{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,14]],"date-time":"2026-10-14T16:45:55Z","timestamp":1791996355172,"version":"4.4.0"},"publisher-location":"New York, NY, USA","reference-count":49,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T00:00:00Z","timestamp":1667779200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"NSF (National Science Foundation)","award":["CNS-1814679, CNS-201934"],"award-info":[{"award-number":["CNS-1814679, CNS-201934"]}]},{"name":"The National Natural Science Foundation of China","award":["U1836210"],"award-info":[{"award-number":["U1836210"]}]},{"DOI":"10.13039\/100000001","name":"Cisco Research","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"the Key Research and Development Science and Technology of Hainan Province","award":["ZDYF202012"],"award-info":[{"award-number":["ZDYF202012"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,11,7]]},"DOI":"10.1145\/3548606.3559386","type":"proceedings-article","created":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T06:41:28Z","timestamp":1667803288000},"page":"3269-3283","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":25,"title":["What Your Firmware Tells You Is Not How You Should Emulate It"],"prefix":"10.1145","author":[{"given":"Wei","family":"Zhou","sequence":"first","affiliation":[{"name":"School of Cyber Science and Engineering, Huazhong University of Science and Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lan","family":"Zhang","sequence":"additional","affiliation":[{"name":"College of Information Sciences and Technology, The Pennsylvania State University, state college, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Le","family":"Guan","sequence":"additional","affiliation":[{"name":"School of Computing, University of Georgia, Athens, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peng","family":"Liu","sequence":"additional","affiliation":[{"name":"College of Information Sciences and Technology, The Pennsylvania State University, state college, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuqing","family":"Zhang","sequence":"additional","affiliation":[{"name":"National Computer Network Intrusion Protection Center, University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,11,7]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"Feng Bo Muench Marius Zhou Wei and Scharnowski Tobias. 2022. P2IM Unit test Errata. https:\/\/github.com\/RiS3-Lab\/p2im-unit_tests#errata. (2022). Last accessed: 2022-08-01.  Feng Bo Muench Marius Zhou Wei and Scharnowski Tobias. 2022. P2IM Unit test Errata. https:\/\/github.com\/RiS3-Lab\/p2im-unit_tests#errata. (2022). Last accessed: 2022-08-01."},{"key":"e_1_3_2_2_2_1","unstructured":"bofeng17 and lfz5092. 2022. P2IM Errata. https:\/\/github.com\/RiS3-Lab\/p2im-unit_tests\/commit\/cdfd9bbc72e1cc87a1f5d3905804ae1f91539beb. (2022). Last accessed: 2022-08-01.  bofeng17 and lfz5092. 2022. P2IM Errata. https:\/\/github.com\/RiS3-Lab\/p2im-unit_tests\/commit\/cdfd9bbc72e1cc87a1f5d3905804ae1f91539beb. (2022). Last accessed: 2022-08-01."},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427280"},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/D14-1082"},{"key":"e_1_3_2_2_5_1","first-page":"1","article-title":"Towards Automated Dynamic Analysis for Linux-based Embedded Firmware","volume":"16","author":"Chen Daming D","year":"2016","unstructured":"Daming D Chen , Maverick Woo , David Brumley , and Manuel Egele . 2016 . Towards Automated Dynamic Analysis for Linux-based Embedded Firmware .. In NDSS , Vol. 16. 1 -- 16 . Daming D Chen, Maverick Woo, David Brumley, and Manuel Egele. 2016. Towards Automated Dynamic Analysis for Linux-based Embedded Firmware.. In NDSS, Vol. 16. 