{"id":"https://openalex.org/W7170067274","doi":"https://doi.org/10.1109/access.2026.3716080","title":"DMA-Enhanced Firmware Analysis (DEFA): Dual-Mode DMA Tracking for ARM Cortex-M Firmware","display_name":"DMA-Enhanced Firmware Analysis (DEFA): Dual-Mode DMA Tracking for ARM Cortex-M Firmware","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7170067274","doi":"https://doi.org/10.1109/access.2026.3716080"},"language":"en","primary_location":{"id":"doi:10.1109/access.2026.3716080","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3716080","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3716080","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008484278","display_name":"P P Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I17145004","display_name":"Northwestern Polytechnical University","ror":"https://ror.org/01y0j0j86","country_code":"CN","type":"education","lineage":["https://openalex.org/I17145004"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Zhang","raw_affiliation_strings":["Northwestern Polytechnical University"],"raw_orcid":"https://orcid.org/0009-0000-9098-2076","affiliations":[{"raw_affiliation_string":"Northwestern Polytechnical University","institution_ids":["https://openalex.org/I17145004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026165169","display_name":"Shengbing Zhang","orcid":"https://orcid.org/0000-0002-2854-729X"},"institutions":[{"id":"https://openalex.org/I17145004","display_name":"Northwestern Polytechnical University","ror":"https://ror.org/01y0j0j86","country_code":"CN","type":"education","lineage":["https://openalex.org/I17145004"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shengbing Zhang","raw_affiliation_strings":["Northwestern Polytechnical University"],"raw_orcid":"https://orcid.org/0000-0002-2854-729X","affiliations":[{"raw_affiliation_string":"Northwestern Polytechnical University","institution_ids":["https://openalex.org/I17145004"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057260177","display_name":"Xiaoping Huang","orcid":"https://orcid.org/0000-0002-8918-519X"},"institutions":[{"id":"https://openalex.org/I17145004","display_name":"Northwestern Polytechnical University","ror":"https://ror.org/01y0j0j86","country_code":"CN","type":"education","lineage":["https://openalex.org/I17145004"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoping Huang","raw_affiliation_strings":["Northwestern Polytechnical University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northwestern Polytechnical University","institution_ids":["https://openalex.org/I17145004"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I17145004"],"apc_list":{"value":2075,"currency":"USD","value_usd":2075},"apc_paid":{"value":2075,"currency":"USD","value_usd":2075},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.80604581,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"113531","last_page":"113547"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.21860000491142273,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.21860000491142273,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10904","display_name":"Embedded Systems Design Techniques","score":0.14239999651908875,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.11980000138282776,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.9509999752044678},{"id":"https://openalex.org/keywords/tracking","display_name":"Tracking (education)","score":0.4641000032424927},{"id":"https://openalex.org/keywords/microcode","display_name":"Microcode","score":0.4465999901294708},{"id":"https://openalex.org/keywords/tracking-system","display_name":"Tracking system","score":0.3109999895095825}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.9509999752044678},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7615000009536743},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5730000138282776},{"id":"https://openalex.org/C2775936607","wikidata":"https://www.wikidata.org/wiki/Q466845","display_name":"Tracking (education)","level":2,"score":0.4641000032424927},{"id":"https://openalex.org/C22174128","wikidata":"https://www.wikidata.org/wiki/Q175869","display_name":"Microcode","level":2,"score":0.4465999901294708},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.3698999881744385},{"id":"https://openalex.org/C154586513","wikidata":"https://www.wikidata.org/wiki/Q4420972","display_name":"Tracking system","level":3,"score":0.3109999895095825},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2766000032424927},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.272599995136261},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.26829999685287476}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2026.3716080","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3716080","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:c8d8b5962124460687b80fa0ec6c9a31","is_oa":false,"landing_page_url":"https://doaj.org/article/c8d8b5962124460687b80fa0ec6c9a31","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 14, Pp 113531-113547 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3716080","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3716080","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Direct":[0],"Memory":[1],"Access":[2],"(DMA)":[3],"enhances":[4],"data":[5],"transmission":[6],"efficiency":[7,171],"in":[8],"embedded":[9,207],"firmware":[10,90,139,192],"but":[11],"introduces":[12],"significant":[13],"challenges":[14],"to":[15,19,109],"dynamic":[16,62,97],"analysis":[17,27,63,193,202],"due":[18],"its":[20],"CPU-bypassing":[21],"and":[22,47,79,82,131,195,205],"asynchronous":[23],"characteristics.":[24],"Existing":[25],"DMA-aware":[26],"approaches":[28],"rely":[29],"on":[30,135],"Hardware":[31],"Abstraction":[32],"Layer":[33],"(HAL)":[34],"source":[35],"code":[36],"availability":[37],"or":[38],"heuristic":[39],"inference,":[40],"suffering":[41],"from":[42],"limited":[43],"adaptability,":[44],"insufficient":[45],"precision,":[46],"high":[48],"performance":[49],"overhead.":[50],"This":[51],"paper":[52],"presents":[53],"DMA-Enhanced":[54],"Firmware":[55],"Analysis":[56],"(DEFA),":[57],"a":[58,119,197],"dedicated":[59],"framework":[60],"for":[61,88,125,158,200],"of":[64,114,179,189,203],"DMA-enabled":[65],"ARM":[66],"Cortex-M":[67],"firmware.":[68],"DEFA":[69,143,167,184],"integrates":[70],"dual-mode":[71],"DMA":[72,102,115,159,191],"channel":[73],"detection":[74],"combining":[75],"HAL":[76],"function":[77],"interception":[78],"register-level":[80],"monitoring,":[81],"achieves":[83,144],"automatic":[84],"MCU":[85,138,146],"model":[86],"identification":[87],"symbol-free":[89],"by":[91,118,172],"fusing":[92],"static":[93],"binary":[94],"features":[95],"with":[96,128,152,162],"execution":[98,170],"traces.":[99],"A":[100],"stateful":[101],"Transfer":[103],"Descriptor":[104],"Manager":[105],"(TDM)":[106],"is":[107],"designed":[108],"track":[110],"the":[111,163],"complete":[112],"lifecycle":[113],"transfers,":[116],"complemented":[117],"lightweight":[120],"memory":[121,181],"access":[122],"hooking":[123],"mechanism":[124],"seamless":[126],"integration":[127],"mainstream":[129],"fuzzers":[130],"emulators.":[132],"Comprehensive":[133],"evaluations":[134],"145":[136],"cross-vendor":[137],"samples":[140],"demonstrate":[141],"that":[142],"90.3%":[145],"recognition":[147],"accuracy":[148],"(micro-average;":[149],"95.2%":[150],"macro-average)":[151],"merely":[153],"1.4%":[154],"average":[155],"runtime":[156],"overhead":[157],"analysis.":[160],"Compared":[161],"state-of-the-art":[164],"tool":[165],"DICE,":[166],"improves":[168],"fuzzing":[169],"35.2%":[173],"while":[174],"detecting":[175],"an":[176],"equivalent":[177],"number":[178],"DMA-related":[180],"safety":[182],"violations.":[183],"effectively":[185],"overcomes":[186],"critical":[187],"limitations":[188],"existing":[190],"tools":[194],"provides":[196],"practical":[198],"solution":[199],"security":[201],"IoT":[204],"industrial":[206],"systems.":[208]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2026-07-23T00:00:00"}
