{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T12:44:24Z","timestamp":1780317864930,"version":"3.54.1"},"reference-count":51,"publisher":"Association for Computing Machinery (ACM)","issue":"6","license":[{"start":{"date-parts":[[2022,6,27]],"date-time":"2022-06-27T00:00:00Z","timestamp":1656288000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000183","name":"US Army Research Office","doi-asserted-by":"crossref","award":["W911NF-19-1-0102"],"award-info":[{"award-number":["W911NF-19-1-0102"]}],"id":[{"id":"10.13039\/100000183","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Des. Autom. Electron. Syst."],"published-print":{"date-parts":[[2022,11,30]]},"abstract":"<jats:p>\n            The Internet of Things (IoT) and smart devices are currently being deployed in systems such as autonomous vehicles and medical monitoring devices. The introduction of IoT devices into these systems enables network connectivity for data transfer, cloud support, and more, but can also lead to malware injection. Since many IoT devices operate in remote environments, it is also difficult to protect them from physical tampering. Conventional protection approaches rely on software. However, these can be circumvented by the moving target nature of malware or through hardware attacks. Alternatively, insertion of the internal monitoring circuits into IoT chips requires a design trade-off, balancing the requirements of the monitoring circuit and the main circuit. A very promising approach to detecting anomalous behavior in the IoT and other embedded systems is side-channel analysis. To date, however, this can be performed only before deployment due to the cost and size of side-channel setups (e.g., and oscilloscopes, probes) or by internal performance counters. Here, we introduce an external monitoring printed circuit board (PCB) named RASC to provide\n            <jats:underline>r<\/jats:underline>\n            emote\n            <jats:underline>a<\/jats:underline>\n            ccess to\n            <jats:underline>s<\/jats:underline>\n            ide-\n            <jats:underline>c<\/jats:underline>\n            hannels. RASC reduces the complete side-channel analysis system into two small PCBs (2\n            <jats:inline-formula content-type=\"math\/tex\">\n              <jats:tex-math notation=\"LaTeX\" version=\"MathJax\">\\( \\times \\)<\/jats:tex-math>\n            <\/jats:inline-formula>\n            2 cm), providing the ability to monitor power and electromagnetic (EM) traces of the target device. Additionally, RASC can transmit data and\/or alerts of anomalous activities detected to a remote host through Bluetooth. To demonstrate RASCs capabilities, we extract keys from encryption modules such as AES implemented on Arduino and FPGA boards. To illustrate RASC\u2019s defensive capabilities, we also use it to perform malware detection. RASC\u2019s success in power analysis is comparable to an oscilloscope\/probe setup but is lightweight and two orders of magnitude cheaper.\n          <\/jats:p>","DOI":"10.1145\/3524123","type":"journal-article","created":{"date-parts":[[2022,4,13]],"date-time":"2022-04-13T11:54:27Z","timestamp":1649850867000},"page":"1-25","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["RASCv2: Enabling Remote Access to Side-Channels for Mission Critical and IoT Systems"],"prefix":"10.1145","volume":"27","author":[{"given":"Yunkai","family":"Bai","sequence":"first","affiliation":[{"name":"University of Florida, Gainesville, Florida, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrew","family":"Stern","sequence":"additional","affiliation":[{"name":"University of