1--16.","journal-title":"NDSS"},{"key":"e_1_3_2_2_6_1","volume-title":"Bookworm Game: Automatic Discovery of LTE Vulnerabilities Through Documentation Analysis. In 2021 IEEE Symposium on Security and Privacy (SP). 1197--1214","author":"Chen Yi","year":"2021","unstructured":"Yi Chen , Yepeng Yao , XiaoFeng Wang , Dandan Xu , Chang Yue , Xiaozhong Liu , Kai Chen , Haixu Tang , and Baoxu Liu . 2021 . Bookworm Game: Automatic Discovery of LTE Vulnerabilities Through Documentation Analysis. In 2021 IEEE Symposium on Security and Privacy (SP). 1197--1214 . https:\/\/doi.org\/10.1109\/SP40001.2021.00104 10.1109\/SP40001.2021.00104 Yi Chen, Yepeng Yao, XiaoFeng Wang, Dandan Xu, Chang Yue, Xiaozhong Liu, Kai Chen, Haixu Tang, and Baoxu Liu. 2021. Bookworm Game: Automatic Discovery of LTE Vulnerabilities Through Documentation Analysis. In 2021 IEEE Symposium on Security and Privacy (SP). 1197--1214. https:\/\/doi.org\/10.1109\/SP40001.2021.00104"},{"key":"e_1_3_2_2_7_1","volume-title":"HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation. In 29th USENIX Security Symposium. 1--18","author":"Clements Abraham A","year":"2020","unstructured":"Abraham A Clements , Eric Gustafson , Tobias Scharnowski , Paul Grosen , David Fritz , Christopher Kruegel , Giovanni Vigna , Saurabh Bagchi , and Mathias Payer . 2020 . HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation. In 29th USENIX Security Symposium. 1--18 . Abraham A Clements, Eric Gustafson, Tobias Scharnowski, Paul Grosen, David Fritz, Christopher Kruegel, Giovanni Vigna, Saurabh Bagchi, and Mathias Payer. 2020. HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation. In 29th USENIX Security Symposium. 1--18."},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897900"},{"key":"e_1_3_2_2_9_1","unstructured":"Cyberhaven. 2022. Analyzing large programs using concolic execution. http:\/\/s2e.systems\/docs\/Howtos\/Concolic.html. (2022).  Cyberhaven. 2022. Analyzing large programs using concolic execution. http:\/\/s2e.systems\/docs\/Howtos\/Concolic.html. (2022)."},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3453093"},{"key":"e_1_3_2_2_11_1","unstructured":"Bo Feng. 2021. P2IM unit test samples. https:\/\/github.com\/RiS3-Lab\/p2im-unit_tests\/tree\/30e6aec9f5c44f11b8072bf597eb80729dad417d. (2021).  Bo Feng. 2021. P2IM unit test samples. https:\/\/github.com\/RiS3-Lab\/p2im-unit_tests\/tree\/30e6aec9f5c44f11b8072bf597eb80729dad417d. (2021)."},{"key":"e_1_3_2_2_12_1","volume-title":"Proceedings of Usenix Security Symposium.","author":"Feng Bo","year":"2020","unstructured":"Bo Feng , Alejandro Mera , and Long Lu . 2020 . P2IM: Scalable and Hardware-independent Firmware Testing via Automatic Peripheral Interface Modeling . In Proceedings of Usenix Security Symposium. Bo Feng, Alejandro Mera, and Long Lu. 2020. P2IM: Scalable and Hardware-independent Firmware Testing via Automatic Peripheral Interface Modeling. In Proceedings of Usenix Security Symposium."},{"key":"e_1_3_2_2_13_1","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Feng Xuan","year":"2018","unstructured":"Xuan Feng , Qiang Li , Haining Wang , and Limin Sun . 2018 . Acquisitional rule-based engine for discovering internet-of-things devices . In 27th USENIX Security Symposium (USENIX Security 18) . 327--341. Xuan Feng, Qiang Li, Haining Wang, and Limin Sun. 2018. Acquisitional rule-based engine for discovering internet-of-things devices. In 27th USENIX Security Symposium (USENIX Security 18). 327--341."},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.5555\/3361338.3361400"},{"key":"e_1_3_2_2_15_1","unstructured":"FRDM-K64F. 2021. Freedom Development Platform. https:\/\/www.nxp.com\/design\/development-boards\/freedom-development-boards\/mcu-boards\/freedom-development-platform-for-kinetis-k64-k63-and-k24-mcus:FRDM-K64F. (2021). Last accessed: 2022-05-01.  