{"id":"https://openalex.org/W3133602685","doi":"https://doi.org/10.1109/mdat.2021.3063314","title":"End-to-End Automated Exploit Generation for Processor Security Validation","display_name":"End-to-End Automated Exploit Generation for Processor Security Validation","publication_year":2021,"publication_date":"2021-03-03","ids":{"openalex":"https://openalex.org/W3133602685","doi":"https://doi.org/10.1109/mdat.2021.3063314","mag":"3133602685"},"language":"en","primary_location":{"id":"doi:10.1109/mdat.2021.3063314","doi":"https://doi.org/10.1109/mdat.2021.3063314","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mdat.2021.3063314","pdf_url":null,"source":{"id":"https://openalex.org/S4210176427","display_name":"IEEE Design and Test","issn_l":"2168-2356","issn":["2168-2356","2168-2364"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-b","jufo-2","norway-1","poland-70","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Design & Test","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.17615/xfx9-kf84","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100422049","display_name":"Rui Zhang","orcid":"https://orcid.org/0000-0002-4221-8329","observed_orcids":["https://orcid.org/0000-0002-4221-8329"]},"institutions":[{"id":"https://openalex.org/I114027177","display_name":"University of North Carolina at Chapel Hill","ror":"https://ror.org/0130frc33","country_code":"US","type":"education","lineage":["https://openalex.org/I114027177"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rui Zhang","raw_affiliation_strings":["University of North Carolina at Chapel Hill, Chapel Hill, NC, USA"],"raw_orcid":"https://orcid.org/0000-0002-4221-8329","affiliations":[{"raw_affiliation_string":"University of North Carolina at Chapel Hill, Chapel Hill, NC, USA","institution_ids":["https://openalex.org/I114027177"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048337173","display_name":"Calvin Deutschbein","orcid":"https://orcid.org/0000-0003-1354-7200","observed_orcids":["https://orcid.org/0000-0003-1354-7200"]},"institutions":[{"id":"https://openalex.org/I114027177","display_name":"University of North Carolina at Chapel Hill","ror":"https://ror.org/0130frc33","country_code":"US","type":"education","lineage":["https://openalex.org/I114027177"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Calvin Deutschbein","raw_affiliation_strings":["University of North Carolina at Chapel Hill, Chapel Hill, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of North Carolina at Chapel Hill, Chapel Hill, NC, USA","institution_ids":["https://openalex.org/I114027177"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078778324","display_name":"Peng Huang","orcid":"https://orcid.org/0000-0001-6315-0848","observed_orcids":["https://orcid.org/0000-0001-6315-0848","https://orcid.org/0009-0002-1979-6208"]},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Peng Huang","raw_affiliation_strings":["Johns Hopkins University, Baltimore, MD, USA"],"raw_orcid":"https://orcid.org/0000-0001-6315-0848","affiliations":[{"raw_affiliation_string":"Johns Hopkins University, Baltimore, MD, USA","institution_ids":["https://openalex.org/I145311948"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088586496","display_name":"Cynthia Sturton","orcid":"https://orcid.org/0000-0003-3930-7440","observed_orcids":["https://orcid.org/0000-0003-3930-7440"]},"institutions":[{"id":"https://openalex.org/I114027177","display_name":"University of North Carolina at Chapel Hill","ror":"https://ror.org/0130frc33","country_code":"US","type":"education","lineage":["https://openalex.org/I114027177"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cynthia Sturton","raw_affiliation_strings":["University of North Carolina at Chapel Hill, Chapel Hill, NC, USA"],"raw_orcid":"https://orcid.org/0000-0003-3930-7440","affiliations":[{"raw_affiliation_string":"University of North Carolina at Chapel Hill, Chapel Hill, NC, USA","institution_ids":["https://openalex.org/I114027177"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2995,"currency":"USD","value_usd":2995},"apc_paid":null,"fwci":0.317,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.55265628,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":93},"biblio":{"volume":"38","issue":"3","first_page":"22","last_page":"30"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9696999788284302,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9696999788284302,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.01730000041425228,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.00279999990016222,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/processor-security","display_name":"processor security","score":0.9490000009536743},{"id":"https://openalex.org/keywords/security-validation","display_name":"security validation","score":0.699999988079071},{"id":"https://openalex.org/keywords/processor-design","display_name":"processor