{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,21]],"date-time":"2026-03-21T03:37:41Z","timestamp":1774064261783,"version":"3.50.1"},"reference-count":58,"publisher":"IEEE","license":[{"start":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T00:00:00Z","timestamp":1559347200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T00:00:00Z","timestamp":1559347200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T00:00:00Z","timestamp":1559347200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,6]]},"DOI":"10.1109\/dsn.2019.00045","type":"proceedings-article","created":{"date-parts":[[2019,8,22]],"date-time":"2019-08-22T23:46:58Z","timestamp":1566517618000},"page":"349-361","source":"Crossref","is-referenced-by-count":16,"title":["Tell Me More Than Just Assembly! Reversing Cyber-Physical Execution Semantics of Embedded IoT Controller Software Binaries"],"prefix":"10.1109","author":[{"given":"Pengfei","family":"Sun","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Luis","family":"Garcia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Saman","family":"Zonouz","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","article-title":"ENISA","author":"network","year":"2011","journal-title":"Protecting Industrial Control Systems Recommendations for Europe and Member States"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.14722\/bar.2018.23017"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ACC.2013.6580348"},{"key":"ref32","first-page":"207","article-title":"Poly-morphic worm detection using structural information of executables","author":"kruegel","year":"2005","journal-title":"International Workshop on Recent Advances in Intrusion Detection"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134627"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23107"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2010.5718158"},{"key":"ref36","author":"lin","year":"2010","journal-title":"Automatic reverse engineering of data structures from binary execution"},{"key":"ref35","article-title":"Tie: Principled reverse engineering of types in binary programs","author":"lee","year":"2011","journal-title":"NDSS"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/2430553.2430558"},{"key":"ref28","article-title":"Ida pro disassembler","year":"0","journal-title":"Hex-Rays"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2973750.2973768"},{"key":"ref29","article-title":"Protecting an industrial ac drive application against cyber sabotage","author":"hinkkanen","year":"2013"},{"key":"ref2","article-title":"Dataflowsanitizer","year":"0"},{"key":"ref1","article-title":"Clang static analyzer","year":"0"},{"key":"ref20","author":"eagle","year":"2011","journal-title":"The IDA Pro Book The Unofficial Guide to the World's Most Popular Disassembler"},{"key":"ref22","first-page":"27","article-title":"Using a decompiler for real-world source recovery","author":"emmerik","year":"2004","journal-title":"Reverse Engineering 2004 Proceedings 11th Working Conference on"},{"key":"ref21","first-page":"303","article-title":"Blanket execution: Dynamic similarity testing for program binaries and components","author":"egele","year":"2014","journal-title":"Usenix Security"},{"key":"ref24","first-page":"29","article-title":"W32. stuxnet dossier","volume":"5","author":"falliere","year":"2011","journal-title":"White Paper Symantec Corp Security Response"},{"key":"ref23","article-title":"BLACKENERGY and QUEDAGH: The convergence of crimeware and APT attacks","year":"2016","journal-title":"F-Secure Labs"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23313"},{"key":"ref25","article-title":"Structural comparison of executable objects","author":"flake","year":"2004","journal-title":"DIMVA 2004 July 6–7"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/11691372_28"},{"key":"ref51","author":"starbuck","year":"2009","journal-title":"Organization at the Limit Lessons From the Columbia Disaster"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516664"},{"key":"ref57","author":"yuschuk","year":"2007","journal-title":"OllyDbg"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134018"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2012.12.005"},{"key":"ref54","article-title":"Global industrial control systems (ics)security market 2014-2018","year":"2014","journal-title":"TechNavio"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991118"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-C.2017.73"},{"key":"ref10","first-page":"209","article-title":"Klee: Unassisted and automatic generation of high-coverage tests for complex systems programs","volume":"8","author":"cadar","year":"2008","journal-title":"OSDI"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.Workshops.2008.40"},{"key":"ref40","article-title":"Lief: library for instrumenting executable files","year":"2017","journal-title":"Quarks"},{"key":"ref12","author":"certik","year":"2008","journal-title":"Sympy Python Library for Symbolic Mathematics"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.automatica.2016.10.004"},{"key":"ref14","article-title":"W32. Duqu-The precursor to the next Stuxnet","author":"chien","year":"2011","journal-title":"Symantic Security Response Tech Rep"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1961296.1950396"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243752"},{"key":"ref17","first-page":"1","article-title":"Intel sgx explained","volume":"2016","author":"costan","year":"2016","journal-title":"IACR Cryptology ePrint Archive"},{"key":"ref18","first-page":"255","article-title":"Digging for data structures","volume":"8","author":"cozzie","year":"2008","journal-title":"OSDI"},{"key":"ref19","first-page":"1","article-title":"Graph-based comparison of executable objects (english version)","volume":"5","author":"dullien","year":"2005","journal-title":"SSTIC"},{"key":"ref4","article-title":"A simulink model to learn the kalman filter for gaussian processes","year":"0"},{"key":"ref3","article-title":"Ollydbg","year":"0"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/1609956.1609960"},{"key":"ref5","article-title":"Snowman: A native code to c\/c++ decompiler","year":"0"},{"key":"ref8","first-page":"1092","article-title":"Understanding the mirai botnet","author":"antonakakis","year":"2017","journal-title":"USENIX Security Symposium"},{"key":"ref7","author":"angrishi","year":"2017","journal-title":"Turning Internet of Things (IoT) into Internet of Vulnerabilities (IoV) IoT Botnets"},{"key":"ref49","article-title":"Howard: A dynamic excavator for reverse engineering data structures","author":"slowinska","year":"2011","journal-title":"NDSS"},{"key":"ref9","first-page":"41","article-title":"Qemu, a fast and portable dynamic translator","author":"bellard","year":"2005","journal-title":"USENIX Annual Technical Conference Freenix track"},{"key":"ref46","article-title":"Native x86 decompilation using semantics-preserving structural analysis and iterative control-flow structuring","volume":"16","author":"schwartz","year":"2013","journal-title":"Proceedings of the USENIX Security Symposium"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1016\/j.measurement.2012.01.005"},{"key":"ref48","author":"simulink","year":"2005","journal-title":"Simulation and Model-Based Design"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2017.60"},{"key":"ref42","author":"rescue","year":"2006","journal-title":"IDA Pro Disassembler"},{"key":"ref41","first-page":"1","article-title":"Static gesture recognition based precise positioning of 5-dof robotic arm using fpga","author":"raj","year":"2017","journal-title":"2017 Trends in Industrial Measurement and Automation (TIMA) TIMA"},{"key":"ref44","first-page":"255","article-title":"Dscrete: Automatic rendering of forensic information from memory images via application logic reuse","author":"saltaformaggio","year":"2014","journal-title":"USENIX Security Symposium"},{"key":"ref43","article-title":"A quantitative evaluation of the target selection of havex ics malware plugin","author":"rrushi","year":"2015","journal-title":"Industrial Control System Security (ICSS)Workshop"}],"event":{"name":"2019 49th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN)","location":"Portland, OR, USA","start":{"date-parts":[[2019,6,24]]},"end":{"date-parts":[[2019,6,27]]}},"container-title":["2019 49th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8790390\/8809485\/08809529.pdf?arnumber=8809529","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,18]],"date-time":"2022-07-18T15:36:35Z","timestamp":1658158595000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8809529\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,6]]},"references-count":58,"URL":"https:\/\/doi.org\/10.1109\/dsn.2019.00045","relation":{},"subject":[],"published":{"date-parts":[[2019,6]]}}}