FRDM-K64F. 2021. Freedom Development Platform. https:\/\/www.nxp.com\/design\/development-boards\/freedom-development-boards\/mcu-boards\/freedom-development-platform-for-kinetis-k64-k63-and-k24-mcus:FRDM-K64F. (2021). Last accessed: 2022-05-01."},{"key":"e_1_3_2_2_16_1","volume-title":"22nd International Symposium on Research in Attacks, Intrusions and Defenses ({RAID}","author":"Gustafson Eric","year":"2019","unstructured":"Eric Gustafson , Marius Muench , Chad Spensky , Nilo Redini , Aravind Machiry , Yanick Fratantonio , Davide Balzarotti , Aur\u00e9lien Francillon , Yung Ryn Choe , Christophe Kruegel , 2019 . Toward the Analysis of Embedded Firmware through Automated Re-hosting . In 22nd International Symposium on Research in Attacks, Intrusions and Defenses ({RAID} 2019). 135--150. Eric Gustafson, Marius Muench, Chad Spensky, Nilo Redini, Aravind Machiry, Yanick Fratantonio, Davide Balzarotti, Aur\u00e9lien Francillon, Yung Ryn Choe, Christophe Kruegel, et al. 2019. Toward the Analysis of Embedded Firmware through Automated Re-hosting. In 22nd International Symposium on Research in Attacks, Intrusions and Defenses ({RAID} 2019). 135--150."},{"key":"e_1_3_2_2_17_1","unstructured":"Eric Gustafson and Moritz Schloegel. 2021. Pretender firmware samples. https:\/\/github.com\/ucsb-seclab\/pretender\/tree\/master\/test_programs\/max32600. (2021).  Eric Gustafson and Moritz Schloegel. 2021. Pretender firmware samples. https:\/\/github.com\/ucsb-seclab\/pretender\/tree\/master\/test_programs\/max32600. (2021)."},{"key":"e_1_3_2_2_19_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Johnson Evan","year":"2021","unstructured":"Evan Johnson , Maxwell Bland , YiFei Zhu , Joshua Mason , Stephen Checkoway , Stefan Savage , and Kirill Levchenko . 2021 . Jetset: Targeted firmware rehosting for embedded systems . In 30th USENIX Security Symposium (USENIX Security 21) . Evan Johnson, Maxwell Bland, YiFei Zhu, Joshua Mason, Stephen Checkoway, Stefan Savage, and Kirill Levchenko. 2021. Jetset: Targeted firmware rehosting for embedded systems. In 30th USENIX Security Symposium (USENIX Security 21)."},{"key":"e_1_3_2_2_20_1","volume-title":"10th International Conference on Emerging Security Information, Systems and Technologies (SECUWARE).","author":"Kammerstetter Markus","year":"2016","unstructured":"Markus Kammerstetter , Daniel Burian , and Wolfgang Kastner . 2016 . Embedded security testing with peripheral device caching and runtime program state approximation . In 10th International Conference on Emerging Security Information, Systems and Technologies (SECUWARE). Markus Kammerstetter, Daniel Burian, and Wolfgang Kastner. 2016. Embedded security testing with peripheral device caching and runtime program state approximation. In 10th International Conference on Emerging Security Information, Systems and Technologies (SECUWARE)."},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590301"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243804"},{"key":"e_1_3_2_2_23_1","volume-title":"9th USENIX Workshop on Offensive Technologies (WOOT 15)","author":"Koscher Karl","year":"2015","unstructured":"Karl Koscher , Tadayoshi Kohno , and David Molnar . 2015 . SURROGATES: Enabling near-real-time dynamic analyses of embedded systems . In 9th USENIX Workshop on Offensive Technologies (WOOT 15) . Karl Koscher, Tadayoshi Kohno, and David Molnar. 2015. SURROGATES: Enabling near-real-time dynamic analyses of embedded systems. In 9th USENIX Workshop on Offensive Technologies (WOOT 15)."},{"key":"e_1_3_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24308"},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/P14-5010"},{"key":"e_1_3_2_2_26_1","unstructured":"MarketWatch. 2022. Microcontroller Unit (MCU) Market Size 2022. https:\/\/www.marketwatch.com\/press-release\/microcontroller-unit-mcu-market-size-2022-industry-growth-latest-update-with-technological-advancement-emerging-trends-business-opportunity-sales-revenue-gross-margin-and-forecast-to-2030--2022-06-06. (2022). Last accessed: 2022-08-01.  