{"id":"https://openalex.org/W4301367282","doi":"https://doi.org/10.29007/jp9w","title":"Combining Static Analysis and Dynamic Symbolic Execution in a Toolchain to detect Fault Injection Vulnerabilities","display_name":"Combining Static Analysis and Dynamic Symbolic Execution in a Toolchain to detect Fault Injection Vulnerabilities","publication_year":2022,"publication_date":"2022-10-04","ids":{"openalex":"https://openalex.org/W4301367282","doi":"https://doi.org/10.29007/jp9w"},"language":"en","primary_location":{"id":"doi:10.29007/jp9w","doi":"https://doi.org/10.29007/jp9w","is_oa":true,"landing_page_url":"https://doi.org/10.29007/jp9w","pdf_url":"https://easychair.org/publications/open/Z6bp","source":{"id":"https://openalex.org/S4220651395","display_name":"EPiC series in computing","issn_l":"2398-7340","issn":["2398-7340"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EPiC Series in Computing","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://easychair.org/publications/open/Z6bp","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5048699552","display_name":"Guilhem Lacombe","orcid":"https://orcid.org/0009-0008-8327-626X","observed_orcids":["https://orcid.org/0009-0008-8327-626X"]},"institutions":[{"id":"https://openalex.org/I4210156361","display_name":"Verimag","ror":"https://ror.org/05afmzm11","country_code":"FR","type":"facility","lineage":["https://openalex.org/I106785703","https://openalex.org/I1294671590","https://openalex.org/I4210156361","https://openalex.org/I4210159245","https://openalex.org/I899635006"]},{"id":"https://openalex.org/I899635006","display_name":"Universit\u00e9 Grenoble Alpes","ror":"https://ror.org/02rx3b187","country_code":"FR","type":"education","lineage":["https://openalex.org/I899635006"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Guilhem Lacombe","raw_affiliation_strings":["Universit\u00e9 Grenoble Alpes, Grenoble, France","Verimag, Grenoble, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universit\u00e9 Grenoble Alpes, Grenoble, France","institution_ids":["https://openalex.org/I899635006"]},{"raw_affiliation_string":"Verimag, Grenoble, France","institution_ids":["https://openalex.org/I4210156361"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069853137","display_name":"David F\u00e9liot","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I2738703131","display_name":"Commissariat \u00e0 l'\u00c9nergie Atomique et aux \u00c9nergies Alternatives","ror":"https://ror.org/00jjx8s55","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131"]},{"id":"https://openalex.org/I3020098449","display_name":"CEA Grenoble","ror":"https://ror.org/02mg6n827","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131","https://openalex.org/I3020098449"]},{"id":"https://openalex.org/I4210150049","display_name":"Laboratoire d'\u00c9lectronique des Technologies de l'Information","ror":"https://ror.org/04mf0wv34","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131","https://openalex.org/I4210117989","https://openalex.org/I4210150049"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"David F\u00e9liot","raw_affiliation_strings":["CEA Leti CESTI, Grenoble, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CEA Leti CESTI, Grenoble, France","institution_ids":["https://openalex.org/I2738703131","https://openalex.org/I3020098449","https://openalex.org/I4210150049"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049478891","display_name":"Etienne Boespflug","orcid":"https://orcid.org/0000-0003-2821-5209","observed_orcids":["https://orcid.org/0000-0003-2821-5209"]},"institutions":[{"id":"https://openalex.org/I4210156361","display_name":"Verimag","ror":"https://ror.org/05afmzm11","country_code":"FR","type":"facility","lineage":["https://openalex.org/I106785703","https://openalex.org/I1294671590","https://openalex.org/I4210156361","https://openalex.org/I4210159245","https://openalex.org/I899635006"]},{"id":"https://openalex.org/I899635006","display_name":"Universit\u00e9 Grenoble Alpes","ror":"https://ror.org/02rx3b187","country_code":"FR","type":"education","lineage":["https://openalex.org/I899635006"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Etienne Boespflug","raw_affiliation_strings":["Universit\u00e9 Grenoble Alpes, Grenoble, France","Verimag, Grenoble, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universit\u00e9 Grenoble Alpes, Grenoble, France","institution_ids":["https://openalex.org/I899635006"]},{"raw_affiliation_string":"Verimag, Grenoble, France","institution_ids":["https://openalex.org/I4210156361"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007466998","display_name":"Marie-Laure