Florida, Gainesville, Florida, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jungmin","family":"Park","sequence":"additional","affiliation":[{"name":"University of Florida, Gainesville, Florida, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mark","family":"Tehranipoor","sequence":"additional","affiliation":[{"name":"University of Florida, Gainesville, Florida, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2794-7320","authenticated-orcid":false,"given":"Domenic","family":"Forte","sequence":"additional","affiliation":[{"name":"University of Florida, Gainesville, Florida, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,6,27]]},"reference":[{"key":"e_1_3_1_2_2","volume-title":"SAKURA-G","unstructured":"[n.d.]. SAKURA-G. Retrieved April 15, 2022 from http:\/\/satoh.cs.uec.ac.jp\/SAKURA\/hardware\/SAKURA-G.html."},{"key":"e_1_3_1_3_2","volume-title":"GPcode.AK Ransomware","year":"2008","unstructured":"2008. GPcode.AK Ransomware. Retrieved April 15, 2022 from https:\/\/www.knowbe4.com\/gpcodeak-ransomware."},{"key":"e_1_3_1_4_2","volume-title":"Android\/Ransom.Koler","year":"2014","unstructured":"2014. Android\/Ransom.Koler. Retrieved April 15, 2022 from https:\/\/blog.malwarebytes.com\/detections\/android-ransom-koler\/."},{"key":"e_1_3_1_5_2","volume-title":"CTB-Locker (Curve-Tor-Bitcoin Locker) or Critoni.A","year":"2014","unstructured":"2014. CTB-Locker (Curve-Tor-Bitcoin Locker) or Critoni.A. Retrieved April 15, 2022 from https:\/\/www.knowbe4.com\/curve-tor-bitcoin-locker."},{"key":"e_1_3_1_6_2","volume-title":"Lockerpin Ransomware steals PINs, locks Android devices permenantly","year":"2015","unstructured":"2015. Lockerpin Ransomware steals PINs, locks Android devices permenantly. Retrieved April 15, 2022 from https:\/\/www.zdnet.com\/article\/lockerpin-ransomware-steals-pins-locks-android-devices-Permanently\/."},{"key":"e_1_3_1_7_2","article-title":"Performance counters to rescue: A machine learning based safeguard against micro-architectural side-channel-attacks","author":"Alam Manaar","year":"2017","unstructured":"Manaar Alam, Sarani Bhattacharya, Debdeep Mukhopadhyay, and Sourangshu Bhattacharya. 2017. Performance counters to rescue: A machine learning based safeguard against micro-architectural side-channel-attacks. Cryptology ePrint Archive, Report 2017\/564. Retrieved April 15, 2022 from https:\/\/eprint.iacr.org\/2017\/564.","journal-title":"Cryptology ePrint Archive, Report 2017\/564"},{"key":"e_1_3_1_8_2","doi-asserted-by":"publisher","DOI":"10.1145\/2393216.2393330"},{"key":"e_1_3_1_9_2","article-title":"Digital thermometer data may provide insight into COVID-19 surges","author":"Bazzoli Fred","year":"2020","unstructured":"Fred Bazzoli. 2020. Digital thermometer data may provide insight into COVID-19 surges. Healthcare IT News. Retrieved April 15, 2022 from https:\/\/www.healthcareitnews.com\/news\/digital-thermometer-data-may-provide-insight-covid-19-surges.","journal-title":"Healthcare IT News"},{"key":"e_1_3_1_10_2","volume-title":"International Cryptographic Module Conference","author":"Becker G.","year":"2013","unstructured":"G. Becker, J. Cooper, E. De Mulder, G. Goodwill, J. Jaffe, G. Kenworthy, et\u00a0al. 2013. Test vector leakage assessment (TVLA) derived test requirements (DTR) with AES. In International Cryptographic Module Conference."},{"key":"e_1_3_1_11_2","doi-asserted-by":"publisher","DOI":"10.1109\/SSD.2011.5767431"},{"key":"e_1_3_1_12_2","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00250"},{"key":"e_1_3_1_13_2","doi-asserted-by":"crossref","unstructured":"C.-C. Chang and C.