{"id":"https://openalex.org/W2999149195","doi":"https://doi.org/10.1109/tvlsi.2019.2961358","title":"HarTBleed: Using Hardware Trojans for Data Leakage Exploits","display_name":"HarTBleed: Using Hardware Trojans for Data Leakage Exploits","publication_year":2020,"publication_date":"2020-01-14","ids":{"openalex":"https://openalex.org/W2999149195","doi":"https://doi.org/10.1109/tvlsi.2019.2961358","mag":"2999149195"},"language":"en","primary_location":{"id":"doi:10.1109/tvlsi.2019.2961358","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tvlsi.2019.2961358","pdf_url":null,"source":{"id":"https://openalex.org/S37538908","display_name":"IEEE Transactions on Very Large Scale Integration (VLSI) Systems","issn_l":"1063-8210","issn":["1063-8210","1557-9999"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Very Large Scale Integration (VLSI) Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053388431","display_name":"Asmit De","orcid":"https://orcid.org/0000-0002-8175-1337"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Asmit De","raw_affiliation_strings":["School of Electrical Engineering and Computer Science, The Pennsylvania State University, University Park, USA"],"raw_orcid":"https://orcid.org/0000-0002-8175-1337","affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, The Pennsylvania State University, University Park, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083577016","display_name":"Mohammad Nasim Imtiaz Khan","orcid":"https://orcid.org/0000-0002-4531-5191"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohammad Nasim Imtiaz Khan","raw_affiliation_strings":["School of Electrical Engineering and Computer Science, The Pennsylvania State University, University Park, USA"],"raw_orcid":"https://orcid.org/0000-0002-4531-5191","affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, The Pennsylvania State University, University Park, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030090684","display_name":"Karthikeyan Nagarajan","orcid":"https://orcid.org/0000-0002-0518-4940"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Karthikeyan Nagarajan","raw_affiliation_strings":["School of Electrical Engineering and Computer Science, The Pennsylvania State University, University Park, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, The Pennsylvania State University, University Park, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085567454","display_name":"Swaroop Ghosh","orcid":"https://orcid.org/0000-0001-8753-490X"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Swaroop Ghosh","raw_affiliation_strings":["School of Electrical Engineering and Computer Science, The Pennsylvania State University, University Park, USA"],"raw_orcid":"https://orcid.org/0000-0001-8753-490X","affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, The Pennsylvania State University, University Park, USA","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I130769515"],"apc_list":null,"apc_paid":null,"fwci":1.8762,"has_fulltext":false,"cited_by_count":25,"citation_normalized_percentile":{"value":0.88235171,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"28","issue":"4","first_page":"968","last_page":"979"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/translation-lookaside-buffer","display_name":"Translation lookaside buffer","score":0.790360689163208},{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.7826277613639832},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7614163756370544},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7135314345359802},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.6708237528800964},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.5480849146842957},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.5355745553970337},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5127497911453247},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.47347795963287354},{"id":"https://openalex.org/keywords/hardware-trojan","display_name":"Hardware Trojan","score":0.46125614643096924},{"id":"https://openalex.org/keywords/virtual-memory","display_name":"Virtual memory","score":0.4162744879722595},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.39239412546157837},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.38149768114089966},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3427474796772003},{"id":"https://openalex.org/keywords/physical-address","display_name":"Physical address","score":0.20007523894309998},{"id":"https://openalex.org/keywords/memory-management","display_name":"Memory management","score":0.1715807020664215}],"concepts":[{"id":"https://openalex.org/C116007543","wikidata":"https://www.wikidata.org/wiki/Q1071403","display_name":"Translation lookaside buffer","level":4,"score":0.790360689163208},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.7826277613639832},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7614163756370544},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7135314345359802},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.6708237528800964},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.5480849146842957},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.5355745553970337},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5127497911453247},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.47347795963287354},{"id":"https://openalex.org/C2780873074","wikidata":"https://www.wikidata.org/wiki/Q5656397","display_name":"Hardware Trojan","level":3,"score":0.46125614643096924},{"id":"https://openalex.org/C76399640","wikidata":"https://www.wikidata.org/wiki/Q189401","display_name":"Virtual memory","level":4,"score":0.4162744879722595},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.39239412546157837},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.38149768114089966},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3427474796772003},{"id":"https://openalex.org/C41036726","wikidata":"https://www.wikidata.org/wiki/Q844824","display_name":"Physical