{"id":"https://openalex.org/W4387197103","doi":"https://doi.org/10.1109/tdsc.2023.3320675","title":"DUDE: Decryption, Unpacking, Deobfuscation, and Endian Conversion Framework for Embedded Devices Firmware","display_name":"DUDE: Decryption, Unpacking, Deobfuscation, and Endian Conversion Framework for Embedded Devices Firmware","publication_year":2023,"publication_date":"2023-09-29","ids":{"openalex":"https://openalex.org/W4387197103","doi":"https://doi.org/10.1109/tdsc.2023.3320675"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3320675","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3320675","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100777102","display_name":"Haider Abbas","orcid":"https://orcid.org/0000-0002-2437-4870"},"institutions":[{"id":"https://openalex.org/I929597975","display_name":"National University of Sciences and Technology","ror":"https://ror.org/03w2j5y17","country_code":"PK","type":"education","lineage":["https://openalex.org/I929597975"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Haider Abbas","raw_affiliation_strings":["National University of Sciences and Technology (NUST), Islamabad, Pakistan"],"raw_orcid":"https://orcid.org/0000-0002-2437-4870","affiliations":[{"raw_affiliation_string":"National University of Sciences and Technology (NUST), Islamabad, Pakistan","institution_ids":["https://openalex.org/I929597975"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114889084","display_name":"Muhammad Shahzad","orcid":"https://orcid.org/0009-0003-8027-7420"},"institutions":[{"id":"https://openalex.org/I929597975","display_name":"National University of Sciences and Technology","ror":"https://ror.org/03w2j5y17","country_code":"PK","type":"education","lineage":["https://openalex.org/I929597975"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Muhammad Shahzad","raw_affiliation_strings":["National University of Sciences and Technology (NUST), Islamabad, Pakistan"],"raw_orcid":"https://orcid.org/0009-0003-8027-7420","affiliations":[{"raw_affiliation_string":"National University of Sciences and Technology (NUST), Islamabad, Pakistan","institution_ids":["https://openalex.org/I929597975"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113012043","display_name":"Maliha Safdar","orcid":"https://orcid.org/0000-0001-7758-5092"},"institutions":[{"id":"https://openalex.org/I929597975","display_name":"National University of Sciences and Technology","ror":"https://ror.org/03w2j5y17","country_code":"PK","type":"education","lineage":["https://openalex.org/I929597975"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Maliha Safdar","raw_affiliation_strings":["National University of Sciences and Technology (NUST), Islamabad, Pakistan"],"raw_orcid":"https://orcid.org/0000-0001-7758-5092","affiliations":[{"raw_affiliation_string":"National University of Sciences and Technology (NUST), Islamabad, Pakistan","institution_ids":["https://openalex.org/I929597975"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026355063","display_name":"Ahmed Hemani","orcid":"https://orcid.org/0000-0003-0565-9376"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Ahmed Hemani","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden"],"raw_orcid":"https://orcid.org/0000-0003-0565-9376","affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.3479,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.54233365,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":"21","issue":"4","first_page":"2917","last_page":"2929"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/unpacking","display_name":"Unpacking","score":0.9679968357086182},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.9497226476669312},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8311244249343872},{"id":"https://openalex.org/keywords/vendor","display_name":"Vendor","score":0.6949700117111206},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.6783429384231567},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6729952692985535},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.5337817072868347},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5054633617401123},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2924885153770447}],"concepts":[{"id":"https://openalex.org/C2777256151","wikidata":"https://www.wikidata.org/wiki/Q7897273","display_name":"Unpacking","level":2,"score":0.9679968357086182},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.9497226476669312},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8311244249343872},{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.6949700117111206},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6783429384231567},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6729952692985535},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.5337817072868347},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5054633617401123},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2924885153770447},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3320675","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3320675","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.4000000059604645,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[{"id":"https://openalex.org/F6451829169","display_name":"Higher Education Commission Mauritius","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2980032325","https://openalex.org/W2042188247","https://openalex.org/W2017714611","https://openalex.org/W4224995949","https://openalex.org/W1992482086","https://openalex.org/W2385797406","https://openalex.org/W4398694690","https://openalex.org/W2608610227","https://openalex.org/W2024662052","https://openalex.org/W2527888910"],"abstract_inverted_index":{"Commercial-Off-The-Shelf":[0],"(COTS)":[1],"embedded":[2],"devices":[3],"rely":[4],"on":[5,204],"vendor-specific":[6],"firmware":[7,13,70,151,170,182],"to":[8,21,146],"perform":[9],"essential":[10],"tasks.":[11],"These":[12],"have":[14],"been":[15,38,138],"under":[16,71],"active":[17],"analysis":[18,143],"by":[19,159],"researchers":[20],"check":[22],"security":[23],"features":[24],"and":[25,50,76,99,133,144],"identify":[26],"possible":[27],"vendor":[28],"backdoors.":[29],"However,":[30],"consistently":[31],"unpacking":[32,157],"newly":[33],"created":[34],"filesystem":[35,66,109,165],"formats":[36,67,166],"has":[37,136],"exceptionally":[39],"challenging.":[40],"To":[41],"thwart":[42],"attempts":[43],"at":[44],"unpacking,":[45,97],"vendors":[46,186],"frequently":[47],"use":[48],"encryption":[49],"obfuscation":[51],"methods.":[52],"On":[53],"the":[54,73,95,131,147,154,161,191,197],"other":[55],"hand,":[56],"when":[57],"handling":[58],"encrypted,":[59],"obfuscated,":[60],"big":[61,105],"endian":[62,100,106,113],"cramfs,":[63],"or":[64],"custom":[65],"found":[68,168],"in":[69,94,169],"test,":[72],"available":[74,201],"literature":[75],"tools":[77,93,202],"are":[78],"insufficient.":[79],"This":[80,194],"study":[81],"introduces":[82],"DUDE,":[83],"an":[84],"automated":[85],"framework":[86,155],"that":[87],"provides":[88],"novel":[89],"functionalities,":[90],"outperforming":[91],"cutting-edge":[92],"decryption,":[96],"deobfuscation,":[98],"conversion":[101],"of":[102,149,163,180,199],"firmware.":[103],"For":[104],"compressed":[107],"romfs":[108],"formats,":[110],"DUDE":[111],"supports":[112,117],"conversion.":[114],"It":[115],"also":[116,137],"deobfuscating":[118],"obfuscated":[119],"signatures":[120],"for":[121,127,141],"successful":[122],"unpacking.":[123],"Moreover,":[124],"decryption":[125],"support":[126],"encrypted":[128],"binaries":[129,183],"from":[130,172,184],"D-Link":[132],"MOXA":[134],"series":[135],"added,":[139],"allowing":[140],"easier":[142],"access":[145],"contents":[148],"these":[150],"files.":[152],"Additionally,":[153],"offers":[156],"assistance":[158],"supporting":[160],"extraction":[162],"special":[164],"commonly":[167],"samples":[171],"various":[173],"vendors.":[174],"A":[175],"remarkable":[176],"78%":[177],"(1424":[178],"out":[179],"1814)":[181],"different":[185],"were":[187],"successfully":[188],"unpacked":[189],"using":[190],"suggested":[192],"framework.":[193],"performance":[195],"surpasses":[196],"capabilities":[198],"commercially":[200],"combined":[203],"a":[205],"single":[206],"platform.":[207]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}