{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,20]],"date-time":"2026-05-20T23:28:25Z","timestamp":1779319705319,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":42,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,4,24]],"date-time":"2023-04-24T00:00:00Z","timestamp":1682294400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"EU Horizon 2020","award":["826284 (ProTego)"],"award-info":[{"award-number":["826284 (ProTego)"]}]},{"name":"EU Horizon 2020","award":["871793 (Accordion)"],"award-info":[{"award-number":["871793 (Accordion)"]}]},{"name":"CyberSecurity Research Flanders","award":["VR20192203"],"award-info":[{"award-number":["VR20192203"]}]},{"name":"FWO","award":["SPITE"],"award-info":[{"award-number":["SPITE"]}]},{"name":"VLAIO","award":["TRUSTI"],"award-info":[{"award-number":["TRUSTI"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,4,24]]},"DOI":"10.1145\/3577923.3583646","type":"proceedings-article","created":{"date-parts":[[2023,4,20]],"date-time":"2023-04-20T10:57:59Z","timestamp":1681988279000},"page":"213-224","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["HAT: Secure and Practical Key Establishment for Implantable Medical Devices"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3495-4641","authenticated-orcid":false,"given":"Sayon","family":"Duttagupta","sequence":"first","affiliation":[{"name":"KU Leuven, Leuven, Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5002-0187","authenticated-orcid":false,"given":"Eduard","family":"Marin","sequence":"additional","affiliation":[{"name":"Telef\u00f3nica Research, Barcelona, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9084-698X","authenticated-orcid":false,"given":"Dave","family":"Singel\u00e9e","sequence":"additional","affiliation":[{"name":"KU Leuven, Leuven, Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2005-9651","authenticated-orcid":false,"given":"Bart","family":"Preneel","sequence":"additional","affiliation":[{"name":"KU Leuven, Leuven, Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,4,24]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Vibreaker: Securing Vibrational Pairing with Deliberate Acoustic Noise. In Conference on Security and Privacy in Wireless and Mobile Networks (WiSec)","author":"Abhishek S.A.","year":"2016","unstructured":"S.A. Abhishek and N. Saxena. 2016. Vibreaker: Securing Vibrational Pairing with Deliberate Acoustic Noise. In Conference on Security and Privacy in Wireless and Mobile Networks (WiSec). ACM Press, 103--108."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/3098243.3098256"},{"key":"e_1_3_2_1_3_1","unstructured":"M. Bellare and P. Rogaway. 2005. Introduction to Modern Cryptography. 207 pages."},{"key":"e_1_3_2_1_4_1","volume-title":"Modeling and Verifying Security Protocols with the Applied Pi Calculus and ProVerif. Foundations and Trends\u00ae in Privacy and Security","author":"Blanchet Bruno","year":"2016","unstructured":"Bruno Blanchet. 2016. Modeling and Verifying Security Protocols with the Applied Pi Calculus and ProVerif. Foundations and Trends\u00ae in Privacy and Security (2016), 1--135."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","unstructured":"B. Buhrow P. Riemer M. Shea B. Gilbert and E. Daniel. 2015. lock Cipher Speed and Energy Efficiency Records on the MSP430: System Design Trade-Offs for 16-Bit Embedded Applications. In Progress in Cryptology - LATINCRYPT. 104--123.","DOI":"10.1007\/978-3-319-16295-9_6"},{"key":"e_1_3_2_1_6_1","volume-title":"Moon: Security Implications for IPI-Based Protocols. In Information Security Theory and Practice. 36--51.","author":"Calleja A.","year":"2015","unstructured":"A. Calleja, P. Peris-Lopez, and J. E. Tapiador. 2015. Electrical Heart Signals can be Monitored from the Moon: Security Implications for IPI-Based Protocols. In Information Security Theory and Practice. 36--51."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","unstructured":"D. Coppersmith and M. Jakobsson. 