"key":"e_1_2_1_17_1","volume-title":"New York Times. Retrieved","author":"Ewing Jack","year":"2018","unstructured":"Jack Ewing . 2018 . Ex-Volkswagen C.E.O. Charged with Fraud over Diesel Emissions . New York Times. Retrieved January 28, 2019 from https:\/\/www.nytimes.com\/2018\/05\/03\/business\/volkswagen-ceo-diesel-fraud.html. https:\/\/www.nytimes.com\/2018\/05\/03\/business\/volkswagen-ceo-diesel-fraud.html. Jack Ewing. 2018. Ex-Volkswagen C.E.O. Charged with Fraud over Diesel Emissions. New York Times. Retrieved January 28, 2019 from https:\/\/www.nytimes.com\/2018\/05\/03\/business\/volkswagen-ceo-diesel-fraud.html. https:\/\/www.nytimes.com\/2018\/05\/03\/business\/volkswagen-ceo-diesel-fraud.html."},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.tcs.2009.06.021"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-35497-2_20"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-21690-4_3"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-67113-0_5"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/566172.566203"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/2932431.2932469"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-03769-7_17"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS.2009.17"},{"key":"e_1_2_1_26_1","first-page":"47169","volume-title":"In Proceedings of the 7th International Symposium on Leveraging Applications of Formal Methods, Verification and Validation: Discussion, Dissemination, Applications (ISoLA\u201916)","volume":"9953","author":"Margaria Tiziana","year":"2016","unstructured":"Tiziana Margaria and Bernhard Steffen ( Eds .). 2016 . In Proceedings of the 7th International Symposium on Leveraging Applications of Formal Methods, Verification and Validation: Discussion, Dissemination, Applications (ISoLA\u201916) , Part II. Lecture Notes in Computer Science , Vol. 9953 . http:\/\/dx.doi.org\/10.1007\/978-3-319- 47169 - 47163 10.1007\/978-3-319-47169-3 Tiziana Margaria and Bernhard Steffen (Eds.). 2016. In Proceedings of the 7th International Symposium on Leveraging Applications of Formal Methods, Verification and Validation: Discussion, Dissemination, Applications (ISoLA\u201916), Part II. Lecture Notes in Computer Science, Vol. 9953. http:\/\/dx.doi.org\/10.1007\/978-3-319-47169-3"},{"key":"e_1_2_1_27_1","volume-title":"Proceedings of 35th IEEE Conference on Decision and Control","volume":"2","author":"Pettersson S.","unstructured":"S. Pettersson and B. Lennartson . 1996. Stability and robustness for hybrid systems . In Proceedings of 35th IEEE Conference on Decision and Control , Vol. 2 . 1202\u20131207 vol.2. S. Pettersson and B. Lennartson. 1996. Stability and robustness for hybrid systems. In Proceedings of 35th IEEE Conference on Decision and Control, Vol. 2. 1202\u20131207 vol.2."},{"key":"e_1_2_1_28_1","volume-title":"CNN Business. Retrieved","author":"Riley Charles","year":"2018","unstructured":"Charles Riley . 2018 . Volkswagen\u2019s Diesel Scandal Costs Hit $30 Billion . CNN Business. Retrieved January 28, 2019 from https:\/\/money.cnn.com\/2017\/09\/29\/investing\/volkswagen-diesel-cost-30-billion\/index.html. Charles Riley. 2018. Volkswagen\u2019s Diesel Scandal Costs Hit $30 Billion. CNN Business. Retrieved January 28, 2019 from https:\/\/money.cnn.com\/2017\/09\/29\/investing\/volkswagen-diesel-cost-30-billion\/index.html."},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2380356.2380396"},{"key":"e_1_2_1_30_1","volume-title":"Official Journal of the European Communities","author":"The European Parliament and the Council of the European Union. 1998. Directive 98\/69\/EC of the European Parliament and of the Council.","year":"1998","unstructured":"The European Parliament and the Council of the European Union. 1998. Directive 98\/69\/EC of the European Parliament and of the Council. Official Journal of the European Communities ( 1998 ). Retrieved from http:\/\/eur-lex.europa.eu\/LexUriServ\/LexUriServ.do?uri=CELEX:31998L0069:EN:HTML. The European Parliament and the Council of the European Union. 1998. Directive 98\/69\/EC of the European Parliament and of the Council. Official Journal of the European Communities (1998). Retrieved from http:\/\/eur-lex.europa.eu\/LexUriServ\/LexUriServ.do?uri=CELEX:31998L0069:EN:HTML."},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0169-7552(96)00017-7"},{"key":"e_1_2_1_33_1","series-title":"Lecture Notes in Computer Science","volume-title":"Formal Methods and Testing, An Outcome of the FORTEST Network, Revised Selected Papers","author":"Tretmans Jan","unstructured":"Jan Tretmans . 2008. Model based testing with labelled transition systems . In Formal Methods and Testing, An Outcome of the FORTEST Network, Revised Selected Papers , Lecture Notes in Computer Science , Vol. 4949 . Springer , 1\u201338. https:\/\/doi.org\/10.1007\/978-3-540-78917-8_1 10.1007\/978-3-540-78917-8_1 Jan Tretmans. 2008. Model based testing with labelled transition systems. In Formal Methods and Testing, An Outcome of the FORTEST Network, Revised Selected Papers, Lecture Notes in Computer Science, Vol. 4949. Springer, 1\u201338. https:\/\/doi.org\/10.1007\/978-3-540-78917-8_1"},{"key":"e_1_2_1_34_1","unstructured":"United Nations. 2013. UN Vehicle Regulations\u20141958 Agreement Revision 2 Addendum 100 Regulation No. 101 Revision 3\u2014E\/ECE\/324\/Rev.2\/Add.100\/Rev.3. Retrieved from http:\/\/www.unece.org\/trans\/main\/wp29\/wp29regs101-120.html.  United Nations. 2013. UN Vehicle Regulations\u20141958 Agreement Revision 2 Addendum 100 Regulation No. 101 Revision 3\u2014E\/ECE\/324\/Rev.2\/Add.100\/Rev.3. Retrieved from http:\/\/www.unece.org\/trans\/main\/wp29\/wp29regs101-120.html."},{"key":"e_1_2_1_35_1","volume-title":"Handbook of Process Algebra","author":"van Glabbeek Rob","unstructured":"Rob van Glabbeek . 2001. The linear time-branching time spectrum I: The semantics of concrete, sequential processes . In Handbook of Process Algebra . Elsevier , 3\u201399. Rob van Glabbeek. 2001. The linear time-branching time spectrum I: The semantics of concrete, sequential processes. In Handbook of Process Algebra. Elsevier, 3\u201399."}],"container-title":["ACM Transactions on Modeling and Computer Simulation"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3449354","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3449354","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:01:55Z","timestamp":1750197715000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3449354"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,7,31]]},"references-count":38,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2021,7,31]]}},"alternative-id":["10.1145\/3449354"],"URL":"https:\/\/doi.org\/10.1145\/3449354","relation":{},"ISSN":["1049-3301","1558-1195"],"issn-type":[{"value":"1049-3301","type":"print"},{"value":"1558-1195","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,7,31]]},"assertion":[{"value":"2020-03-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-01-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-08-24","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}