{"id":"https://openalex.org/W2481831868","doi":"https://doi.org/10.1007/978-3-319-40667-1_4","title":"AVRAND: A Software-Based Defense Against Code Reuse Attacks for AVR Embedded Devices","display_name":"AVRAND: A Software-Based Defense Against Code Reuse Attacks for AVR Embedded Devices","publication_year":2016,"publication_date":"2016-01-01","ids":{"openalex":"https://openalex.org/W2481831868","doi":"https://doi.org/10.1007/978-3-319-40667-1_4","mag":"2481831868"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-319-40667-1_4","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-319-40667-1_4","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://kclpure.kcl.ac.uk/ws/files/96769599/2016dimva.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065221727","display_name":"Sergio Pastrana","orcid":"https://orcid.org/0000-0003-1036-6359"},"institutions":[{"id":"https://openalex.org/I50357001","display_name":"Universidad Carlos III de Madrid","ror":"https://ror.org/03ths8210","country_code":"ES","type":"education","lineage":["https://openalex.org/I50357001"]}],"countries":["ES"],"is_corresponding":true,"raw_author_name":"Sergio Pastrana","raw_affiliation_strings":["Department of Computer Science, University Carlos III de Madrid, Legan\u00e9s, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University Carlos III de Madrid, Legan\u00e9s, Spain","institution_ids":["https://openalex.org/I50357001"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070199150","display_name":"Juan Tapiador","orcid":"https://orcid.org/0000-0002-4573-3967"},"institutions":[{"id":"https://openalex.org/I50357001","display_name":"Universidad Carlos III de Madrid","ror":"https://ror.org/03ths8210","country_code":"ES","type":"education","lineage":["https://openalex.org/I50357001"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Juan Tapiador","raw_affiliation_strings":["Department of Computer Science, University Carlos III de Madrid, Legan\u00e9s, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University Carlos III de Madrid, Legan\u00e9s, Spain","institution_ids":["https://openalex.org/I50357001"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004037873","display_name":"Guillermo Su\u00e1rez\u2010Tangil","orcid":"https://orcid.org/0000-0002-0455-2553"},"institutions":[{"id":"https://openalex.org/I184558857","display_name":"Royal Holloway University of London","ror":"https://ror.org/04g2vpn86","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I184558857"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Guillermo Suarez-Tangil","raw_affiliation_strings":["Information Security Group, Royal Holloway University of London, Egham, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Security Group, Royal Holloway University of London, Egham, UK","institution_ids":["https://openalex.org/I184558857"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004222325","display_name":"Pedro Peris\u2010Lopez","orcid":"https://orcid.org/0000-0001-6943-0760"},"institutions":[{"id":"https://openalex.org/I50357001","display_name":"Universidad Carlos III de Madrid","ror":"https://ror.org/03ths8210","country_code":"ES","type":"education","lineage":["https://openalex.org/I50357001"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Pedro Peris-L\u00f3pez","raw_affiliation_strings":["Department of Computer Science, University Carlos III de Madrid, Legan\u00e9s, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University Carlos III de Madrid, Legan\u00e9s, Spain","institution_ids":["https://openalex.org/I50357001"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5065221727"],"corresponding_institution_ids":["https://openalex.org/I50357001"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":{"value":5000,"currency":"EUR","value_usd":5392},"fwci":1.7472,"has_fulltext":true,"cited_by_count":17,"citation_normalized_percentile":{"value":0.87669177,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"58","last_page":"77"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9861000180244446,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8355088233947754},{"id":"https://openalex.org/keywords/booting","display_name":"Booting","score":0.7854244709014893},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.7221865653991699},{"id":"https://openalex.org/keywords/code-reuse","display_name":"Code reuse","score":0.6837734580039978},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.6660947799682617},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5797366499900818},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5725691914558411},{"id":"https://openalex.org/keywords/microcode","display_name":"Microcode","score":0.5720068216323853},{"id":"https://openalex.org/keywords/microcontroller","display_name":"Microcontroller","score":0.5323320627212524},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5052040219306946},{"id":"https://openalex.org/keywords/dead-code","display_name":"Dead code","score":0.4983696937561035},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.49081334471702576},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4900552034378052},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.4743451178073883},{"id":"https://openalex.org/keywords/legacy-code","display_name":"Legacy code","score":0.42335325479507446},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.41063350439071655},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.39317065477371216},{"id":"https://openalex.org/keywords/code-generation","display_name":"Code generation","score":0.32035332918167114},{"id":"https://openalex.org/keywords/redundant-code","display_name":"Redundant code","score":0.2751675844192505},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.21470624208450317}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8355088233947754},{"id":"https://openalex.org/C504728807","wikidata":"https://www.wikidata.org/wiki/Q180256","display_name":"Booting","level":2,"score":0.7854244709014893},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.7221865653991699},{"id":"https://openalex.org/C2778583558","wikidata":"https://www.wikidata.org/wiki/Q771245","display_name":"Code