-J. Lin. 2011. Libsvm: a library for support vector machines. ACM Transactions on Intelligent Systems and Technology (TIST) 2 3 (2011) 1\u201327.","DOI":"10.1145\/1961189.1961199"},{"key":"e_1_3_1_14_2","doi-asserted-by":"publisher","DOI":"10.1145\/2857705.2857722"},{"key":"e_1_3_1_15_2","volume-title":"2013 USENIX Workshop on Health Information Technologies (HealthTech\u201913)","author":"Clark Shane S.","year":"2013","unstructured":"Shane S. Clark, Benjamin Ransford, Amir Rahmati, Shane Guineau, Jacob Sorber, Wenyuan Xu, and Kevin Fu. 2013. WattsUpDoc: Power side channels to nonintrusively discover untargeted malware on embedded medical devices. In 2013 USENIX Workshop on Health Information Technologies (HealthTech\u201913). USENIX Association, Washington, D.C.https:\/\/www.usenix.org\/conference\/healthtech13\/workshop-program\/presentation\/clark."},{"key":"e_1_3_1_16_2","unstructured":"C. Cowan C. Pu D. Maier J. Walpole P. Bakke S. Beattie A. Grier P. Wagle Q. Zhang and H. Hinton. 1998. Stackguard: automatic adaptive detection and prevention of buffer-overflow attacks. In USENIX security symposium vol. 98. San Antonio TX 63\u201378."},{"key":"e_1_3_1_17_2","article-title":"A survey of hardware-based control flow integrity (CFI)","author":"Clercq Ruan de","year":"2017","unstructured":"Ruan de Clercq and Ingrid Verbauwhede. 2017. A survey of hardware-based control flow integrity (CFI). arXiv preprint arXiv:1706.07257 (6 2017).","journal-title":"arXiv preprint arXiv:1706.07257"},{"key":"e_1_3_1_18_2","volume-title":"Neural Network Models: Theory and Projects","author":"Wilde Philippe De","year":"2013","unstructured":"Philippe De Wilde. 2013. Neural Network Models: Theory and Projects. Springer Science & Business Media."},{"key":"e_1_3_1_19_2","volume-title":"SQL injection attack: Real life attacks and code examples","author":"Dizdar Admir","year":"2021","unstructured":"Admir Dizdar. 2021. SQL injection attack: Real life attacks and code examples. Retrieved April 15, 2022 from https:\/\/www.neuralegion.com\/blog\/sql-injection-attack\/."},{"key":"e_1_3_1_20_2","first-page":"78","volume-title":"Building a Side Channel Based Disassembler","author":"Eisenbarth Thomas","year":"2010","unstructured":"Thomas Eisenbarth, Christof Paar, and Bj\u00f6rn Weghenkel. 2010. Building a Side Channel Based Disassembler. Springer-Verlag, Berlin, 78\u201399."},{"key":"e_1_3_1_21_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.43"},{"key":"e_1_3_1_22_2","doi-asserted-by":"publisher","DOI":"10.1109\/WWC.2001.990739"},{"key":"e_1_3_1_23_2","doi-asserted-by":"publisher","DOI":"10.4236\/ijcns.2008.11010"},{"key":"e_1_3_1_24_2","first-page":"51","article-title":"Secure physical enclosures from covers with tamper-resistance","volume":"2019","author":"Immler Vincent","year":"2019","unstructured":"Vincent Immler, Johannes Obermaier, Kuan Kuan Ng, Fei Xiang Ke, JinYu Lee, Yak Peng Lim, Wei Koon Oh, Keng Hoong Wee, and Georg Sigl. 2019. Secure physical enclosures from covers with tamper-resistance. IACR Trans. Cryptogr. Hardw. Embed. Syst. 2019 (2019), 51\u201396.","journal-title":"IACR Trans. Cryptogr. Hardw. Embed. Syst."},{"key":"e_1_3_1_25_2","doi-asserted-by":"crossref","unstructured":"I. T. Jolliffe and J. Cadima. 2016. Principal component analysis: a review and recent developments. Philosophical Transactions of the Royal Society A: Mathematical Physical and Engineering Sciences 374 2065 (2016) 20150202.","DOI":"10.1098\/rsta.2015.0202"},{"key":"e_1_3_1_26_2","first-page":"519","volume-title":"Frontiers Inf Technol Electronic Eng","author":"Xiao Yu Jun","year":"2017","unstructured":"Yu Jun Xiao, Wen Yuan Xu, Zhen Hua Jia, Zhuo Ran Ma, and Dong Lian Qi. 2017. NIPAD: A non-invasive power-based anomaly detection scheme for programmable logic controllers. In Frontiers Inf Technol Electronic Eng. 519\u2013534."