{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T20:05:59Z","timestamp":1775073959443,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":104,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,6,27]],"date-time":"2022-06-27T00:00:00Z","timestamp":1656288000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["Secure and Trustworthy Cyberspace (SaTC) and Cyber-Physical Systems (CPS)"],"award-info":[{"award-number":["Secure and Trustworthy Cyberspace (SaTC) and Cyber-Physical Systems (CPS)"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Department of Energy","award":["DE-OE0000780"],"award-info":[{"award-number":["DE-OE0000780"]}]},{"DOI":"10.13039\/100000006","name":"Office of Naval Research","doi-asserted-by":"publisher","award":["N00014-21-1-2328"],"award-info":[{"award-number":["N00014-21-1-2328"]}],"id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Cyber Resilient Energy Delivery Consortium"},{"DOI":"10.13039\/100000185","name":"Defense Advanced Research Projects Agency","doi-asserted-by":"publisher","award":["N6600120C4031"],"award-info":[{"award-number":["N6600120C4031"]}],"id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,6,27]]},"DOI":"10.1145\/3498361.3538938","type":"proceedings-article","created":{"date-parts":[[2022,6,16]],"date-time":"2022-06-16T16:21:53Z","timestamp":1655396513000},"page":"69-83","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":13,"title":["Reverse engineering and retrofitting robotic aerial vehicle control firmware using dispatch"],"prefix":"10.1145","author":[{"given":"Taegyu","family":"Kim","sequence":"first","affiliation":[{"name":"The Pennsylvania State University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Aolin","family":"Ding","sequence":"additional","affiliation":[{"name":"Accenture Labs, Accenture"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sriharsha","family":"Etigowni","sequence":"additional","affiliation":[{"name":"Purdue University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pengfei","family":"Sun","sequence":"additional","affiliation":[{"name":"F5 Networks"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jizhou","family":"Chen","sequence":"additional","affiliation":[{"name":"Purdue University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Luis","family":"Garcia","sequence":"additional","affiliation":[{"name":"University of Southern California"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Saman","family":"Zonouz","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dongyan","family":"Xu","sequence":"additional","affiliation":[{"name":"Purdue University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dave (Jing)","family":"Tian","sequence":"additional","affiliation":[{"name":"Purdue University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2022,6,27]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Cheerson 2015. http:\/\/cx.tmkcode.com.  Cheerson 2015. http:\/\/cx.tmkcode.com."},{"key":"e_1_3_2_1_2_1","unstructured":"Drone crash at white house reveals security risks 2015. https:\/\/www.usatoday.com\/story\/news\/2015\/01\/26\/drone-crash-secret-service-faa\/22352857.  Drone crash at white house reveals security risks 2015. https:\/\/www.usatoday.com\/story\/news\/2015\/01\/26\/drone-crash-secret-service-faa\/22352857."},{"key":"e_1_3_2_1_3_1","unstructured":"Hijacking drones with a MAVLink exploit 2015. http:\/\/diydrones.com\/profiles\/blogs\/hijacking-quadcopters-with-a-mavlink-exploit. Hijacking drones with a MAVLink exploit 2015. http:\/\/diydrones.com\/profiles\/blogs\/hijacking-quadcopters-with-a-mavlink-exploit."},{"key":"e_1_3_2_1_4_1","volume-title":"About","year":"2016","unstructured":"ArduPilot :: About , 2016 . https:\/\/ardupilot.org\/about. ArduPilot :: About, 2016. https:\/\/ardupilot.org\/about."