{"id":"https://openalex.org/W4386078206","doi":"https://doi.org/10.1109/tdsc.2023.3307430","title":"SaTC: Shared-Keyword Aware Taint Checking for Detecting Bugs in Embedded Systems","display_name":"SaTC: Shared-Keyword Aware Taint Checking for Detecting Bugs in Embedded Systems","publication_year":2023,"publication_date":"2023-08-22","ids":{"openalex":"https://openalex.org/W4386078206","doi":"https://doi.org/10.1109/tdsc.2023.3307430"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3307430","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3307430","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100621400","display_name":"Libo Chen","orcid":"https://orcid.org/0000-0003-3236-4805"},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Libo Chen","raw_affiliation_strings":["School of Cyber Science and Technology, Shandong University, Qingdao, China"],"raw_orcid":"https://orcid.org/0000-0003-3236-4805","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Shandong University, Qingdao, China","institution_ids":["https://openalex.org/I80143920"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101846444","display_name":"Yanhao Wang","orcid":"https://orcid.org/0000-0002-6990-2972"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yanhao Wang","raw_affiliation_strings":["QI-ANXIN Technology Research Institute, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-6990-2972","affiliations":[{"raw_affiliation_string":"QI-ANXIN Technology Research Institute, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092676626","display_name":"Jiaqi Linghu","orcid":"https://orcid.org/0009-0007-9289-0774"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiaqi Linghu","raw_affiliation_strings":["QI-ANXIN Technology Research Institute, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0007-9289-0774","affiliations":[{"raw_affiliation_string":"QI-ANXIN Technology Research Institute, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032372397","display_name":"Qinsheng Hou","orcid":"https://orcid.org/0000-0002-1119-4766"},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qinsheng Hou","raw_affiliation_strings":["School of Cyber Science and Technology, Shandong University, Qingdao, China"],"raw_orcid":"https://orcid.org/0000-0002-1119-4766","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Shandong University, Qingdao, China","institution_ids":["https://openalex.org/I80143920"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059175638","display_name":"Quanpu Cai","orcid":"https://orcid.org/0000-0002-5139-6100"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Quanpu Cai","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-5139-6100","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084460856","display_name":"Shanqing Guo","orcid":"https://orcid.org/0000-0003-3367-0951"},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shanqing Guo","raw_affiliation_strings":["School of Cyber Science and Technology, Shandong University, Qingdao, China"],"raw_orcid":"https://orcid.org/0000-0003-3367-0951","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Shandong University, Qingdao, China","institution_ids":["https://openalex.org/I80143920"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062829885","display_name":"Zhi Xue","orcid":"https://orcid.org/0000-0003-2875-304X"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhi Xue","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-2875-304X","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.3479,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.53249759,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":"21","issue":"4","first_page":"2421","last_page":"2433"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9053118228912354},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.6152869462966919},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.6136847734451294},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5301317572593689},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5281293988227844},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4914058446884155},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4909656345844269},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.42415621876716614},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.36862099170684814},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.2569110095500946},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.22147253155708313},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1784103512763977}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9053118228912354},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.6152869462966919},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.6136847734451294},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5301317572593689},