{"id":"https://openalex.org/W4283027853","doi":"https://doi.org/10.1145/3498361.3538938","title":"Reverse engineering and retrofitting robotic aerial vehicle control firmware using dispatch","display_name":"Reverse engineering and retrofitting robotic aerial vehicle control firmware using dispatch","publication_year":2022,"publication_date":"2022-06-16","ids":{"openalex":"https://openalex.org/W4283027853","doi":"https://doi.org/10.1145/3498361.3538938"},"language":"en","primary_location":{"id":"doi:10.1145/3498361.3538938","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3498361.3538938","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 20th Annual International Conference on Mobile Systems, Applications and Services","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100741147","display_name":"Taegyu Kim","orcid":"https://orcid.org/0000-0002-4406-4415"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Taegyu Kim","raw_affiliation_strings":["The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006146096","display_name":"Aolin Ding","orcid":null},"institutions":[{"id":"https://openalex.org/I1310439424","display_name":"Accenture (Switzerland)","ror":"https://ror.org/041r3e346","country_code":"CH","type":"company","lineage":["https://openalex.org/I1310439424","https://openalex.org/I4210093804"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Aolin Ding","raw_affiliation_strings":["Accenture Labs, Accenture"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Accenture Labs, Accenture","institution_ids":["https://openalex.org/I1310439424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031084922","display_name":"Sriharsha Etigowni","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sriharsha Etigowni","raw_affiliation_strings":["Purdue University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033496412","display_name":"Pengfei Sun","orcid":"https://orcid.org/0000-0003-2407-5069"},"institutions":[{"id":"https://openalex.org/I4210097487","display_name":"F5 Networks (United States)","ror":"https://ror.org/010v2ez92","country_code":"US","type":"company","lineage":["https://openalex.org/I4210097487"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Pengfei Sun","raw_affiliation_strings":["F5 Networks"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"F5 Networks","institution_ids":["https://openalex.org/I4210097487"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069297967","display_name":"Jizhou Chen","orcid":"https://orcid.org/0009-0009-6218-0960"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jizhou Chen","raw_affiliation_strings":["Purdue University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050029555","display_name":"Luis Antonio Ribot Garc\u00eda","orcid":"https://orcid.org/0000-0002-5111-0694"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]},{"id":"https://openalex.org/I2800817003","display_name":"California Southern University","ror":"https://ror.org/058zz0t50","country_code":"US","type":"education","lineage":["https://openalex.org/I2800817003"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Luis Garcia","raw_affiliation_strings":["University of Southern California"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Southern California","institution_ids":["https://openalex.org/I1174212","https://openalex.org/I2800817003"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059269246","display_name":"Saman Zonouz","orcid":"https://orcid.org/0000-0001-9047-4047"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Saman Zonouz","raw_affiliation_strings":["Georgia Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108280598","display_name":"Dongyan Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dongyan Xu","raw_affiliation_strings":["Purdue University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015662045","display_name":"Dave Tian","orcid":"https://orcid.org/0000-0002-7506-9593"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dave (Jing) Tian","raw_affiliation_strings":["Purdue University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"69","last_page":"83"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.9298964738845825},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7330278754234314},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.6367941498756409},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.6294950246810913},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5347352027893066},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4660663902759552},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.354530394077301}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.9298964738845825},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7330278754234314},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.6367941498756409},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.6294950246810913},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5347352027893066},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4660663902759552},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.354530394077301},{"id":"https://openalex.org/C6557445","wikidata":"https://www.wikidata.org/wiki/Q173113","display_name":"Agronomy","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3498361.3538938","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3498361.3538938","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 20th Annual International Conference on Mobile Systems, Applications and