},{"key":"e_1_3_2_1_5_1","unstructured":"Inertial Navigation Estimation Library 2016. https:\/\/github.com\/priseborough\/InertialNav. Inertial Navigation Estimation Library 2016. https:\/\/github.com\/priseborough\/InertialNav."},{"key":"e_1_3_2_1_6_1","unstructured":"Here's what happens when a drone falls on your head 2017. http:\/\/fortune.com\/2017\/04\/29\/drone-faa-head-crash-study.  Here's what happens when a drone falls on your head 2017. http:\/\/fortune.com\/2017\/04\/29\/drone-faa-head-crash-study."},{"key":"e_1_3_2_1_7_1","unstructured":"Iris - The Ready to Fly UAV Quadcopter 2018. http:\/\/www.arducopter.co.uk\/iris-quadcopter-uav.html. Iris - The Ready to Fly UAV Quadcopter 2018. http:\/\/www.arducopter.co.uk\/iris-quadcopter-uav.html."},{"key":"e_1_3_2_1_8_1","unstructured":"US military equipped with tiny spy drones 2019. https:\/\/www.zdnet.com\/article\/us-military-equipped-with-tiny-spy-drones. US military equipped with tiny spy drones 2019. https:\/\/www.zdnet.com\/article\/us-military-equipped-with-tiny-spy-drones."},{"key":"e_1_3_2_1_9_1","unstructured":"Pixhawk 2020. https:\/\/docs.px4.io\/v1.9.0\/en\/flightcontroller\/pixhawk.html.  Pixhawk 2020. https:\/\/docs.px4.io\/v1.9.0\/en\/flightcontroller\/pixhawk.html."},{"key":"e_1_3_2_1_10_1","unstructured":"Ready-to-use & Easy-to-buy Vehicles - Copter Documentation 2020 2020. https:\/\/px4.io\/ecosystem\/commercial-systems.  Ready-to-use & Easy-to-buy Vehicles - Copter Documentation 2020 2020. https:\/\/px4.io\/ecosystem\/commercial-systems."},{"key":"e_1_3_2_1_11_1","unstructured":"Commercial Systems - PX4 2021. https:\/\/ardupilot.org\/copter\/docs\/commonrtf.html.  Commercial Systems - PX4 2021. https:\/\/ardupilot.org\/copter\/docs\/commonrtf.html."},{"key":"e_1_3_2_1_12_1","volume-title":"a retargetable machine-code decompiler based on LLVM","year":"2021","unstructured":"RetDec : a retargetable machine-code decompiler based on LLVM , 2021 . https:\/\/github.com\/avast\/retdec. RetDec: a retargetable machine-code decompiler based on LLVM, 2021. https:\/\/github.com\/avast\/retdec."},{"key":"e_1_3_2_1_13_1","unstructured":"3DR 2022. https:\/\/3dr.com. 3DR 2022. https:\/\/3dr.com."},{"key":"e_1_3_2_1_14_1","volume-title":"real-time embedded operating system","author":"Apache Apache","year":"2022","unstructured":"Apache NuttX Apache Nutt X is a mature , real-time embedded operating system , 2022 . https:\/\/nuttx.apache.org. Apache NuttX Apache NuttX is a mature, real-time embedded operating system, 2022. https:\/\/nuttx.apache.org."},{"key":"e_1_3_2_1_15_1","unstructured":"ArduPilot 2022. http:\/\/ardupilot.org. ArduPilot 2022. http:\/\/ardupilot.org."},{"key":"e_1_3_2_1_16_1","unstructured":"ArduPilot Parameter List 2022. http:\/\/ardupilot.org\/copter\/docs\/parameters.html. ArduPilot Parameter List 2022. http:\/\/ardupilot.org\/copter\/docs\/parameters.html."},{"key":"e_1_3_2_1_17_1","unstructured":"Auterion - The drone software platform built for enterprise 2022. https:\/\/auterion.com. Auterion - The drone software platform built for enterprise 2022. https:\/\/auterion.com."},{"key":"e_1_3_2_1_18_1","unstructured":"Binary ninja 2022. https:\/\/binary.ninja.  Binary ninja 2022. https:\/\/binary.ninja."},{"key":"e_1_3_2_1_19_1","unstructured":"Black magic probe 2022. https:\/\/github.com\/blacksphere\/blackmagic\/wiki.  Black magic probe 2022. https:\/\/github.com\/blacksphere\/blackmagic\/wiki."},{"key":"e_1_3_2_1_20_1","unstructured":"Capstone 2022. http:\/\/www.capstone-engine.org. Capstone 2022. http:\/\/www.capstone-engine.org."},{"key":"e_1_3_2_1_21_1","unstructured":"CMSIS System View Description 2022. http:\/\/www.keil.com\/pack\/doc\/CMSIS\/SVD\/html\/index.html. CMSIS System View Description 2022. http:\/\/www.keil.com\/pack\/doc\/CMSIS\/SVD\/html\/index.html."},{"key":"e_1_3_2_1_22_1","unstructured":"Crazyflie 2.1 2022. https:\/\/www.bitcraze.io\/products\/crazyflie-2-1. Crazyflie 2.1 2022. https:\/\/www.bitcraze.io\/products\/crazyflie-2-1."