{"id":"https://openalex.org/W2986666149","doi":"https://doi.org/10.1145/3319535.3354197","title":"Hardware-Backed Heist","display_name":"Hardware-Backed Heist","publication_year":2019,"publication_date":"2019-11-06","ids":{"openalex":"https://openalex.org/W2986666149","doi":"https://doi.org/10.1145/3319535.3354197","mag":"2986666149"},"language":"en","primary_location":{"id":"doi:10.1145/3319535.3354197","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3319535.3354197","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022789588","display_name":"Keegan Ryan","orcid":"https://orcid.org/0000-0001-5846-2046"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Keegan Ryan","raw_affiliation_strings":["University of California, San Diego &amp; NCC Group, La Jolla, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, San Diego &amp; NCC Group, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5022789588"],"corresponding_institution_ids":["https://openalex.org/I36258959"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":65,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"181","last_page":"194"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8679832816123962},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.5069999694824219},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5020148754119873},{"id":"https://openalex.org/keywords/hardware-security-module","display_name":"Hardware security module","score":0.4837743937969208},{"id":"https://openalex.org/keywords/arm-architecture","display_name":"ARM architecture","score":0.4690319299697876},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.461603581905365},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4440199136734009},{"id":"https://openalex.org/keywords/information-sensitivity","display_name":"Information sensitivity","score":0.42006027698516846},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.359042763710022},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.35884857177734375},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.353441059589386}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8679832816123962},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.5069999694824219},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5020148754119873},{"id":"https://openalex.org/C39217717","wikidata":"https://www.wikidata.org/wiki/Q1432354","display_name":"Hardware security module","level":3,"score":0.4837743937969208},{"id":"https://openalex.org/C26771161","wikidata":"https://www.wikidata.org/wiki/Q16980","display_name":"ARM architecture","level":2,"score":0.4690319299697876},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.461603581905365},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4440199136734009},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.42006027698516846},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.359042763710022},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.35884857177734375},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.353441059589386},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3319535.3354197","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3319535.3354197","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.4699999988079071}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":54,"referenced_works":["https://openalex.org/W50107694","https://openalex.org/W267557365","https://openalex.org/W1427174644","https://openalex.org/W1507823573","https://openalex.org/W1510439863","https://openalex.org/W1520399166","https://openalex.org/W1554359822","https://openalex.org/W1580599221","https://openalex.org/W1660562555","https://openalex.org/W2056778557","https://openalex.org/W2058546698","https://openalex.org/W2096221836","https://openalex.org/W2130327142","https://openalex.org/W2131019288","https://openalex.org/W2134899616","https://openalex.org/W2136635506","https://openalex.org/W2150620897","https://openalex.org/W2156509923","https://openalex.org/W2159520802","https://openalex.org/W2161110873","https://openalex.org/W2210258279","https://openalex.org/W2397423248","https://openalex.org/W2405148462","https://openalex.org/W2519432340","https://openalex.org/W2533043266","https://openalex.org/W2538131460","https://openalex.org/W2550858797","https://openalex.org/W2562036180","https://openalex.org/W2564856904","https://openalex.org/W2572423421","https://openalex.org/W2579697044","https://openalex.org/W2604789199","https://openalex.org/W2750990141","https://openalex.org/W2753324901","https://openalex.org/W2769061097","https://openalex.org/W2770572532","https://openalex.org/W2791034507","https://openalex.org/W2807478047","https://openalex.org/W2810865596","https://openalex.org/W2884364581","https://openalex.org/W2886754822","https://openalex.org/W2889508486","https://openalex.org/W2890914193","https://openalex.org/W2902578047","https://openalex.org/W2904050676","https://openalex.org/W2953150480","https://openalex.org/W2964206587","https://openalex.org/W2967383257","https://openalex.org/W3023081684","https://openalex.org/W3150881812","https://openalex.org/W4242926647","https://openalex.org/W4289038676","https://openalex.org/W4385773499","https://openalex.org/W6712237015"],"related_works":["https://openalex.org/W2152099439","https://openalex.org/W1984163603","https://openalex.org/W2937608115","https://openalex.org/W3130422087","https://openalex.org/W3004195166","https://openalex.org/W2126310295","https://openalex.org/W1563139915","https://openalex.org/W4288413100","https://openalex.org/W4281628474","https://openalex.org/W4317795068"],"abstract_inverted_index":{"Trusted":[0],"Execution":[1],"Environments":[2],"(TEEs)":[3],"such":[4,66],"as":[5,33,67],"ARM":[6,51],"TrustZone":[7,52,112,151],"are":[8,20,205],"in":[9,12,42,173,201],"widespread":[10],"use":[11,92],"both":[13],"mobile":[14],"and":[15,18,118,134,147,156,180,213],"embedded":[16],"devices,":[17],"they":[19],"used":[21],"to":[22,91,95,115,123,142,161,207],"protect":[23],"sensitive":[24,188,211],"secrets":[25],"while":[26],"often":[27],"sharing":[28],"the":[29,43,45,61,71,75,83,100,121,144,163,197,224],"same":[30],"computational":[31],"hardware":[32],"untrusted":[34],"code.":[35,105],"Although":[36],"there":[37],"has":[38,53],"been":[39,55,78],"limited":[40],"research":[41],"area,":[44],"threat":[46],"of":[47,74,103,150,165,176,184,223],"microarchitectural":[48,101,193],"attacks":[49,94,126,199],"against":[50],"not":[54,60],"thoroughly":[56],"studied.":[57],"This":[58],"is":[59,89,113],"case":[62],"for":[63],"other":[64],"TEEs,":[65],"Intel":[68],"SGX,":[69],"where":[70],"security":[72,164],"promises":[73],"TEE":[76],"have":[77],"violated":[79],"numerous":[80],"times":[81],"by":[82],"academic":[84],"community,":[85],"showing":[86],"that":[87,111,186],"it":[88,140],"possible":[90],"side-channel":[93],"gain":[96],"detailed":[97],"insight":[98],"into":[99],"behavior":[102],"trusted":[104],"In":[106],"this":[107,202,210],"work,":[108],"we":[109,119,157,204],"show":[110],"susceptible":[114],"similar":[116],"attacks,":[117],"demonstrate":[120],"ability":[122],"achieve":[124],"cache":[125],"with":[127,153],"high":[128,131],"temporal":[129],"precision,":[130,133],"spatial":[132],"low":[135],"noise.":[136],"These":[137],"tools":[138],"make":[139],"easy":[141],"monitor":[143],"data":[145],"flow":[146,149],"code":[148,152],"great":[154],"resolution,":[155],"apply":[158],"our":[159],"techniques":[160],"investigate":[162],"a":[166,182,216],"real-world":[167],"application.":[168],"We":[169],"examine":[170],"ECDSA":[171],"signing":[172],"Qualcomm's":[174,221],"implementation":[175],"Android's":[177],"hardware-backed":[178,225],"keystore":[179],"identify":[181],"series":[183],"vulnerabilities":[185],"leak":[187],"cryptographic":[189],"information":[190,212],"through":[191],"shared":[192],"structures.":[194],"By":[195],"using":[196],"powerful":[198],"developed":[200],"paper,":[203],"able":[206],"successfully":[208],"extract":[209],"fully":[214],"recover":[215],"256-bit":[217],"private":[218],"key":[219],"from":[220],"version":[222],"keystore.":[226]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":14},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":11},{"year":2020,"cited_by_count":11}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}