Potet","orcid":"https://orcid.org/0000-0002-7070-6290","observed_orcids":["https://orcid.org/0000-0002-7070-6290"]},"institutions":[{"id":"https://openalex.org/I4210156361","display_name":"Verimag","ror":"https://ror.org/05afmzm11","country_code":"FR","type":"facility","lineage":["https://openalex.org/I106785703","https://openalex.org/I1294671590","https://openalex.org/I4210156361","https://openalex.org/I4210159245","https://openalex.org/I899635006"]},{"id":"https://openalex.org/I899635006","display_name":"Universit\u00e9 Grenoble Alpes","ror":"https://ror.org/02rx3b187","country_code":"FR","type":"education","lineage":["https://openalex.org/I899635006"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Marie-Laure Potet","raw_affiliation_strings":["Universit\u00e9 Grenoble Alpes, Grenoble, France","Verimag, Grenoble, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universit\u00e9 Grenoble Alpes, Grenoble, France","institution_ids":["https://openalex.org/I899635006"]},{"raw_affiliation_string":"Verimag, Grenoble, France","institution_ids":["https://openalex.org/I4210156361"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5278,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.58937406,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":95},"biblio":{"volume":"87","issue":null,"first_page":"1","last_page":""},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.8422999978065491,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.8422999978065491,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0908999964594841,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.04699999839067459,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fault-injection-attacks","display_name":"fault injection attacks","score":0.9089999794960022},{"id":"https://openalex.org/keywords/static-analysis","display_name":"static analysis","score":0.6980000138282776},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"symbolic execution","score":0.8659999966621399},{"id":"https://openalex.org/keywords/dynamic-symbolic-execution","display_name":"dynamic symbolic execution","score":0.7570000290870667},{"id":"https://openalex.org/keywords/embedded-systems-security","display_name":"embedded systems security","score":0.6029999852180481},{"id":"https://openalex.org/keywords/frama-c","display_name":"Frama-C","score":0.9480000138282776},{"id":"https://openalex.org/keywords/klee","display_name":"KLEE","score":0.9940000176429749}],"concepts":[{"id":"https://openalex.org/C2777062904","wikidata":"https://www.wikidata.org/wiki/Q545406","display_name":"Toolchain","level":3,"score":0.9672412872314453},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8668656945228577},{"id":"https://openalex.org/C2775928411","wikidata":"https://www.wikidata.org/wiki/Q2041312","display_name":"Fault injection","level":3,"score":0.7724835872650146},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.6579778790473938},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5968416929244995},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.4739660918712616},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.46173179149627686},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.43113577365875244},{"id":"https://openalex.org/C2989134064","wikidata":"https://www.wikidata.org/wiki/Q288510","display_name":"Execution time","level":2,"score":0.4279242753982544},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.4259500801563263},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.41449329257011414},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.41321492195129395},{"id":"https://openalex.org/C200130814","wikidata":"https://www.wikidata.org/wiki/Q362858","display_name":"Worst-case execution time","level":3,"score":0.41216063499450684},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.38856953382492065},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3768719434738159},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.37515726685523987},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.23480993509292603},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.22271931171417236},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.29007/jp9w","doi":"https://doi.org/10.29007/jp9w","is_oa":true,"landing_page_url":"https://doi.org/10.29007/jp9w","pdf_url":"https://easychair.org/publications/open/Z6bp","source":{"id":"https://openalex.org/S4220651395","display_name":"EPiC series in computing","issn_l":"2398-7340","issn":["2398-7340"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EPiC Series in Computing","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:cea-03499614v1","doi":null,"is_oa":true,"landing_page_url":"https://cea.hal.science/cea-03499614","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405252976","host_organization_name":"Centre pour la Communication Scientifique