},{"key":"e_1_3_2_1_23_1","unstructured":"Cuav raefly 2022. https:\/\/store.cuav.net\/shop\/raefly.  Cuav raefly 2022. https:\/\/store.cuav.net\/shop\/raefly."},{"key":"e_1_3_2_1_24_1","unstructured":"DJI Parameter Index 2022. https:\/\/dji.retroroms.info\/howto\/parameterindex. DJI Parameter Index 2022. https:\/\/dji.retroroms.info\/howto\/parameterindex."},{"key":"e_1_3_2_1_25_1","unstructured":"The dwarf debugging standard 2022. http:\/\/dwarfstd.org.  The dwarf debugging standard 2022. http:\/\/dwarfstd.org."},{"key":"e_1_3_2_1_26_1","unstructured":"Ghidra 2022. https:\/\/ghidra-sre.org.  Ghidra 2022. https:\/\/ghidra-sre.org."},{"key":"e_1_3_2_1_27_1","unstructured":"Hex rays 2022. https:\/\/hex-rays.com\/decompiler.  Hex rays 2022. https:\/\/hex-rays.com\/decompiler."},{"key":"e_1_3_2_1_28_1","volume-title":"IDA Pro disassembler","author":"Hex-Rays","year":"2022","unstructured":"Hex-Rays , IDA Pro disassembler , 2022 . http:\/\/www.hex-rays.com\/products\/ida. Hex-Rays, IDA Pro disassembler, 2022. http:\/\/www.hex-rays.com\/products\/ida."},{"key":"e_1_3_2_1_29_1","volume-title":"Technology: In-Depth --- Hex Rays","author":"IDA","year":"2022","unstructured":"IDA F.L.I.R.T. Technology: In-Depth --- Hex Rays , 2022 . https:\/\/www.hexrays.com\/products\/ida\/tech\/flirt\/indepth. IDA F.L.I.R.T. Technology: In-Depth --- Hex Rays, 2022. https:\/\/www.hexrays.com\/products\/ida\/tech\/flirt\/indepth."},{"key":"e_1_3_2_1_30_1","unstructured":"Mantis Q 2022. https:\/\/us.yuneec.com\/mantis-q-robust-travel-drone-with-voice-control. Mantis Q 2022. https:\/\/us.yuneec.com\/mantis-q-robust-travel-drone-with-voice-control."},{"key":"e_1_3_2_1_31_1","unstructured":"MAVLink Micro Air Vehicle Communication Protocol 2022. https:\/\/mavlink.io. MAVLink Micro Air Vehicle Communication Protocol 2022. https:\/\/mavlink.io."},{"key":"e_1_3_2_1_32_1","unstructured":"MAVLink Parameter Protocol 2022. https:\/\/mavlink.io\/en\/services\/parameter.html. MAVLink Parameter Protocol 2022. https:\/\/mavlink.io\/en\/services\/parameter.html."},{"key":"e_1_3_2_1_33_1","unstructured":"Parrot Bebop2 2022. https:\/\/support.parrot.com\/global\/support\/products\/parrot-bebop-2. Parrot Bebop2 2022. https:\/\/support.parrot.com\/global\/support\/products\/parrot-bebop-2."},{"key":"e_1_3_2_1_34_1","unstructured":"PX4 Parameter List 2022. https:\/\/dev.px4.io\/en\/advanced\/parameterreference.html. PX4 Parameter List 2022. https:\/\/dev.px4.io\/en\/advanced\/parameterreference.html."},{"key":"e_1_3_2_1_35_1","unstructured":"PX4 Pro Open Source Autopilot - Open Source for Drones 2022. http:\/\/px4.io. PX4 Pro Open Source Autopilot - Open Source for Drones 2022. http:\/\/px4.io."},{"key":"e_1_3_2_1_36_1","unstructured":"pyelftools 2022. https:\/\/github.com\/eliben\/pyelftools. pyelftools 2022. https:\/\/github.com\/eliben\/pyelftools."},{"key":"e_1_3_2_1_37_1","unstructured":"SITL Simulator (ArduPilot Developer Team) 2022. http:\/\/ardupilot.org\/dev\/docs\/sitl-simulator-software-in-the-loop.html. SITL Simulator (ArduPilot Developer Team) 2022. http:\/\/ardupilot.org\/dev\/docs\/sitl-simulator-software-in-the-loop.html."},{"key":"e_1_3_2_1_38_1","unstructured":"WM330 Flight Controller board 2022. https:\/\/github.com\/o-gs\/dji-firmware-tools\/wiki\/WM330-Flight-Controller-board. WM330 Flight Controller board 2022. https:\/\/github.com\/o-gs\/dji-firmware-tools\/wiki\/WM330-Flight-Controller-board."},{"key":"e_1_3_2_1_39_1","unstructured":"Yuneec 2022. https:\/\/us.yuneec.com. Yuneec 2022. https:\/\/us.yuneec.com."},{"key":"e_1_3_2_1_40_1","unstructured":"Zynamics --- Bindiff 2022. https:\/\/www.zynamics.com\/software.html. Zynamics --- Bindiff 2022. https:\/\/www.zynamics.com\/software.html."