2003. Almost Optimal Hash Sequence Traversal. In Financial Cryptography (FC). 102--119.","DOI":"10.1007\/3-540-36504-4_8"},{"key":"e_1_3_2_1_8_1","volume-title":"International Conference on Human Factors in Computing Systems (CHI). 917--926","author":"Denning T.","unstructured":"010)]% DenningBFGKM10, T. Denning, A. Borning, B. Friedman, B. T. Gill, T. Kohno, and W. H. Maisel. 2010. Patients, pacemakers, and implantable defibrillators: human values and security for wireless implantable medical devices. In International Conference on Human Factors in Computing Systems (CHI). 917--926."},{"key":"e_1_3_2_1_9_1","volume-title":"Annual Computer Security Applications Conference (ACSAC). 426--435","author":"Denning T.","unstructured":"T. Denning, D. B. Kramer, B. Friedman, M. R. Reynolds, B. Gill, and T. Kohno. 2014. CPS: Beyond Usability: Applying Value Sensitive Design Based Methods to Investigate Domain Characteristics for Security for Implantable Cardiac Devices. In Annual Computer Security Applications Conference (ACSAC). 426--435."},{"key":"e_1_3_2_1_10_1","volume-title":"Fuzzy Extractors: How to Generate Strong Keys from Biometrics and Other Noisy Data. In Advances in Cryptology - EUROCRYPT. 523--540.","author":"Dodis Y.","year":"2004","unstructured":"Y. Dodis, L. Reyzin, and A. Smith. 2004. Fuzzy Extractors: How to Generate Strong Keys from Biometrics and Other Noisy Data. In Advances in Cryptology - EUROCRYPT. 523--540."},{"key":"e_1_3_2_1_11_1","volume-title":"They Can Hear Your Heartbeats: Non-Invasive Security for Implantable Medical Devices. In SIGCOMM Conference. 2--13","author":"Gollakota S.","unstructured":"S. Gollakota, H. Hassanieh, B. Ransford, D. Katabi, and K. Fu. 2011. They Can Hear Your Heartbeats: Non-Invasive Security for Implantable Medical Devices. In SIGCOMM Conference. 2--13."},{"key":"e_1_3_2_1_12_1","volume-title":"On Pairing Constrained Wireless Devices Based on Secrecy of Auxiliary Channels: The Case of Acoustic Eavesdropping. In Conference on Computer and Communications Security (CCS). 97--108","author":"Halevi T.","unstructured":"T. Halevi and N. Saxena. 2010. On Pairing Constrained Wireless Devices Based on Secrecy of Auxiliary Channels: The Case of Acoustic Eavesdropping. In Conference on Computer and Communications Security (CCS). 97--108."},{"key":"e_1_3_2_1_13_1","volume-title":"Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses. In IEEE Symposium on Security and Privacy (S&P). 129--142","author":"Halperin D.","unstructured":"D. Halperin, T. S. Heydt-Benjamin, B. Ransford, S. S. Clark, B. Defend, W. Morgan, K. Fu, T. Kohno, and W. H. Maisel. 2008. Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses. In IEEE Symposium on Security and Privacy (S&P). 129--142."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","unstructured":"G. Hinterw\"alder A. Moradi Mi. Hutter P. Schwabe and C. Paar. 2015. Full-Size High-Security ECC Implementation on MSP430 Microcontrollers. In LATINCRYPT. 31--47.","DOI":"10.1007\/978-3-319-16295-9_2"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2013.6567031"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISIT.2002.1023709"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"crossref","unstructured":"L. Jean-Paul and T. Pim. 2003. New Shielding Functions to Enhance Privacy and Prevent Misuse of Biometric Templates. In Audio- and Video-Based Biometric Person Authentication. 393--402.","DOI":"10.1007\/3-540-44887-X_47"},{"key":"e_1_3_2_1_18_1","volume-title":"Design Automation Conference (DAC). 1--6.","author":"Kim Y.","unstructured":"Y. Kim, W. S. Lee, V. Raghunathan, N. K. Jha, and A. Raghunathan. 2015. Vibration-based secure side channel for medical devices. In Design Automation Conference (DAC). 1--6."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411495.3421365"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2913703"},{"key":"e_1_3_2_1_21_1","volume-title":"International Conference on e-Health Networking, Applications and Services. 