{"id":"https://openalex.org/W3135190561","doi":"https://doi.org/10.1145/3432893","title":"Automatic Vulnerability Detection in Embedded Devices and Firmware","display_name":"Automatic Vulnerability Detection in Embedded Devices and Firmware","publication_year":2021,"publication_date":"2021-03-05","ids":{"openalex":"https://openalex.org/W3135190561","doi":"https://doi.org/10.1145/3432893","mag":"3135190561"},"language":"en","primary_location":{"id":"doi:10.1145/3432893","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3432893","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"review","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079598483","display_name":"Abdullah Qasem","orcid":"https://orcid.org/0000-0001-8284-4458"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Abdullah Qasem","raw_affiliation_strings":["Concordia University, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Concordia University, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019530993","display_name":"Paria Shirani","orcid":"https://orcid.org/0000-0001-5592-1518"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Paria Shirani","raw_affiliation_strings":["Concordia University, Canada"],"raw_orcid":"https://orcid.org/0000-0001-5592-1518","affiliations":[{"raw_affiliation_string":"Concordia University, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028605138","display_name":"Mourad Debbabi","orcid":"https://orcid.org/0000-0003-3015-3043"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mourad Debbabi","raw_affiliation_strings":["Concordia University, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Concordia University, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100730397","display_name":"Lingyu Wang","orcid":"https://orcid.org/0000-0002-7441-7541"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Lingyu Wang","raw_affiliation_strings":["Concordia University, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Concordia University, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087855812","display_name":"Bernard Lebel","orcid":"https://orcid.org/0000-0002-8287-2587"},"institutions":[{"id":"https://openalex.org/I4210095320","display_name":"Thales (Canada)","ror":"https://ror.org/00nnd3206","country_code":"CA","type":"company","lineage":["https://openalex.org/I4210095320","https://openalex.org/I4210140930"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Bernard Lebel","raw_affiliation_strings":["Thales Canada Inc., Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Thales Canada Inc., Canada","institution_ids":["https://openalex.org/I4210095320"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011863516","display_name":"Basile L. Agba","orcid":"https://orcid.org/0000-0003-2284-6026"},"institutions":[{"id":"https://openalex.org/I47099075","display_name":"Hydro-Qu\u00e9bec","ror":"https://ror.org/01nhzsw25","country_code":"CA","type":"government","lineage":["https://openalex.org/I47099075"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Basile L. Agba","raw_affiliation_strings":["Institut de recherche d\u2019Hydro-Qu\u00e9bec, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institut de recherche d\u2019Hydro-Qu\u00e9bec, Canada","institution_ids":["https://openalex.org/I47099075"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.8389,"has_fulltext":false,"cited_by_count":57,"citation_normalized_percentile":{"value":0.97080698,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"54","issue":"2","first_page":"1","last_page":"42"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9904000163078308,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.9709680080413818},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8877385258674622},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6447274684906006},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.5744733214378357},{"id":"https://openalex.org/keywords/microcode","display_name":"Microcode","score":0.5708935260772705},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5111828446388245},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4744364321231842},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.46997159719467163},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4655849039554596},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.41896897554397583},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1715255081653595}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.9709680080413818},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8877385258674622},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6447274684906006},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.5744733214378357},{"id":"https://openalex.org/C22174128","wikidata":"https://www.wikidata.org/wiki/Q175869","display_name":"Microcode","level":2,"score":0.5708935260772705},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5111828446388245},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4744364321231842},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.46997159719467163},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4655849039554596},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.41896897554397583},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1715255081653595},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3432893","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3432893","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320322199","display_name":"Hydro-Qu\u00e9bec","ror":"https://ror.org/01nhzsw25"},{"id":"https://openalex.org/F4320324104","display_name":"Thales