address","level":3,"score":0.20007523894309998},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.1715807020664215},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0},{"id":"https://openalex.org/C136085584","wikidata":"https://www.wikidata.org/wiki/Q910289","display_name":"Overlay","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tvlsi.2019.2961358","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tvlsi.2019.2961358","pdf_url":null,"source":{"id":"https://openalex.org/S37538908","display_name":"IEEE Transactions on Very Large Scale Integration (VLSI) Systems","issn_l":"1063-8210","issn":["1063-8210","1557-9999"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Very Large Scale Integration (VLSI) Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5099999904632568}],"awards":[{"id":"https://openalex.org/G1372786255","display_name":null,"funder_award_id":"DGE-1723687","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G1546291444","display_name":null,"funder_award_id":"#D15AP00089","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G1645627576","display_name":null,"funder_award_id":"2727.001","funder_id":"https://openalex.org/F4320306087","funder_display_name":"Semiconductor Research Corporation"},{"id":"https://openalex.org/G2006110114","display_name":null,"funder_award_id":"CNS1722557","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G4895970034","display_name":null,"funder_award_id":"CCF-1718474","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G8572725027","display_name":null,"funder_award_id":"DGE-1821766","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"}],"funders":[{"id":"https://openalex.org/F4320306087","display_name":"Semiconductor Research Corporation","ror":"https://ror.org/047z4n946"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320335353","display_name":"National Science Foundation of Sri Lanka","ror":"https://ror.org/010xaa060"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W83507793","https://openalex.org/W1275041561","https://openalex.org/W1595368737","https://openalex.org/W1974232202","https://openalex.org/W1977024275","https://openalex.org/W2014828568","https://openalex.org/W2098536553","https://openalex.org/W2112736324","https://openalex.org/W2125129715","https://openalex.org/W2145937629","https://openalex.org/W2147657366","https://openalex.org/W2157116240","https://openalex.org/W2157587823","https://openalex.org/W2159059513","https://openalex.org/W2161370060","https://openalex.org/W2161998562","https://openalex.org/W2164839440","https://openalex.org/W2430656512","https://openalex.org/W2511192821","https://openalex.org/W2529582363","https://openalex.org/W2540422252","https://openalex.org/W2562796192","https://openalex.org/W2626107774","https://openalex.org/W2664885055","https://openalex.org/W2751193908","https://openalex.org/W2768690687","https://openalex.org/W2807535087","https://openalex.org/W2883613460","https://openalex.org/W2890541097","https://openalex.org/W2945180328","https://openalex.org/W2951100468","https://openalex.org/W2963311060","https://openalex.org/W6603425920","https://openalex.org/W6628305222","https://openalex.org/W6674690352","https://openalex.org/W6753443810","https://openalex.org/W6762866504"],"related_works":["https://openalex.org/W4385434494","https://openalex.org/W3159333627","https://openalex.org/W3004467197","https://openalex.org/W1500594134","https://openalex.org/W2091750459","https://openalex.org/W4328053173","https://openalex.org/W2999465529","https://openalex.org/W3084939900","https://openalex.org/W2382172865","https://openalex.org/W1526642037"],"abstract_inverted_index":{"Data":[0],"and":[1,42,56,66,92],"information":[2,135],"leakage":[3,14,61],"is":[4,90,191,215],"an":[5,218],"important":[6],"security":[7,49],"concern":[8],"in":[9,21,114,180,226],"current":[10],"systems.":[11],"Several":[12],"data":[13,31,40,52,179],"prevention":[15],"(DLP)":[16],"techniques":[17],"have":[18],"been":[19],"proposed":[20,188],"the":[22,48,51,54,78,86,115,127,137,145,154,187,223,227],"literature":[23],"to":[24,38,46,123,132,160,174,177],"prevent":[25],"external":[26],"as":[27,29,64],"well":[28],"internal":[30],"leakage.":[32],"Most":[33],"of":[34,50,104,126,140,147,157,204],"these":[35,82],"solutions":[36,83],"try":[37],"trace":[39],"flow":[41],"perform":[43],"privilege":[44],"checks":[45],"ensure":[47],"at":[53],"software":[55,73],"system":[57,105],"level.":[58],"Architecture":[59],"level":[60],"vulnerabilities":[62],"such":[63],"Spectre":[65],"Meltdown":[67],"can":[68,129],"be":[69,130],"mitigated":[70],"by":[71,76,221],"performance-expensive":[72],"patches":[74],"or":[75,196],"modifying":[77],"architecture":[79],"itself.":[80],"However,":[81],"assume":[84],"that":[85,119,152,165,186],"underlying":[87],"hardware":[88,108],"platform":[89],"secure":[91],"free":[93],"from":[94,136],"tampering.":[95],"In":[96],"this":[97],"article,":[98],"we":[99],"present":[100],"HarTBleed,":[101],"a":[102,111,141,148,162,167,201],"class":[103],"attacks":[106,120],"involving":[107],"compromised":[109],"with":[110],"Trojan":[112,128,150,163,189,224],"embedded":[113],"CPU.":[116],"We":[117,143],"show":[118],"crafted":[121],"specifically":[122],"make":[124],"use":[125,146],"used":[131],"obtain":[133],"sensitive":[134,178],"address":[138],"space":[139],"process.":[142],"propose":[144],"capacitor-based":[149],"trigger":[151,190],"exploits":[153],"virtual":[155],"addressing":[156],"L1":[158],"cache":[159],"activate":[161],"payload":[164],"resets":[166],"target":[168],"translation":[169],"lookaside":[170],"buffer":[171],"(TLB)":[172],"entry":[173],"maliciously":[175],"map":[176],"memory.":[181],"Extensive":[182],"circuit":[183],"simulation":[184],"indicates":[185],"not":[192],"activated":[193],"during":[194],"test":[195],"normal":[197],"operation":[198],"even":[199],"under":[200],"wide":[202],"range":[203],"process/temperature":[205],"conditions.":[206],"Therefore,":[207],"it":[208],"remains":[209],"undetected.":[210],"A":[211],"successful":[212],"HarTBleed-based":[213],"exploit":[214],"demonstrated":[216],"using":[217],"attack":[219],"code":[220],"modeling":[222],"effects":[225],"GEM5":[228],"simulator.":[229]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":2}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}