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978358"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/MAES.2016.150170"},{"key":"e_1_3_2_1_43_1","volume-title":"Proceedings of the 27th Annual Symposium on Network and Distributed System Security (NDSS)","author":"Bauman Erick","year":"2018","unstructured":"Erick Bauman , Zhiqiang Lin , and Kevin W Hamlen . Superset disassembly : Statically rewriting x86 binaries without heuristics . In Proceedings of the 27th Annual Symposium on Network and Distributed System Security (NDSS) , 2018 . Erick Bauman, Zhiqiang Lin, and Kevin W Hamlen. Superset disassembly: Statically rewriting x86 binaries without heuristics. In Proceedings of the 27th Annual Symposium on Network and Distributed System Security (NDSS), 2018."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22110-1_37"},{"key":"e_1_3_2_1_45_1","volume-title":"Proceedings of 22nd USENIX Security Symposium (USENIX Security)","author":"Brumley David","year":"2014","unstructured":"David Brumley , JongHyup Lee , Edward J Schwartz , and Maverick Woo . Native x86 decompilation using semantics-preserving structural analysis and iterative control-flow structuring . In Proceedings of 22nd USENIX Security Symposium (USENIX Security) , 2014 . David Brumley, JongHyup Lee, Edward J Schwartz, and Maverick Woo. Native x86 decompilation using semantics-preserving structural analysis and iterative control-flow structuring. In Proceedings of 22nd USENIX Security Symposium (USENIX Security), 2014."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICUAS.2019.8798337"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1177\/109434200001400404"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.3390\/jimaging3010004"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40203-6_12"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00009"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3471621.3471869"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00003"},{"key":"e_1_3_2_1_53_1","volume-title":"Proceedings of 23rd USENIX Security Symposium (USENIX Security)","author":"Egele Manuel","year":"2014","unstructured":"Manuel Egele , Maverick Woo , Peter Chapman , and David Brumley . Blanket execution : Dynamic similarity testing for program binaries and components . In Proceedings of 23rd USENIX Security Symposium (USENIX Security) , 2014 . Manuel Egele, Maverick Woo, Peter Chapman, and David Brumley. Blanket execution: Dynamic similarity testing for program binaries and components. In Proceedings of 23rd USENIX Security Symposium (USENIX Security), 2014."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23185"},{"key":"e_1_3_2_1_55_1","volume-title":"Proceedings of the IEEE International Conference on Robotics and Automation (ICRA)","author":"Fei Fan","year":"2020","unstructured":"Fan Fei , Zhan Tu , D Xu , and Xinyan Deng . Learn-to-recover : Retrofitting uavs with reinforcement learning-assisted flight control under cyberphysical attacks . In Proceedings of the IEEE International Conference on Robotics and Automation (ICRA) , 2020 . Fan Fei, Zhan Tu, D Xu, and Xinyan Deng. Learn-to-recover: Retrofitting uavs with reinforcement learning-assisted flight control under cyberphysical attacks. In Proceedings of the IEEE International Conference on Robotics and Automation (ICRA), 2020."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICRA.2018.8462886"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978370"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1109\/WoWMoM.2017.7974336"},{"key":"e_1_3_2_1_59_1","first-page":"3708","article-title":"An end-to-end neural program decompiler","volume":"32","author":"Fu Cheng","year":"2019","unstructured":"Cheng Fu , Huili Chen , Haolan Liu , Xinyun Chen , Yuandong Tian , Farinaz Koushanfar , and Jishen Zhao . Coda : An end-to-end neural program decompiler . Advances in Neural Information Processing Systems , 32 : 3708 -- 3719 , 2019 . Cheng Fu, Huili Chen, Haolan Liu, Xinyun Chen, Yuandong Tian, Farinaz Koushanfar, and Jishen Zhao. Coda: An end-to-end neural program decompiler. Advances in Neural Information Processing Systems, 32:3708--3719, 2019.