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5281293988227844},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4914058446884155},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4909656345844269},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.42415621876716614},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.36862099170684814},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2569110095500946},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.22147253155708313},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1784103512763977},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3307430","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3307430","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1738542756","display_name":null,"funder_award_id":"ZR2021LZH007","funder_id":"https://openalex.org/F4320324174","funder_display_name":"Natural Science Foundation of Shandong Province"},{"id":"https://openalex.org/G97583977","display_name":null,"funder_award_id":"62372297","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320324174","display_name":"Natural Science Foundation of Shandong Province","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W2043118292","https://openalex.org/W2091939272","https://openalex.org/W2138788987","https://openalex.org/W2180970301","https://openalex.org/W2293605433","https://openalex.org/W2514974017","https://openalex.org/W2576376563","https://openalex.org/W2771524937","https://openalex.org/W2773898581","https://openalex.org/W2791018263","https://openalex.org/W2955014922","https://openalex.org/W2982374693","https://openalex.org/W2989119476","https://openalex.org/W2989837574","https://openalex.org/W2999227841","https://openalex.org/W3015383024","https://openalex.org/W3111743984","https://openalex.org/W3155102819","https://openalex.org/W4224316713","https://openalex.org/W4240951837","https://openalex.org/W6636991409","https://openalex.org/W6675416627","https://openalex.org/W6766830175"],"related_works":["https://openalex.org/W4391761545","https://openalex.org/W4378373752","https://openalex.org/W3084814329","https://openalex.org/W1526521547","https://openalex.org/W4385624297","https://openalex.org/W3180981818","https://openalex.org/W4247881240","https://openalex.org/W2007388836","https://openalex.org/W4388023871","https://openalex.org/W2356515587"],"abstract_inverted_index":{"IoT":[0],"devices":[1],"have":[2,53],"brought":[3],"invaluable":[4],"convenience":[5],"to":[6,71,102,117,135,173],"our":[7],"daily":[8],"life.":[9],"However,":[10],"their":[11,28],"pervasiveness":[12],"also":[13],"amplifies":[14],"the":[15,112,122,126,140,174,184],"impact":[16],"of":[17,23,139,149,167],"security":[18,74],"vulnerabilities.":[19],"Many":[20],"widespread":[21],"vulnerabilities":[22,75],"embedded":[24,81,197],"systems":[25],"reside":[26],"in":[27,76,121,183,193,196],"vulnerable":[29],"border":[30,44,77,91],"services.":[31],"Unfortunately,":[32],"existing":[33],"vulnerability":[34],"detection":[35],"methods":[36],"can":[37],"neither":[38],"effectively":[39,72],"nor":[40],"efficiently":[41],"analyze":[42],"such":[43],"services:":[45],"they":[46],"either":[47],"introduce":[48],"heavy":[49],"execution":[50],"overheads":[51],"or":[52],"many":[54],"false":[55],"positives":[56],"and":[57,99,114,151],"negatives.":[58],"In":[59],"this":[60],"paper,":[61],"we":[62,107,130],"propose":[63],"a":[64,147],"novel":[65],"static":[66],"taint":[67],"checking":[68],"solution,":[69],"SaTC,":[70],"detect":[73,136],"services":[78],"provided":[79],"by":[80],"devices.":[82],"Our":[83],"key":[84],"insight":[85],"is":[86,191],"that":[87,189],"string":[88],"literals":[89],"on":[90,154],"interfaces":[92],"are":[93],"commonly":[94],"shared":[95],"between":[96],"front-end":[97,113],"files":[98],"back-end":[100],"binaries":[101],"encode":[103],"user":[104,142],"input.":[105],"Thus,":[106],"extract":[108],"common":[109],"keywords":[110],"from":[111,158],"use":[115],"them":[116],"locate":[118],"reference":[119],"points":[120],"back-end,":[123],"which":[124,168],"indicate":[125],"input":[127,143],"entry.":[128],"Then,":[129],"apply":[131],"targeted":[132],"data-flow":[133],"analysis":[134],"dangerous":[137],"uses":[138],"untrusted":[141],"accurately.":[144],"We":[145],"implemented":[146],"prototype":[148],"SaTC":[150,162,178,190],"evaluated":[152],"it":[153],"39":[155],"firmware":[156],"samples":[157],"six":[159],"popular":[160],"vendors.":[161],"discovered":[163],"36":[164],"unknown":[165],"bugs,":[166],"CVE/CNVD/PSV":[169],"confirms":[170],"33.":[171],"Compared":[172],"state-of-the-art":[175],"tool":[176],"KARONTE,":[177],"found":[179],"significantly":[180],"more":[181],"bugs":[182,195],"test":[185],"set.":[186],"It":[187],"shows":[188],"effective":[192],"discovering":[194],"systems.":[198]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}