design","score":0.3140000104904175},{"id":"https://openalex.org/keywords/security-threats","display_name":"security threats","score":0.6029999852180481},{"id":"https://openalex.org/keywords/vulnerability-detection","display_name":"vulnerability detection","score":0.3700000047683716}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.9456353187561035},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7217565774917603},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5051074624061584},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3926490545272827},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.363608717918396},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.36208653450012207},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.15553787350654602}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/mdat.2021.3063314","doi":"https://doi.org/10.1109/mdat.2021.3063314","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mdat.2021.3063314","pdf_url":null,"source":{"id":"https://openalex.org/S4210176427","display_name":"IEEE Design and Test","issn_l":"2168-2356","issn":["2168-2356","2168-2364"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-b","jufo-2","norway-1","poland-70","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Design & Test","raw_type":"journal-article"},{"id":"pmh:cdr.lib.unc.edu:6d570789c","doi":null,"is_oa":true,"landing_page_url":"https://cdr.lib.unc.edu/downloads/n009wd235","pdf_url":"https://doi.org/10.17615/xfx9-kf84","source":{"id":"https://openalex.org/S4306401075","display_name":"Carolina Digital Repository (University of North Carolina at Chapel Hill)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I114027177","host_organization_name":"University of North Carolina at Chapel Hill","host_organization_lineage":["https://openalex.org/I114027177"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Design and Test, 38(3)","raw_type":"Article"},{"id":"doi:10.17615/xfx9-kf84","doi":"https://doi.org/10.17615/xfx9-kf84","is_oa":true,"landing_page_url":"https://doi.org/10.17615/xfx9-kf84","pdf_url":null,"source":{"id":"https://openalex.org/S7407051488","display_name":"UNC Libraries","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"pmh:cdr.lib.unc.edu:6d570789c","doi":null,"is_oa":true,"landing_page_url":"https://cdr.lib.unc.edu/downloads/n009wd235","pdf_url":"https://doi.org/10.17615/xfx9-kf84","source":{"id":"https://openalex.org/S4306401075","display_name":"Carolina Digital Repository (University of North Carolina at Chapel Hill)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I114027177","host_organization_name":"University of North Carolina at Chapel Hill","host_organization_lineage":["https://openalex.org/I114027177"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Design and Test, 38(3)","raw_type":"Article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G2074413506","display_name":"SaTC: STARSS: Small: Tackling the Corner Cases: Finding Security Vulnerabilities in CPU Designs","funder_award_id":"1816637","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G240116754","display_name":"EAGER:  Identifying Security Critical Properties of a Processor","funder_award_id":"1651276","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320309327","display_name":"Google","ror":"https://ror.org/00njsd438"},{"id":"https://openalex.org/F4320332169","display_name":"Directorate for Computer and Information Science and Engineering","ror":"https://ror.org/025kzpk63"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3133602685.pdf","grobid_xml":"https://content.openalex.org/works/W3133602685.grobid-xml"},"referenced_works_count":8,"referenced_works":["https://openalex.org/W1710734607","https://openalex.org/W1917325995","https://openalex.org/W2036620903","https://openalex.org/W2074086222","https://openalex.org/W2119441703","https://openalex.org/W2605103081","https://openalex.org/W2781723315","https://openalex.org/W2883613460"],"related_works":["https://openalex.org/W2904305758","https://openalex.org/W4256445470","https://openalex.org/W7215028292","https://openalex.org/W2051990174","https://openalex.org/W6925226253","https://openalex.org/W2944138723","https://openalex.org/W4387444406","https://openalex.org/W1994367926","https://openalex.org/W7098870560","https://openalex.org/W4386763708"],"abstract_inverted_index":{"Editor's":[0],"notes:":[1],"This":[2],"article":[3],"presents":[4],"an":[5],"end-to-end":[6],"tool":[7],"that,":[8],"starting":[9],"from":[10],"a":[11,14],"processor":[12],"and":[13,37],"set":[15],"of":[16,35],"security-critical":[17],"invariants,":[18],"automatically":[19],"generates":[20],"exploits":[21],"to":[22],"help":[23],"designers":[24],"find":[25],"security":[26],"threats.":[27],"-Rosario":[28],"Cammarota,":[29],"Intel":[30],"Labs":[31],"-Francesco":[32],"Regazzoni,":[33],"University":[34],"Amsterdam":[36],"Universit\u00e0della":[38],"Svizzera":[39],"Italiana":[40]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2021-03-15T00:00:00"}