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-88625-9_16"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACC.2013.6580045"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2007.893255"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510084"},{"key":"e_1_3_2_1_64_1","volume-title":"Proceedings of the 3rd USENIX Windows NT Symposium","author":"Hunt Galen","year":"1999","unstructured":"Galen Hunt and Doug Brubacher . Detours : Binary interception of win32 functions . In Proceedings of the 3rd USENIX Windows NT Symposium , 1999 . Galen Hunt and Doug Brubacher. Detours: Binary interception of win32 functions. In Proceedings of the 3rd USENIX Windows NT Symposium, 1999."},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/3395363.3397377"},{"key":"e_1_3_2_1_66_1","volume-title":"Proceedings of the 27th Annual Symposium on Network and Distributed System Security (NDSS)","author":"Keliris Anastasis","year":"2018","unstructured":"Anastasis Keliris and Michail Maniatakos . Icsref : A framework for automated reverse engineering of industrial control systems binaries . In Proceedings of the 27th Annual Symposium on Network and Distributed System Security (NDSS) , 2018 . Anastasis Keliris and Michail Maniatakos. Icsref: A framework for automated reverse engineering of industrial control systems binaries. In Proceedings of the 27th Annual Symposium on Network and Distributed System Security (NDSS), 2018."},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/2968455.2968505"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568296"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24096"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134627"},{"key":"e_1_3_2_1_71_1","volume-title":"Proceedings of 29th USENIX Security Symposium (USENIX Security)","author":"Kim Taegyu","year":"2020","unstructured":"Taegyu Kim , Chung Hwan Kim , Altay Ozen , Fan Fei , Zhan Tu , Xiangyu Zhang , Xinyan Deng , Dave (Jing) Tian , and Dongyan Xu . From control model to program: Investigating robotic aerial vehicle accidents with mayday . In Proceedings of 29th USENIX Security Symposium (USENIX Security) , 2020 . Taegyu Kim, Chung Hwan Kim, Altay Ozen, Fan Fei, Zhan Tu, Xiangyu Zhang, Xinyan Deng, Dave (Jing) Tian, and Dongyan Xu. From control model to program: Investigating robotic aerial vehicle accidents with mayday. In Proceedings of 29th USENIX Security Symposium (USENIX Security), 2020."},{"key":"e_1_3_2_1_72_1","volume-title":"Proceedings of the 28th USENIX Security Symposium (USENIX Security)","author":"Kim Taegyu","year":"2019","unstructured":"Taegyu Kim , Chung Hwan Kim , Junghwan Rhee , Fan Fei , Zhan Tu , Gregory Walkup , Xiangyu Zhang , Xinyan Deng , and Dongyan Xu. Rvfuzzer : Finding input validation bugs in robotic vehicles through control-guided testing . In Proceedings of the 28th USENIX Security Symposium (USENIX Security) , 2019 . Taegyu Kim, Chung Hwan Kim, Junghwan Rhee, Fan Fei, Zhan Tu, Gregory Walkup, Xiangyu Zhang, Xinyan Deng, and Dongyan Xu. Rvfuzzer: Finding input validation bugs in robotic vehicles through control-guided testing. In Proceedings of the 28th USENIX Security Symposium (USENIX Security), 2019."},{"key":"e_1_3_2_1_73_1","volume-title":"Proceedings of 30th USENIX Security Symposium (USENIX Security)","author":"Kim Taegyu","year":"2021","unstructured":"Taegyu Kim , Vireshwar Kumar , Junghwan Rhee , Jizhou Chen , Kyungtae Kim , Chung Hwan Kim , Dongyan Xu , and Dave (Jing) Tian . Pasan : Detecting peripheral access concurrency bugs within bare-metal embedded applications . In Proceedings of 30th USENIX Security Symposium (USENIX Security) , 2021 . Taegyu Kim, Vireshwar Kumar, Junghwan Rhee, Jizhou Chen, Kyungtae Kim, Chung Hwan Kim, Dongyan Xu, and Dave (Jing) Tian. Pasan: Detecting peripheral access concurrency bugs within bare-metal embedded applications. In Proceedings of 30th USENIX Security Symposium (USENIX Security), 2021."