MarketWatch. 2022. Microcontroller Unit (MCU) Market Size 2022. https:\/\/www.marketwatch.com\/press-release\/microcontroller-unit-mcu-market-size-2022-industry-growth-latest-update-with-technological-advancement-emerging-trends-business-opportunity-sales-revenue-gross-margin-and-forecast-to-2030--2022-06-06. (2022). Last accessed: 2022-08-01."},{"key":"e_1_3_2_2_27_1","unstructured":"Microchip. 2021. SAM3X\/SAM3A Series Atmel SMART ARM-based MCU DATASHEET. https:\/\/ww1.microchip.com\/downloads\/en\/devicedoc\/atmel-11057--32-bit-cortex-m3-microcontroller-sam3x-sam3a_datasheet.pdf. (2021). Last accessed: 2022-07-01.  Microchip. 2021. SAM3X\/SAM3A Series Atmel SMART ARM-based MCU DATASHEET. https:\/\/ww1.microchip.com\/downloads\/en\/devicedoc\/atmel-11057--32-bit-cortex-m3-microcontroller-sam3x-sam3a_datasheet.pdf. (2021). Last accessed: 2022-07-01."},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.14722\/bar.2018.23017"},{"key":"e_1_3_2_2_29_1","unstructured":"Ethan Nam. 2021. Understanding the Levenshtein Distance Equation for Beginners. https:\/\/medium.com\/@ethannam\/understanding-the-levenshtein-distance-equation-for-beginners-c4285a5604f0. (2021). Last accessed: 2022-05-01.  Ethan Nam. 2021. Understanding the Levenshtein Distance Equation for Beginners. https:\/\/medium.com\/@ethannam\/understanding-the-levenshtein-distance-equation-for-beginners-c4285a5604f0. (2021). Last accessed: 2022-05-01."},{"key":"e_1_3_2_2_30_1","unstructured":"Nordic. 2021. nRF52840 Product Specification v1.7. https:\/\/infocenter.nordicsemi.com\/pdf\/nRF52840_PS_v1.7.pdf. (2021). Last accessed: 2022-05-01.  Nordic. 2021. nRF52840 Product Specification v1.7. https:\/\/infocenter.nordicsemi.com\/pdf\/nRF52840_PS_v1.7.pdf. (2021). Last accessed: 2022-05-01."},{"key":"e_1_3_2_2_31_1","unstructured":"NXP. 2014a. FRDM-K64F Freedom Module User's Guide. https:\/\/www.mouser.com\/datasheet\/2\/302\/NXP_01112019_FRDM_K64F-1891948.pdf. (2014). Last accessed: 2022-05-01.  NXP. 2014a. FRDM-K64F Freedom Module User's Guide. https:\/\/www.mouser.com\/datasheet\/2\/302\/NXP_01112019_FRDM_K64F-1891948.pdf. (2014). Last accessed: 2022-05-01."},{"key":"e_1_3_2_2_32_1","unstructured":"NXP. 2014b. K64 Sub-Family Reference Manual. https:\/\/www.mouser.com\/datasheet\/2\/813\/K64P144M120SF5RM-1074828.pdf. (2014). Last accessed: 2022-05-01.  NXP. 2014b. K64 Sub-Family Reference Manual. https:\/\/www.mouser.com\/datasheet\/2\/813\/K64P144M120SF5RM-1074828.pdf. (2014). Last accessed: 2022-05-01."},{"key":"e_1_3_2_2_33_1","unstructured":"QEMU-6.1. 2022a. QEMU backend for STMF405\/205 ADC. https:\/\/github.com\/qemu\/qemu\/blob\/stable-6.1\/hw\/adc\/stm32f2xx_adc.c#L75. (2022). Last accessed: 2022-08-01.  QEMU-6.1. 2022a. QEMU backend for STMF405\/205 ADC. https:\/\/github.com\/qemu\/qemu\/blob\/stable-6.1\/hw\/adc\/stm32f2xx_adc.c#L75. (2022). Last accessed: 2022-08-01."},{"key":"e_1_3_2_2_34_1","unstructured":"QEMU-6.1. 2022b. QEMU backend for STMF405\/205 USART. https:\/\/github.com\/qemu\/qemu\/blob\/stable-6.1\/hw\/char\/stm32f2xx_usart.c#L67. (2022). Last accessed: 2022-08-01.  QEMU-6.1. 2022b. QEMU backend for STMF405\/205 USART. https:\/\/github.com\/qemu\/qemu\/blob\/stable-6.1\/hw\/char\/stm32f2xx_usart.c#L67. (2022). Last accessed: 2022-08-01."},{"key":"e_1_3_2_2_35_1","volume-title":"Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing. In 31st USENIX Security Symposium (USENIX Security 22)","author":"Scharnowski Tobias","year":"2022","unstructured":"Tobias Scharnowski , Nils Bars , Moritz Schloegel , Eric Gustafson , Marius Muench , Giovanni Vigna , Christopher Kruegel , Thorsten Holz , and Ali Abbasi . 2022 . Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing. In 31st USENIX Security Symposium (USENIX Security 22) . USENIX Association, Boston, MA. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/scharnowski Tobias Scharnowski, Nils Bars, Moritz Schloegel, Eric Gustafson, Marius Muench, Giovanni Vigna, Christopher Kruegel, Thorsten Holz, and Ali Abbasi. 2022. Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing. In 31st USENIX Security Symposium (USENIX Security 22). USENIX Association, Boston, MA. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/scharnowski"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"crossref","unstructured":"Yan Shoshitaishvili Ruoyu Wang Christophe Hauser Christopher Kruegel and Giovanni Vigna. 2015. Firmalice-automatic detection of authentication bypass vulnerabilities in binary firmware.. In NDSS.  Yan Shoshitaishvili Ruoyu Wang Christophe Hauser Christopher Kruegel and Giovanni Vigna. 2015. Firmalice-automatic detection of authentication bypass vulnerabilities in binary firmware.. In NDSS.","DOI":"10.14722\/ndss.2015.23294"},{"key":"e_1_3_2_2_37_1","unstructured":"Abragam Siyon Sing. 2021. State Diagram and state table with solved problem on state reduction. https:\/\/www.electrically4u.com\/state-diagram-and-state-table\/. (2021).  Abragam Siyon Sing. 2021. State Diagram and state table with solved problem on state reduction. https:\/\/www.electrically4u.com\/state-diagram-and-state-table\/. (2021)."},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664280"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3437532"},{"key":"e_1_3_2_2_40_1","unstructured":"STMicroelectronics. 2020. RM0038 Reference manual. https:\/\/www.st.com\/resource\/en\/reference_manual\/cd00240193-stm32l100xx-stm32l151xx-stm32l152xx-and-stm32l162xx-advanced-arm-based-32-bit-mcus-stmicroelectronics.pdf. (2020). Last accessed: 2022-05-01.  STMicroelectronics. 2020. RM0038 Reference manual. https:\/\/www.st.com\/resource\/en\/reference_manual\/cd00240193-stm32l100xx-stm32l151xx-stm32l152xx-and-stm32l162xx-advanced-arm-based-32-bit-mcus-stmicroelectronics.pdf. (2020). Last accessed: 2022-05-01."},{"key":"e_1_3_2_2_41_1","unstructured":"STMicroelectronics. 2021a. RM0008 Reference manual. https:\/\/www.st.com\/resource\/en\/reference_manual\/cd00171190-stm32f101xx-stm32f102xx-stm32f103xx-stm32f105xx-and-stm32f107xx-advanced-arm-based-32-bit-mcus-stmicroelectronics.pdf. (2021). Last accessed: 2022-05-01.  STMicroelectronics. 2021a. RM0008 Reference manual. https:\/\/www.st.com\/resource\/en\/reference_manual\/cd00171190-stm32f101xx-stm32f102xx-stm32f103xx-stm32f105xx-and-stm32f107xx-advanced-arm-based-32-bit-mcus-stmicroelectronics.pdf. (2021). Last accessed: 2022-05-01."},{"key":"e_1_3_2_2_42_1","unstructured":"STMicroelectronics. 2021b. RM0090 Reference manual. https:\/\/www.st.com\/resource\/en\/reference_manual\/dm00031020-stm32f405-415-stm32f407-417-stm32f427-437-and-stm32f429-439-advanced-arm-based-32-bit-mcus-stmicroelectronics.pdf. (2021). Last accessed: 2022-05-01.  STMicroelectronics. 2021b. RM0090 Reference manual. https:\/\/www.st.com\/resource\/en\/reference_manual\/dm00031020-stm32f405-415-stm32f407-417-stm32f427-437-and-stm32f429-439-advanced-arm-based-32-bit-mcus-stmicroelectronics.pdf. (2021). Last accessed: 2022-05-01."},{"key":"e_1_3_2_2_43_1","unstructured":"STMicroelectronics. 2021c. STM32 Nucleo-32 boards User Manul. https:\/\/www.st.com\/resource\/en\/user_manual\/dm00231744-stm32-nucleo32-boards-mb1180-stmicroelectronics.pdf. (2021). Last accessed: 2022-05-01.  STMicroelectronics. 2021c. STM32 Nucleo-32 boards User Manul. https:\/\/www.st.com\/resource\/en\/user_manual\/dm00231744-stm32-nucleo32-boards-mb1180-stmicroelectronics.pdf. (2021). Last accessed: 2022-05-01."},{"key":"e_1_3_2_2_44_1","unstructured":"STMicroelectronics. 