Directe","host_organization_lineage":["https://openalex.org/I4405252976"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"PROOFS WORKSHOP (SECURITY PROOFS FOR EMBEDDED SYSTEMS), Sep 2021, Beijing, China","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.29007/jp9w","doi":"https://doi.org/10.29007/jp9w","is_oa":true,"landing_page_url":"https://doi.org/10.29007/jp9w","pdf_url":"https://easychair.org/publications/open/Z6bp","source":{"id":"https://openalex.org/S4220651395","display_name":"EPiC series in computing","issn_l":"2398-7340","issn":["2398-7340"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EPiC Series in Computing","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G2121614283","display_name":null,"funder_award_id":"IDEX-02","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"},{"id":"https://openalex.org/G292453335","display_name":null,"funder_award_id":"ANR\u201015\u2010IDEX\u201002","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"}],"funders":[{"id":"https://openalex.org/F4320320883","display_name":"Agence Nationale de la Recherche","ror":"https://ror.org/00rbzpz17"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4301367282.pdf","grobid_xml":"https://content.openalex.org/works/W4301367282.grobid-xml"},"referenced_works_count":20,"referenced_works":["https://openalex.org/W116480387","https://openalex.org/W138282132","https://openalex.org/W780543721","https://openalex.org/W1575308494","https://openalex.org/W1710734607","https://openalex.org/W1964060567","https://openalex.org/W1993255342","https://openalex.org/W2002003432","https://openalex.org/W2069493212","https://openalex.org/W2092627953","https://openalex.org/W2111725598","https://openalex.org/W2490955677","https://openalex.org/W2569221827","https://openalex.org/W2751658612","https://openalex.org/W2775257084","https://openalex.org/W3094287620","https://openalex.org/W3160978791","https://openalex.org/W3175328917","https://openalex.org/W4245276998","https://openalex.org/W6676580207"],"related_works":["https://openalex.org/W4291700966","https://openalex.org/W7066014491","https://openalex.org/W7165886740","https://openalex.org/W7165944372","https://openalex.org/W7162277168","https://openalex.org/W4324118163","https://openalex.org/W3111134937","https://openalex.org/W3157704946","https://openalex.org/W4353080000","https://openalex.org/W4366078034"],"abstract_inverted_index":{"Certification":[0],"through":[1],"auditing":[2],"allows":[3],"to":[4,35,44,109,116,127,143,152,163],"ensure":[5],"that":[6],"critical":[7],"embedded":[8],"systems":[9],"are":[10,41,60],"secure.":[11],"This":[12,24,147],"entails":[13],"reviewing":[14],"their":[15,133],"cryptographic":[16],"components":[17],"and":[18,37,55,79,123,131,157,177,179],"checking":[19],"for":[20],"dangerous":[21],"execution":[22,85],"paths.":[23,146],"latter":[25],"task":[26],"requires":[27],"the":[28,48,51,58,68,81,102,111,149,187],"use":[29,45,121],"of":[30,50,57,83,104,191],"specialized":[31],"tools":[32],"which":[33,96],"allow":[34],"explore":[36],"replay":[38],"executions":[39],"but":[40],"also":[42],"difficult":[43],"effectively":[46],"within":[47],"context":[49],"audit,":[52],"where":[53],"time":[54],"knowledge":[56],"code":[59],"limited.":[61],"Fault":[62],"analysis":[63,126],"is":[64,140,155,169],"especially":[65],"tricky":[66],"as":[67],"attacker":[69],"may":[70],"actively":[71],"influence":[72],"execution,":[73],"rendering":[74],"some":[75,117],"common":[76],"methods":[77,159],"unusable":[78],"increasing":[80],"number":[82,103],"possible":[84],"paths":[86],"exponentially.":[87],"In":[88],"this":[89],"work,":[90],"we":[91],"present":[92],"a":[93,172,183],"new":[94],"method":[95,139,168],"mitigates":[97],"these":[98],"issues":[99],"by":[100,186],"reducing":[101],"fault":[105],"injection":[106,129],"points":[107,130],"considered":[108],"only":[110],"most":[112],"relevant":[113],"ones":[114],"relatively":[115],"security":[118],"properties.":[119],"We":[120],"fast":[122],"robust":[124],"static":[125],"detect":[128],"assert":[132],"impactfulness.":[134],"A":[135],"more":[136],"precise":[137],"dynamic/symbolic":[138],"then":[141],"employed":[142],"validate":[144],"attack":[145],"way":[148],"insight":[150],"required":[151],"find":[153],"attacks":[154],"reduced":[156],"dynamic":[158],"can":[160],"better":[161],"scale":[162],"realistically":[164],"sized":[165],"programs.":[166],"Our":[167],"implemented":[170],"into":[171],"toolchain":[173],"based":[174],"on":[175,181],"Frama-C":[176],"KLEE":[178],"validated":[180],"WooKey,":[182],"case-study":[184],"proposed":[185],"National":[188],"Cybersecurity":[189],"Agency":[190],"France.":[192]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2}],"updated_date":"2026-10-30T12:39:25.321706","created_date":"2022-10-05T00:00:00"}