},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1109\/IROS.2004.1389727"},{"key":"e_1_3_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2863237"},{"key":"e_1_3_2_1_76_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00064"},{"key":"e_1_3_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2004.1281665"},{"key":"e_1_3_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISPASS.2010.5452024"},{"key":"e_1_3_2_1_79_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065034"},{"key":"e_1_3_2_1_80_1","volume-title":"Proceedings of the 28th ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)","author":"Nethercote Nicholas","year":"2007","unstructured":"Nicholas Nethercote and Julian Seward . Valgrind : A framework for heavyweight dynamic binary instrumentation . In Proceedings of the 28th ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI) , 2007 . Nicholas Nethercote and Julian Seward. Valgrind: A framework for heavyweight dynamic binary instrumentation. In Proceedings of the 28th ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), 2007."},{"key":"e_1_3_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-8788-2_25"},{"key":"e_1_3_2_1_82_1","volume-title":"Proceedings of 29th USENIX Security Symposium (USENIX Security)","author":"Quinonez Raul","year":"2020","unstructured":"Raul Quinonez , Jairo Giraldo , Luis Salazar , and Erick Bauman . Savior : Securing autonomous vehicles with robust physical invariants . In Proceedings of 29th USENIX Security Symposium (USENIX Security) , 2020 . Raul Quinonez, Jairo Giraldo, Luis Salazar, and Erick Bauman. Savior: Securing autonomous vehicles with robust physical invariants. In Proceedings of 29th USENIX Security Symposium (USENIX Security), 2020."},{"key":"e_1_3_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.4236\/wjet.2015.33C047"},{"key":"e_1_3_2_1_84_1","volume-title":"Blackhat ASIA","author":"Rodday Nils","year":"2016","unstructured":"Nils Rodday . Hacking a professional drone . Blackhat ASIA , 2016 . Nils Rodday. Hacking a professional drone. Blackhat ASIA, 2016."},{"key":"e_1_3_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2008.4738703"},{"key":"e_1_3_2_1_86_1","doi-asserted-by":"publisher","DOI":"10.14722\/bar.2018.23008"},{"key":"e_1_3_2_1_87_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243793"},{"key":"e_1_3_2_1_88_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23294"},{"key":"e_1_3_2_1_89_1","volume-title":"Proceedings of the 37th IEEE Symposium on Security and Privacy (IEEE S&P). IEEE","author":"Shoshitaishvili Yan","year":"2016","unstructured":"Yan Shoshitaishvili , Ruoyu Wang , Christopher Salls , Nick Stephens , Mario Polino , Andrew Dutcher , John Grosen , Siji Feng , Christophe Hauser , Christopher Kruegel , the art of war: Offensive techniques in binary analysis . In Proceedings of the 37th IEEE Symposium on Security and Privacy (IEEE S&P). IEEE , 2016 . Yan Shoshitaishvili, Ruoyu Wang, Christopher Salls, Nick Stephens, Mario Polino, Andrew Dutcher, John Grosen, Siji Feng, Christophe Hauser, Christopher Kruegel, et al. Sok:(state of) the art of war: Offensive techniques in binary analysis. In Proceedings of the 37th IEEE Symposium on Security and Privacy (IEEE S&P). IEEE, 2016."