reuse","level":3,"score":0.6837734580039978},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.6660947799682617},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5797366499900818},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5725691914558411},{"id":"https://openalex.org/C22174128","wikidata":"https://www.wikidata.org/wiki/Q175869","display_name":"Microcode","level":2,"score":0.5720068216323853},{"id":"https://openalex.org/C173018170","wikidata":"https://www.wikidata.org/wiki/Q165678","display_name":"Microcontroller","level":2,"score":0.5323320627212524},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5052040219306946},{"id":"https://openalex.org/C47434764","wikidata":"https://www.wikidata.org/wiki/Q1770035","display_name":"Dead code","level":5,"score":0.4983696937561035},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.49081334471702576},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4900552034378052},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.4743451178073883},{"id":"https://openalex.org/C85687889","wikidata":"https://www.wikidata.org/wiki/Q445962","display_name":"Legacy code","level":3,"score":0.42335325479507446},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.41063350439071655},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.39317065477371216},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.32035332918167114},{"id":"https://openalex.org/C151578736","wikidata":"https://www.wikidata.org/wiki/Q1251793","display_name":"Redundant code","level":4,"score":0.2751675844192505},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.21470624208450317},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/978-3-319-40667-1_4","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-319-40667-1_4","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},{"id":"pmh:oai:kclpure.kcl.ac.uk:publications/575e21cc-0306-4a92-9273-1b91bc16ccc1","is_oa":true,"landing_page_url":"https://kclpure.kcl.ac.uk/portal/en/publications/575e21cc-0306-4a92-9273-1b91bc16ccc1","pdf_url":"https://kclpure.kcl.ac.uk/ws/files/96769599/2016dimva.pdf","source":null,"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Pastrana , S , Tapiador , J , Suarez-Tangil , G & Peris Lopez , P 2016 , AVRAND : A Software-Based Defense Against Code Reuse Attacks for AVR Embedded Devices . in Int. Conf. on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA) . https://doi.org/10.1007/978-3-319-40667-1_4","raw_type":"contributionToPeriodical"}],"best_oa_location":{"id":"pmh:oai:kclpure.kcl.ac.uk:publications/575e21cc-0306-4a92-9273-1b91bc16ccc1","is_oa":true,"landing_page_url":"https://kclpure.kcl.ac.uk/portal/en/publications/575e21cc-0306-4a92-9273-1b91bc16ccc1","pdf_url":"https://kclpure.kcl.ac.uk/ws/files/96769599/2016dimva.pdf","source":null,"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Pastrana , S , Tapiador , J , Suarez-Tangil , G & Peris Lopez , P 2016 , AVRAND : A Software-Based Defense Against Code Reuse Attacks for AVR Embedded Devices . in Int. Conf. on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA) . https://doi.org/10.1007/978-3-319-40667-1_4","raw_type":"contributionToPeriodical"},"sustainable_development_goals":[{"score":0.6899999976158142,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G5653216463","display_name":"MobSec: Malware and Security in the Mobile Age","funder_award_id":"EP/L022710/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G8250054397","display_name":null,"funder_award_id":"EP/L022710/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2481831868.pdf"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W1534103258","https://openalex.org/W1545927878","https://openalex.org/W1571503777","https://openalex.org/W1605557845","https://openalex.org/W1691322864","https://openalex.org/W1963947298","https://openalex.org/W2033593513","https://openalex.org/W2059969702","https://openalex.org/W2065955975","https://openalex.org/W2066852506","https://openalex.org/W2089448621","https://openalex.org/W2114030344","https://openalex.org/W2117798902","https://openalex.org/W2135192994","https://openalex.org/W2141389113","https://openalex.org/W2153256720","https://openalex.org/W2158389625","https://openalex.org/W2159216827","https://openalex.org/W2180474751","https://openalex.org/W2301356482","https://openalex.org/W2505839656","https://openalex.org/W2566482806"],"related_works":["https://openalex.org/W2382065624","https://openalex.org/W2778802830","https://openalex.org/W2537903244","https://openalex.org/W1555552217","https://openalex.org/W2107254550","https://openalex.org/W2131183028","https://openalex.org/W4390667250","https://openalex.org/W2075830090","https://openalex.org/W2481831868","https://openalex.org/W2784876473"],"abstract_inverted_index":{"Code":[0],"reuse":[1,76],"attacks":[2,49,142],"are":[3,41,59],"advanced":[4],"exploitation":[5],"techniques":[6],"that":[7,82],"constitute":[8],"a":[9,18,74,102,136],"serious":[10],"threat":[11],"for":[12,61],"modern":[13],"systems.":[14],"They":[15],"profit":[16],"from":[17,32,92],"control":[19],"flow":[20],"hijacking":[21],"vulnerability":[22],"to":[23,46,139],"maliciously":[24],"execute":[25,88],"one":[26],"or":[27],"more":[28],"pieces":[29],"of":[30,56,110,122],"code":[31,52,75,90,112],"the":[33,93,111,119,123,144],"targeted":[34],"application.":[35],"ASLR":[36],"and":[37,95,126],"Control":[38],"Flow":[39],"Integrity":[40],"two":[42],"mechanisms":[43],"commonly":[44],"used":[45],"deter":[47],"automated":[48],"based":[50,105],"on":[51,106],"reuse.":[53],"Unfortunately,":[54],"none":[55],"these":[57],"solutions":[58],"suitable":[60],"modified":[62],"Harvard":[63],"architectures":[64],"such":[65],"as":[66],"AVR":[67,80],"microcontrollers.":[68],"In":[69],"this":[70],"work,":[71],"we":[72],"present":[73],"attack":[77],"against":[78,143],"embedded":[79,124],"devices":[81],"shows":[83],"how":[84],"an":[85],"adversary":[86],"can":[87],"arbitrary":[89],"reused":[91],"firmware":[94],"other":[96],"external":[97],"libraries.":[98],"We":[99,133],"then":[100],"propose":[101,135],"software-based":[103],"defense":[104],"fine-grained":[107],"random":[108],"permutations":[109],"memory.":[113],"Our":[114],"solution":[115],"is":[116],"installed":[117],"in":[118],"bootloader":[120],"section":[121],"device":[125,131],"thus":[127],"executes":[128],"during":[129],"every":[130],"reset.":[132],"also":[134],"self-obfuscation":[137],"technique":[138],"hinder":[140],"code-reuse":[141],"bootloader.":[145]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}