},{"key":"e_1_3_1_27_2","volume-title":"USENIX Security Symposium","author":"Kiriansky Vladimir","year":"2002","unstructured":"Vladimir Kiriansky, Derek Bruening, and Saman P. Amarasinghe. 2002. Secure execution via program shepherding. In USENIX Security Symposium."},{"key":"e_1_3_1_28_2","doi-asserted-by":"publisher","DOI":"10.2307\/2529937"},{"key":"e_1_3_1_29_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-06320-1_11"},{"key":"e_1_3_1_30_2","first-page":"333","volume-title":"ACM\/IEEE 44th Annual International Symposium on Computer Architecture (ISCA\u201917)","author":"Nazari Alireza","year":"2017","unstructured":"Alireza Nazari, Nader Sehatbakhsh, Monjur Alam, Alenka Zajic, and Milos Prvulovic. 2017. EDDIE: EM-based detection of deviations in program execution. In ACM\/IEEE 44th Annual International Symposium on Computer Architecture (ISCA\u201917). 333\u2013346."},{"issue":"1","key":"e_1_3_1_31_2","first-page":"6","article-title":"Leveraging side-channel information for disassembly and security","volume":"16","author":"Park Jungmin","year":"2019","unstructured":"Jungmin Park, Fahim Rahman, Apostol Vassilev, Domenic Forte, and Mark Tehranipoor. 2019. Leveraging side-channel information for disassembly and security. J. Emerg. Technol. Comput. Syst. 16, 1, Article 6 (Dec. 2019), 21 pages.","journal-title":"J. Emerg. Technol. Comput. Syst."},{"key":"e_1_3_1_32_2","first-page":"1","volume-title":"55th ACM\/ESDA\/IEEE Design Automation Conference (DAC\u201918)","author":"Park Jungmin","year":"2018","unstructured":"Jungmin Park, Xiaolin Xu, Yier Jin, Domenic Forte, and Mark Tehranipoor. 2018. Power-based side-channel instruction-level disassembler. In 55th ACM\/ESDA\/IEEE Design Automation Conference (DAC\u201918). 1\u20136."},{"issue":"1","key":"e_1_3_1_33_2","first-page":"10","article-title":"Ransomware: Evolution, mitigation and prevention","volume":"13","author":"Richardson Ronny","year":"2017","unstructured":"Ronny Richardson and Max M. North. 2017. Ransomware: Evolution, mitigation and prevention. International Management Review 13, 1 (2017), 10.","journal-title":"International Management Review"},{"key":"e_1_3_1_34_2","first-page":"1","volume-title":"2018 IEEE International Symposium on Hardware Oriented Security and Trust (HOST\u201918)","author":"Sehatbakhsh Nader","year":"2018","unstructured":"Nader Sehatbakhsh, Monjur Alam, Alireza Nazari, Alenka Zajic, and Milos Prvulovic. 2018. Syndrome: Spectral analysis for anomaly detection on medical IoT and embedded devices. In 2018 IEEE International Symposium on Hardware Oriented Security and Trust (HOST\u201918). 1\u20138."},{"key":"e_1_3_1_35_2","first-page":"1","volume-title":"49th Annual IEEE\/ACM International Symposium on Microarchitecture (MICRO\u201916)","author":"Sehatbakhsh N.","year":"2016","unstructured":"N. Sehatbakhsh, A. Nazari, A. Zajic, and M. Prvulovic. 2016. Spectral profiling: Observer-effect-free profiling by monitoring EM emanations. In 49th Annual IEEE\/ACM International Symposium on Microarchitecture (MICRO\u201916). 1\u201311."},{"key":"e_1_3_1_36_2","first-page":"1","volume-title":"49th Annual IEEE\/ACM International Symposium on Microarchitecture (MICRO\u201916)","author":"Sehatbakhsh N.","year":"2016","unstructured":"N. Sehatbakhsh, A. Nazari, A. Zajic, and M. Prvulovic. 2016. Spectral profiling: Observer-effect-free profiling by monitoring EM emanations. In 49th Annual IEEE\/ACM International Symposium on Microarchitecture (MICRO\u201916). 1\u201311."},{"key":"e_1_3_1_37_2","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315313"},{"key":"e_1_3_1_38_2","doi-asserted-by":"crossref","unstructured":"H. Shen M. T. Rahman N. Asadizanjani M. Tehranipoor and S. Bhunia. 