2021d. STM32 Nucleo-64 development board with STM32F103RB MCU. https:\/\/www.st.com\/content\/st_com\/en\/products\/evaluation-tools\/product-evaluation-tools\/mcu-mpu-eval-tools\/stm32-mcu-mpu-eval-tools\/stm32-nucleo-boards\/nucleo-f103rb.html. (2021). Last accessed: 2022-05-01.  STMicroelectronics. 2021d. STM32 Nucleo-64 development board with STM32F103RB MCU. https:\/\/www.st.com\/content\/st_com\/en\/products\/evaluation-tools\/product-evaluation-tools\/mcu-mpu-eval-tools\/stm32-mcu-mpu-eval-tools\/stm32-nucleo-boards\/nucleo-f103rb.html. (2021). Last accessed: 2022-05-01."},{"key":"e_1_3_2_2_45_1","unstructured":"STMicroelectronics. 2022. STM32Cube MCU Package for STM32F4 series. https:\/\/www.st.com\/en\/embedded-software\/stm32cubef4.html#get-software. (2022). Last accessed: 2022-07-01.  STMicroelectronics. 2022. STM32Cube MCU Package for STM32F4 series. https:\/\/www.st.com\/en\/embedded-software\/stm32cubef4.html#get-software. (2022). Last accessed: 2022-07-01."},{"key":"e_1_3_2_2_46_1","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Tian Yuan","year":"2017","unstructured":"Yuan Tian , Nan Zhang , Yueh-Hsun Lin , XiaoFeng Wang , Blase Ur , Xianzheng Guo , and Patrick Tague . 2017 . Smartauth: User-centered authorization for the internet of things . In 26th USENIX Security Symposium (USENIX Security 17) . 361--378. Yuan Tian, Nan Zhang, Yueh-Hsun Lin, XiaoFeng Wang, Blase Ur, Xianzheng Guo, and Patrick Tague. 2017. Smartauth: User-centered authorization for the internet of things. In 26th USENIX Security Symposium (USENIX Security 17). 361--378."},{"key":"e_1_3_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3345662"},{"key":"e_1_3_2_2_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/2393596.2393608"},{"key":"e_1_3_2_2_49_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Zhou Wei","year":"2021","unstructured":"Wei Zhou , Le Guan , Peng Liu , and Yuqing Zhang . 2021 . Automatic Firmware Emulation through Invalidity-guided Knowledge Inference . In 30th USENIX Security Symposium (USENIX Security 21) . Wei Zhou, Le Guan, Peng Liu, and Yuqing Zhang. 2021. Automatic Firmware Emulation through Invalidity-guided Knowledge Inference. In 30th USENIX Security Symposium (USENIX Security 21)."},{"key":"e_1_3_2_2_50_1","volume-title":"Proceedings of the 51st Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers). 434--443","author":"Zhu Muhua","year":"2013","unstructured":"Muhua Zhu , Yue Zhang , Wenliang Chen , Min Zhang , and Jingbo Zhu . 2013 . Fast and accurate shift-reduce constituent parsing . In Proceedings of the 51st Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers). 434--443 . Muhua Zhu, Yue Zhang, Wenliang Chen, Min Zhang, and Jingbo Zhu. 2013. Fast and accurate shift-reduce constituent parsing. In Proceedings of the 51st Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers). 434--443."}],"event":{"name":"CCS '22: 2022 ACM SIGSAC Conference on Computer and Communications Security","location":"Los Angeles CA USA","acronym":"CCS '22","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3548606.3559386","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3548606.3559386","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3548606.3559386","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T13:50:57Z","timestamp":1750168257000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3548606.3559386"}},"subtitle":["A Specification-Guided Approach for Firmware Emulation"],"short-title":[],"issued":{"date-parts":[[2022,11,7]]},"references-count":49,"alternative-id":["10.1145\/3548606.3559386","10.1145\/3548606"],"URL":"https:\/\/doi.org\/10.1145\/3548606.3559386","relation":{},"subject":[],"published":{"date-parts":[[2022,11,7]]},"assertion":[{"value":"2022-11-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}