150--156","author":"Li C","unstructured":"C Li, A Raghunathan, and N K. Jha. 2011. Hijacking an insulin pump: Security attacks and defenses for a diabetes therapy system. In International Conference on e-Health Networking, Applications and Services. 150--156."},{"key":"e_1_3_2_1_22_1","volume-title":"Symposium on Access Control Models and Technologies (SACMAT). 113--122","author":"Marin E.","unstructured":"E. Marin, E. Argones R.\u00faa, D. Singel\u00e9e, and B. Preneel. 2019. On the Difficulty of Using Patient's Physiological Signals in Cryptographic Protocols. In Symposium on Access Control Models and Technologies (SACMAT). 113--122."},{"key":"e_1_3_2_1_23_1","volume-title":"Annual Conference on Computer Security Applications (ACSAC). 226--236","author":"Marin E.","unstructured":"E. Marin, D. Singel\u00e9e, F. D. Garcia, T. Chothia, R. Willems, and B. Preneel. 2016a. On the (in)Security of the Latest Generation Implantable Cardiac Defibrillators and How to Secure Them. In Annual Conference on Computer Security Applications (ACSAC). 226--236."},{"key":"e_1_3_2_1_24_1","volume-title":"Conference on Data and Application Security and Privacy (CODASPY). 113--120","author":"Marin E.","unstructured":"E. Marin, D. Singel\u00e9e, B. Yang, I. Verbauwhede, and B. Preneel. 2016b. On the Feasibility of Cryptography for a Wireless Insulin Pump System. In Conference on Data and Application Security and Privacy (CODASPY). 113--120."},{"key":"e_1_3_2_1_25_1","volume-title":"Securing Wireless Neurostimulators. In Conference on Data and Application Security and Privacy (CODASPY). 287--298","author":"Marin E.","unstructured":"E. Marin, D. Singel\u00e9e, B. Yang, V. Volski, G. A. E. Vandenbosch, B. Nuttin, and B. Preneel. 2018. Securing Wireless Neurostimulators. In Conference on Data and Application Security and Privacy (CODASPY). 287--298."},{"key":"e_1_3_2_1_26_1","volume-title":"2005 IEEE Symposium on Security and Privacy (S&P'05)","author":"McCune J.M.","unstructured":"J.M. McCune, A. Perrig, and M.K. Reiter. 2005. Seeing-is-believing: using camera phones for human-verifiable authentication. In 2005 IEEE Symposium on Security and Privacy (S&P'05). 110--124."},{"key":"e_1_3_2_1_27_1","unstructured":"Microsoft. [n. d.]. Introducing Azure confidential computing. https:\/\/azure.microsoft.com\/en-us\/blog\/introducing-azure-confidential-computing\/."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.3390\/e20020094"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2006.1632652"},{"key":"e_1_3_2_1_30_1","volume-title":"Proximity-Based Access Control for Implantable Medical Devices. In Conference on Computer and Communications Security (CCS). 410--419","author":"Rasmussen K. Bonne","unstructured":"K. Bonne Rasmussen, C. Castelluccia, T. S. Heydt-Benjamin, and S. Capkun. 2009. Proximity-Based Access Control for Implantable Medical Devices. In Conference on Computer and Communications Security (CCS). 410--419."},{"key":"e_1_3_2_1_31_1","volume-title":"IEEE Design Automation Conference (DAC).","author":"Rostami M.","unstructured":"M. Rostami, W. Burleson, A. Juels, and F. Koushanfar. 2013. Balancing security and utility in Medical Devices?. In IEEE Design Automation Conference (DAC)."},{"key":"e_1_3_2_1_32_1","volume-title":"Conference on Computer and Communications Security (CCS). 1099--1112","author":"Rostami M.","unstructured":"M. Rostami, A. Juels, and F. Koushanfar. 2013. Heart-to-Heart (H2H): Authentication for Implanted Medical Devices. In Conference on Computer and Communications Security (CCS). 1099--1112."},{"key":"e_1_3_2_1_33_1","volume-title":"SoK: Security and Privacy in Implantable Medical Devices and Body Area Networks. In IEEE Symposium on Security and Privacy. 524--539","author":"Rushanan M.","unstructured":"M. Rushanan, A. D. Rubin, D. F. Kune, and C. M. Swanson. 2014. SoK: Security and Privacy in Implantable Medical Devices and Body Area Networks. In IEEE Symposium on Security and Privacy. 