},{"key":"e_1_3_2_1_90_1","doi-asserted-by":"publisher","DOI":"10.1145\/2892208.2892235"},{"key":"e_1_3_2_1_91_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48063.2020.00053"},{"key":"e_1_3_2_1_92_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00045"},{"key":"e_1_3_2_1_93_1","doi-asserted-by":"publisher","DOI":"10.1109\/IROS40897.2019.8968145"},{"key":"e_1_3_2_1_94_1","doi-asserted-by":"publisher","DOI":"10.5555\/2831143.2831183"},{"key":"e_1_3_2_1_95_1","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2016.106"},{"key":"e_1_3_2_1_96_1","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420995"},{"key":"e_1_3_2_1_97_1","volume-title":"Proceedings of the 25th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS)","author":"Williams-King David","year":"2020","unstructured":"David Williams-King , Hidenori Kobayashi , Kent Williams-King , Graham Patterson , Frank Spano , Yu Jian Wu , Junfeng Yang , and Vasileios P Kemerlis . Egalito : Layout-agnostic binary recompilation . In Proceedings of the 25th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) , 2020 . David Williams-King, Hidenori Kobayashi, Kent Williams-King, Graham Patterson, Frank Spano, Yu Jian Wu, Junfeng Yang, and Vasileios P Kemerlis. Egalito: Layout-agnostic binary recompilation. In Proceedings of the 25th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), 2020."},{"key":"e_1_3_2_1_98_1","volume-title":"Proceedings of 30th USENIX Security Symposium (USENIX Security)","author":"Wu Jianliang","year":"2021","unstructured":"Jianliang Wu , Ruoyu Wu , Daniele Antonioli , Mathias Payer , Nils Ole Tippenhauer , Dongyan Xu , Dave Jing Tian , and Antonio Bianchi . Lightblue : Automatic profile-aware debloating of bluetooth stacks . In Proceedings of 30th USENIX Security Symposium (USENIX Security) , 2021 . Jianliang Wu, Ruoyu Wu, Daniele Antonioli, Mathias Payer, Nils Ole Tippenhauer, Dongyan Xu, Dave Jing Tian, and Antonio Bianchi. Lightblue: Automatic profile-aware debloating of bluetooth stacks. In Proceedings of 30th USENIX Security Symposium (USENIX Security), 2021."},{"key":"e_1_3_2_1_99_1","volume-title":"Proceedings of the 31th USENIX Security Symposium (USENIX Security)","author":"Wu Ruoyu","year":"2022","unstructured":"Ruoyu Wu , Taegyu Kim , Dave (Jing) Tian , Antonio Bianchi , and Dongyan Xu. Dnd : A cross-architecture deep neural network decompiler . In Proceedings of the 31th USENIX Security Symposium (USENIX Security) , 2022 . Ruoyu Wu, Taegyu Kim, Dave (Jing) Tian, Antonio Bianchi, and Dongyan Xu. Dnd: A cross-architecture deep neural network decompiler. In Proceedings of the 31th USENIX Security Symposium (USENIX Security), 2022."},{"key":"e_1_3_2_1_100_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134018"},{"key":"e_1_3_2_1_101_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.18"},{"key":"e_1_3_2_1_102_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23185"},{"key":"e_1_3_2_1_103_1","doi-asserted-by":"publisher","DOI":"10.1109\/DASC.2016.7778007"},{"key":"e_1_3_2_1_104_1","doi-asserted-by":"publisher","DOI":"10.23919\/ChiCC.2018.8483542"}],"event":{"name":"MobiSys '22: The 20th Annual International Conference on Mobile Systems, Applications and Services","location":"Portland Oregon","acronym":"MobiSys '22","sponsor":["SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing","SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the 20th Annual International Conference on Mobile Systems, Applications and Services"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3498361.3538938","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3498361.3538938","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3498361.3538938","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:10:04Z","timestamp":1750183804000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3498361.3538938"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,6,27]]},"references-count":104,"alternative-id":["10.1145\/3498361.3538938","10.1145\/3498361"],"URL":"https:\/\/doi.org\/10.1145\/3498361.3538938","relation":{},"subject":[],"published":{"date-parts":[[2022,6,27]]},"assertion":[{"value":"2022-06-27","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}