Services","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.47999998927116394}],"awards":[{"id":"https://openalex.org/G3671925097","display_name":null,"funder_award_id":"N00014-21-1-2328","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G4173798759","display_name":null,"funder_award_id":"N6600120C4031","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W17195072","https://openalex.org/W596492259","https://openalex.org/W961099885","https://openalex.org/W1690253345","https://openalex.org/W2011158386","https://openalex.org/W2052897520","https://openalex.org/W2090554354","https://openalex.org/W2091939272","https://openalex.org/W2142778065","https://openalex.org/W2147118954","https://openalex.org/W2159065647","https://openalex.org/W2160468841","https://openalex.org/W2161913079","https://openalex.org/W2165726452","https://openalex.org/W2167340365","https://openalex.org/W2229530894","https://openalex.org/W2297774820","https://openalex.org/W2407989913","https://openalex.org/W2509067210","https://openalex.org/W2509113034","https://openalex.org/W2531090983","https://openalex.org/W2532962075","https://openalex.org/W2548176566","https://openalex.org/W2577142429","https://openalex.org/W2577565982","https://openalex.org/W2582998992","https://openalex.org/W2734692624","https://openalex.org/W2749008552","https://openalex.org/W2752493903","https://openalex.org/W2774286308","https://openalex.org/W2791218785","https://openalex.org/W2801880642","https://openalex.org/W2883950365","https://openalex.org/W2889372524","https://openalex.org/W2889890187","https://openalex.org/W2890042297","https://openalex.org/W2896403760","https://openalex.org/W2926178846","https://openalex.org/W2962808527","https://openalex.org/W2965126789","https://openalex.org/W2969126124","https://openalex.org/W2969919026","https://openalex.org/W3000168638","https://openalex.org/W3003250334","https://openalex.org/W3015291177","https://openalex.org/W3043236449","https://openalex.org/W3046848477","https://openalex.org/W3048912858","https://openalex.org/W3082744647","https://openalex.org/W3091635810","https://openalex.org/W3105926539","https://openalex.org/W3128328886","https://openalex.org/W3137265271","https://openalex.org/W3161000481","https://openalex.org/W3207753336","https://openalex.org/W4239813889","https://openalex.org/W4246166885","https://openalex.org/W4284704581","https://openalex.org/W6631540460"],"related_works":["https://openalex.org/W2582981600","https://openalex.org/W2354251310","https://openalex.org/W1526521547","https://openalex.org/W4385624297","https://openalex.org/W3180981818","https://openalex.org/W4247881240","https://openalex.org/W2007388836","https://openalex.org/W4388023871","https://openalex.org/W2356515587","https://openalex.org/W2351580829"],"abstract_inverted_index":{"Unmanned":[0],"Aerial":[1,14],"Vehicles":[2,15],"as":[3,21],"a":[4,138,141],"service":[5],"(UAVaaS)":[6],"has":[7],"increased":[8],"the":[9,42,62,88,152,181,188,203,229,235],"field":[10],"deployment":[11],"of":[12,51,165,219,224],"Robotic":[13],"(RAVs)":[16],"for":[17,95],"different":[18],"services":[19],"such":[20],"transportation":[22],"and":[23,39,67,70,92,97,101,111,115,129,149,170,173,176,205,222,245,252],"terrain":[24],"exploration.":[25],"These":[26],"RAVs":[27,172],"are":[28],"controlled":[29],"by":[30,37,119,155,196],"firmware,":[31],"which":[32,145],"is":[33,65,82],"often":[34],"closed-source,":[35],"developed":[36],"vendors,":[38],"flashed":[40],"into":[41,151],"ROM.":[43],"While":[44],"these":[45],"binary":[46,109,153,241],"blobs":[47],"enable":[48],"off-the-shelf":[49],"management":[50],"RAVs,":[52],"end":[53],"users":[54,134],"(individuals":[55],"or":[56],"organizations)":[57],"have":[58,159,185],"no":[59],"idea":[60],"if":[61],"control":[63,121],"firmware":[64,75,154,167,204,242],"designed":[66],"implemented":[68],"correctly,":[69],"can":[71,135],"only":[72],"rely":[73],"on":[74],"updates":[76],"from":[77],"vendors":[78],"when":[79],"any":[80],"vulnerability":[81],"discovered.":[83],"This":[84],"paper":[85],"proposes":[86],"DisPatch,":[87],"first":[89,107,236],"reverse":[90,243],"engineering":[91,244],"patching":[93,197,246],"framework":[94],"understanding":[96],"improving":[98],"controller":[99,113,117,182,193,250],"design":[100,251],"implementation":[102],"within":[103],"RAV":[104,240],"firmware.":[105],"DisPatch":[106,156,161,214,233],"decompiles":[108],"instructions":[110],"recovers":[112],"functions":[114],"core":[116],"variables":[118],"combining":[120],"theory":[122],"with":[123,201],"program":[124],"analysis":[125],"using":[126],"symbolic":[127],"execution":[128],"data":[130],"flow":[131],"analysis.":[132],"End":[133],"then":[136],"write":[137],"patch":[139],"in":[140,180,202],"domain-specific":[142],"language":[143],"(DSL),":[144],"will":[146],"be":[147],"translated":[148],"injected":[150],"automatically.":[157],"We":[158,184],"applied":[160],"to":[162,190,248],"two":[163,198],"instances":[164],"commodity":[166],"from3DR":[168],"IRIS+":[169],"MantisQ":[171],"demonstrated":[174],"100%":[175],"80.7%":[177],"accuracy":[178],"respectively":[179],"decompilation.":[183],"also":[186],"shown":[187],"ability":[189],"prevent":[191],"severe":[192],"performance":[194],"degradation":[195],"real-world":[199],"bugs":[200],"without":[206,227],"breaking":[207],"other":[208],"functionality.":[209],"Finally,":[210],"we":[211],"show":[212],"that":[213],"introduces":[215],"less":[216],"than":[217],"0.53%":[218],"space":[220],"overhead":[221,226],"1.48%":[223],"runtime":[225],"violating":[228],"soft":[230],"real-time":[231],"deadlines.":[232],"provides":[234],"step":[237],"towards":[238],"an":[239],"system":[247],"customize":[249],"implementation.":[253]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}