524--539."},{"key":"e_1_3_2_1_34_1","first-page":"313","volume-title":"2006 IEEE Symposium on Security and Privacy (S&P'06)","author":"Saxena N.","unstructured":"N. Saxena, J.-E. Ekberg, K. Kostiainen, and N. Asokan. 2006. Secure device pairing based on a visual channel. In 2006 IEEE Symposium on Security and Privacy (S&P'06). 6 pp.--313."},{"key":"e_1_3_2_1_35_1","volume-title":"International Conference on Pervasive Computing and Communications (PerCom). 181--188","author":"Saxena N.","unstructured":"N. Saxena, M. B. Uddin, J. Voris, and N. Asokan. 2011. Vibrate-to-unlock: Mobile phone assisted user authentication to multiple personal RFID tags. In International Conference on Pervasive Computing and Communications (PerCom). 181--188."},{"key":"e_1_3_2_1_36_1","volume-title":"Implementation of Attacks on Ultrasonic Ranging Systems. In ACM Conference on Embedded Networked Sensor Systems (SenSys).","author":"Sedighpour S.","unstructured":"S. Sedighpour, S. Capkun, S. Ganeriwal, and M. Srivastava. 2005. Implementation of Attacks on Ultrasonic Ranging Systems. In ACM Conference on Embedded Networked Sensor Systems (SenSys)."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/JBHI.2017.2691282"},{"key":"e_1_3_2_1_38_1","volume-title":"The Resurrecting Duckling: Security Issues for Ad-hoc Wireless Networks. In International Workshop on Security Protocols. 172--182","author":"Stajano Frank","year":"1999","unstructured":"Frank Stajano and Ross Anderson. 1999. The Resurrecting Duckling: Security Issues for Ad-hoc Wireless Networks. In International Workshop on Security Protocols. 172--182."},{"key":"e_1_3_2_1_39_1","volume-title":"On Limitations of Friendly Jamming for Confidentiality. In IEEE Symposium on Security and Privacy (S&P). 160--173","author":"Tippenhauer N. O.","unstructured":"N. O. Tippenhauer, L. Malisa, A. Ranganathan, and S. Capkun. 2013. On Limitations of Friendly Jamming for Confidentiality. In IEEE Symposium on Security and Privacy (S&P). 160--173."},{"key":"e_1_3_2_1_40_1","volume-title":"Shades of Elliptic Curve Cryptography on Embedded Processors. In INDOCRYPT","author":"Wenger Erich","year":"2013","unstructured":"Erich Wenger, Thomas Unterluggauer, and Mario Werner. [n.,d.]. 8\/16\/32 Shades of Elliptic Curve Cryptography on Embedded Processors. In INDOCRYPT 2013."},{"key":"e_1_3_2_1_41_1","volume-title":"Processors for Elliptic Curve Cryptography. In CARDIS","author":"Wenger Erich","year":"2011","unstructured":"Erich Wenger and Mario Werner. [n.,d.]. Evaluating 16-Bit Processors for Elliptic Curve Cryptography. In CARDIS 2011. 166--181."},{"key":"e_1_3_2_1_42_1","volume-title":"International Conference on Computer Communications (INFOCOM). 1862--1870","author":"Xu F.","unstructured":"F. Xu, Z. Qin, C. C. Tan, B. Wang, and Q. Li. 2011. IMDGuard: Securing implantable medical devices with the external wearable guardian. In International Conference on Computer Communications (INFOCOM). 1862--1870."}],"event":{"name":"CODASPY '23: Thirteenth ACM Conference on Data and Application Security and Privacy","location":"Charlotte NC USA","acronym":"CODASPY '23","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the Thirteenth ACM Conference on Data and Application Security and Privacy"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3577923.3583646","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3577923.3583646","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:08:41Z","timestamp":1750183721000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3577923.3583646"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,4,24]]},"references-count":42,"alternative-id":["10.1145\/3577923.3583646","10.1145\/3577923"],"URL":"https:\/\/doi.org\/10.1145\/3577923.3583646","relation":{},"subject":[],"published":{"date-parts":[[2023,4,24]]},"assertion":[{"value":"2023-04-24","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}