Group","ror":"https://ror.org/04emwm605"},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":99,"referenced_works":["https://openalex.org/W27954293","https://openalex.org/W1480909796","https://openalex.org/W1546956568","https://openalex.org/W1555138513","https://openalex.org/W1565539145","https://openalex.org/W1582456956","https://openalex.org/W1690253345","https://openalex.org/W1779974843","https://openalex.org/W1942295288","https://openalex.org/W1968929858","https://openalex.org/W1976878954","https://openalex.org/W1982621550","https://openalex.org/W1990762361","https://openalex.org/W1995739251","https://openalex.org/W2000441200","https://openalex.org/W2008332894","https://openalex.org/W2009614414","https://openalex.org/W2010841095","https://openalex.org/W2012604743","https://openalex.org/W2021963610","https://openalex.org/W2024671287","https://openalex.org/W2029491280","https://openalex.org/W2034938003","https://openalex.org/W2037145115","https://openalex.org/W2043118292","https://openalex.org/W2044791156","https://openalex.org/W2085416455","https://openalex.org/W2086631206","https://openalex.org/W2089745089","https://openalex.org/W2091939272","https://openalex.org/W2098262260","https://openalex.org/W2100666033","https://openalex.org/W2101419798","https://openalex.org/W2103924867","https://openalex.org/W2113864883","https://openalex.org/W2116520617","https://openalex.org/W2126045901","https://openalex.org/W2127589108","https://openalex.org/W2128782367","https://openalex.org/W2131886132","https://openalex.org/W2132574561","https://openalex.org/W2138756793","https://openalex.org/W2144706305","https://openalex.org/W2145056020","https://openalex.org/W2156858199","https://openalex.org/W2159702664","https://openalex.org/W2165004968","https://openalex.org/W2180970301","https://openalex.org/W2216041415","https://openalex.org/W2295929302","https://openalex.org/W2503165018","https://openalex.org/W2509308811","https://openalex.org/W2514974017","https://openalex.org/W2515236103","https://openalex.org/W2532962075","https://openalex.org/W2547625248","https://openalex.org/W2549975402","https://openalex.org/W2559804063","https://openalex.org/W2574017551","https://openalex.org/W2576376563","https://openalex.org/W2577142429","https://openalex.org/W2579698096","https://openalex.org/W2593765440","https://openalex.org/W2602815560","https://openalex.org/W2613534458","https://openalex.org/W2620895032","https://openalex.org/W2627063456","https://openalex.org/W2741068848","https://openalex.org/W2744474467","https://openalex.org/W2747125559","https://openalex.org/W2749008552","https://openalex.org/W2774169481","https://openalex.org/W2782780792","https://openalex.org/W2790751137","https://openalex.org/W2791018263","https://openalex.org/W2792247670","https://openalex.org/W2792566782","https://openalex.org/W2795192879","https://openalex.org/W2806377938","https://openalex.org/W2806869036","https://openalex.org/W2808820334","https://openalex.org/W2884769489","https://openalex.org/W2886161275","https://openalex.org/W2888320512","https://openalex.org/W2888698761","https://openalex.org/W2913256667","https://openalex.org/W2962931396","https://openalex.org/W2963723316","https://openalex.org/W2979357014","https://openalex.org/W2989119476","https://openalex.org/W3007193137","https://openalex.org/W3010126799","https://openalex.org/W3011088748","https://openalex.org/W3105926539","https://openalex.org/W4238452917","https://openalex.org/W4244413641","https://openalex.org/W4253587022","https://openalex.org/W4300420355","https://openalex.org/W6729089581"],"related_works":["https://openalex.org/W4220894477","https://openalex.org/W2364614178","https://openalex.org/W3204308301","https://openalex.org/W3084814329","https://openalex.org/W4247881240","https://openalex.org/W2007388836","https://openalex.org/W4287713996","https://openalex.org/W3203474640","https://openalex.org/W3042244411","https://openalex.org/W2371072962"],"abstract_inverted_index":{"In":[0,114],"the":[1,4,30,60,64,78,83,123,159,168,173,177,180,183,188],"era":[2],"of":[3,6,13,42,66,80,86,122,170,182,199],"internet":[5],"things":[7],"(IoT),":[8],"software-enabled":[9],"inter-connected":[10],"devices":[11,88],"are":[12,19],"paramount":[14],"importance.":[15],"The":[16],"embedded":[17,69,75,87,111,130],"systems":[18,50,112,131],"very":[20,35],"frequently":[21],"used":[22,175],"in":[23,63,82,129,176,196],"both":[24,153],"security":[25,43],"and":[26,89,105,132,147,155,179,191],"privacy-sensitive":[27],"applications.":[28],"However,":[29],"underlying":[31],"software":[32],"(a.k.a.":[33],"firmware)":[34],"often":[36],"suffers":[37],"from":[38],"a":[39,93,119],"wide":[40],"range":[41],"vulnerabilities,":[44],"mainly":[45],"due":[46],"to":[47,72,103],"their":[48,90],"outdated":[49],"or":[51],"reusing":[52],"existing":[53],"vulnerable":[54],"libraries;":[55],"which":[56,126],"is":[57],"evident":[58],"by":[59,135],"surprising":[61],"rise":[62],"number":[65],"attacks":[67],"against":[68],"systems.":[70],"Therefore,":[71],"protect":[73],"those":[74,171],"systems,":[76],"detecting":[77],"presence":[79],"vulnerabilities":[81,108,128],"large":[84],"pool":[85],"firmware":[91,133],"plays":[92],"vital":[94],"role.":[95],"To":[96],"this":[97,115,197],"end,":[98],"there":[99],"exist":[100],"several":[101],"approaches":[102],"identify":[104,187],"trigger":[106],"potential":[107],"within":[109],"deployed":[110],"firmware.":[113],"survey,":[116],"we":[117,151,163,186],"provide":[118],"comprehensive":[120],"review":[121],"state-of-the-art":[124],"proposals,":[125],"detect":[127],"images":[134],"employing":[136],"various":[137],"analysis":[138],"techniques,":[139],"including":[140],"static":[141],"analysis,":[142,144],"dynamic":[143],"symbolic":[145],"execution,":[146],"hybrid":[148],"approaches.":[149,161],"Furthermore,":[150],"perform":[152],"quantitative":[154],"qualitative":[156],"comparisons":[157],"among":[158],"surveyed":[160],"Moreover,":[162],"devise":[164],"taxonomies":[165],"based":[166],"on":[167],"applications":[169],"approaches,":[172],"features":[174],"literature,":[178],"type":[181],"analysis.":[184],"Finally,":[185],"unresolved":[189],"challenges":[190],"discuss":[192],"possible":[193],"future":[194],"directions":[195],"field":[198],"research.":[200]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":15},{"year":2021,"cited_by_count":5}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}