2018. Coating-based pcb protection against tampering snooping em attack and x-ray reverse engineering. In ISTFA . ASM International 290\u2013294.","DOI":"10.31399\/asm.cp.istfa2018p0290"},{"key":"e_1_3_1_39_2","volume-title":"GOMACTech","author":"Stern Andrew","year":"2019","unstructured":"Andrew Stern, Kun Yang, Jason Vosatka, Adam Duncan, Jungmin Park, Domenic Forte, and Mark Tehranipoor. 2019. RASC: Enabling remote access to side-channels for mission critical systems. In GOMACTech."},{"key":"e_1_3_1_40_2","doi-asserted-by":"publisher","DOI":"10.7873\/DATE.2015.0639"},{"key":"e_1_3_1_41_2","doi-asserted-by":"publisher","DOI":"10.7873\/DATE.2015.0639"},{"key":"e_1_3_1_42_2","volume-title":"ChipWhisperer-Lite XMEGA","author":"Technology NewAE","unstructured":"NewAE Technology. [n.d.]. ChipWhisperer-Lite XMEGA. Retrieved April 15, 2022 from https:\/\/www.newae.com\/chipwhisperer."},{"key":"e_1_3_1_43_2","doi-asserted-by":"publisher","DOI":"10.1109\/MDT.2010.7"},{"key":"e_1_3_1_44_2","volume-title":"Tektronix MDO3102 mixed domain oscilloscope","unstructured":"Tektronix. [n.d.]. Tektronix MDO3102 mixed domain oscilloscope. Retrieved April 15, 2022 from https:\/\/www.tek.com\/datasheet\/mixed-domain-oscilloscopes."},{"key":"e_1_3_1_45_2","volume-title":"ADC08200 8-Bit, 20 Msps to 200 Msps, low power A\/D converter with internal Sampleand-Hold","year":"2013","unstructured":"Texas Instruments. 2013. ADC08200 8-Bit, 20 Msps to 200 Msps, low power A\/D converter with internal Sampleand-Hold. Texas Instruments."},{"key":"e_1_3_1_46_2","article-title":"Impact of COVID-19 on adoption of IoT in different sectors","volume":"2101","author":"Umair Muhammad","year":"2021","unstructured":"Muhammad Umair, Muhammad Aamir Cheema, Omer Cheema, Huan Li, and Hua Lu. 2021. Impact of COVID-19 on adoption of IoT in different sectors. CoRR abs\/2101.07196 (2021). https:\/\/arxiv.org\/abs\/2101.07196","journal-title":"CoRR"},{"key":"e_1_3_1_47_2","volume-title":"Code Red (Computer Worm)","year":"2001","unstructured":"Wikipedia. 2001. Code Red (Computer Worm). Retrieved April 15, 2022 from https:\/\/en.wikipedia.org\/wiki\/Code_Red_(computer_worm)#cite_note-caida-3."},{"key":"e_1_3_1_48_2","volume-title":"Spartan-3E FPGA Family Data Sheet","year":"2018","unstructured":"Xilinx. 2018. Spartan-3E FPGA Family Data Sheet. Xilinx."},{"key":"e_1_3_1_49_2","doi-asserted-by":"publisher","DOI":"10.1145\/3174850"},{"key":"e_1_3_1_50_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2017.09.003"},{"key":"e_1_3_1_51_2","doi-asserted-by":"publisher","DOI":"10.1145\/2744769.2744869"},{"key":"e_1_3_1_52_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.44"}],"container-title":["ACM Transactions on Design Automation of Electronic Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3524123","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3524123","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3524123","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T19:31:05Z","timestamp":1750188665000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3524123"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,6,27]]},"references-count":51,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2022,11,30]]}},"alternative-id":["10.1145\/3524123"],"URL":"https:\/\/doi.org\/10.1145\/3524123","relation":{},"ISSN":["1084-4309","1557-7309"],"issn-type":[{"value":"1084-4309","type":"print"},{"value":"1557-7309","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,6,27]]},"assertion":[{"value":"2021-07-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2022-03-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2022-06-27","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}