{"id":"https://openalex.org/W4220834208","doi":"https://doi.org/10.1145/3508398.3511507","title":"A TOCTOU Attack on DICE Attestation","display_name":"A TOCTOU Attack on DICE Attestation","publication_year":2022,"publication_date":"2022-04-14","ids":{"openalex":"https://openalex.org/W4220834208","doi":"https://doi.org/10.1145/3508398.3511507"},"language":"en","primary_location":{"id":"doi:10.1145/3508398.3511507","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3508398.3511507","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3508398.3511507","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Twelfth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3508398.3511507","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042536830","display_name":"Stefan Hristozov","orcid":"https://orcid.org/0000-0001-9845-1202"},"institutions":[{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Stefan Hristozov","raw_affiliation_strings":["Fraunhofer AISEC, Garching near Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer AISEC, Garching near Munich, Germany","institution_ids":["https://openalex.org/I4210136922"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065900338","display_name":"Moritz Wettermann","orcid":"https://orcid.org/0000-0002-8792-6468"},"institutions":[{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Moritz Wettermann","raw_affiliation_strings":["Fraunhofer AISEC, Garching near Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer AISEC, Garching near Munich, Germany","institution_ids":["https://openalex.org/I4210136922"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075523390","display_name":"Manuel Huber","orcid":"https://orcid.org/0000-0003-0829-6902"},"institutions":[{"id":"https://openalex.org/I4210153468","display_name":"Microsoft (Canada)","ror":"https://ror.org/04xhxg104","country_code":"CA","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210153468"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Manuel Huber","raw_affiliation_strings":["Microsoft, Vancouver, BC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft, Vancouver, BC, Canada","institution_ids":["https://openalex.org/I4210153468"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.8557,"has_fulltext":true,"cited_by_count":12,"citation_normalized_percentile":{"value":0.87341577,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"226","last_page":"235"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.991599977016449,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.8816260099411011},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8455061912536621},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7214065790176392},{"id":"https://openalex.org/keywords/dice","display_name":"Dice","score":0.627179741859436},{"id":"https://openalex.org/keywords/reboot","display_name":"Reboot","score":0.6180269718170166},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5844877362251282},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.5765815377235413},{"id":"https://openalex.org/keywords/microcontroller","display_name":"Microcontroller","score":0.49665266275405884},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4635075628757477},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.3238629698753357}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.8816260099411011},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8455061912536621},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7214065790176392},{"id":"https://openalex.org/C22029948","wikidata":"https://www.wikidata.org/wiki/Q45089","display_name":"Dice","level":2,"score":0.627179741859436},{"id":"https://openalex.org/C120524526","wikidata":"https://www.wikidata.org/wiki/Q1709148","display_name":"Reboot","level":2,"score":0.6180269718170166},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5844877362251282},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.5765815377235413},{"id":"https://openalex.org/C173018170","wikidata":"https://www.wikidata.org/wiki/Q165678","display_name":"Microcontroller","level":2,"score":0.49665266275405884},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4635075628757477},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.3238629698753357},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3508398.3511507","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3508398.3511507","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3508398.3511507","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Twelfth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2201.11764","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2201.11764","pdf_url":"https://arxiv.org/pdf/2201.11764","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:null:publica/428834","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/428834","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference paper"}],"best_oa_location":{"id":"doi:10.1145/3508398.3511507","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3508398.3511507","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3508398.3511507","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Twelfth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4220834208.pdf","grobid_xml":"https://content.openalex.org/works/W4220834208.grobid-xml"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W2036329595","https://openalex.org/W2075095478","https://openalex.org/W2104948281","https://openalex.org/W2117798902","https://openalex.org/W2135274013","https://openalex.org/W2141389113","https://openalex.org/W2253323435","https://openalex.org/W2521073554","https://openalex.org/W2686848947","https://openalex.org/W2686866989","https://openalex.org/W2734401556","https://openalex.org/W2743103908","https://openalex.org/W2752493903","https://openalex.org/W2754364482","https://openalex.org/W2806634969","https://openalex.org/W2808465942","https://openalex.org/W2899759798","https://openalex.org/W3036340003","https://openalex.org/W3044878917","https://openalex.org/W3080132966","https://openalex.org/W3091997824","https://openalex.org/W3105458918","https://openalex.org/W3182156214","https://openalex.org/W4231291260","https://openalex.org/W4289038676","https://openalex.org/W4353004773","https://openalex.org/W4402262144"],"related_works":["https://openalex.org/W3104750253","https://openalex.org/W2347997421","https://openalex.org/W2484510436","https://openalex.org/W3021239166","https://openalex.org/W2586273397","https://openalex.org/W2390936256","https://openalex.org/W2483429559","https://openalex.org/W2464569243","https://openalex.org/W1973637778","https://openalex.org/W1535498519"],"abstract_inverted_index":{"A":[0],"major":[1],"security":[2,27],"challenge":[3,21],"for":[4,78,176,201],"modern":[5],"IoT":[6,55,82],"deployments":[7],"is":[8,74,87,111,138],"to":[9,36,48,113,139,180],"ensure":[10],"that":[11,109,125],"the":[12,38,42,54,57,64,85,118,148,155,163,169,172,181,185,192,206,221,224],"devices":[13,43,83],"run":[14],"legitimate":[15],"firmware":[16,39,86,150],"free":[17],"from":[18],"malware.":[19],"This":[20],"can":[22,219],"be":[23,127],"addressed":[24],"through":[25,129,194],"a":[26,33,75,98,122,199,212],"primitive":[28],"called":[29],"attestation":[30,51,157],"which":[31,218],"allows":[32],"remote":[34,99],"backend":[35],"verify":[37],"integrity":[40],"of":[41,71,121,135,144,187,191,214,223],"it":[44,110,161],"manages.":[45],"In":[46,93],"order":[47],"accelerate":[49],"broad":[50],"adoption":[52],"in":[53,117,147],"domain":[56],"Trusted":[58],"Computing":[59],"Group":[60],"(TCG)":[61],"has":[62],"introduced":[63],"Device":[65],"Identifier":[66],"Composition":[67],"Engine":[68],"(DICE)":[69],"series":[70],"specifications.":[72,226],"DICE":[73,225],"hardware-software":[76],"architecture":[77],"constrained,":[79],"e.g.,":[80],"microcontroller-based":[81],"where":[84],"divided":[88],"into":[89],"successively":[90],"executed":[91],"layers.":[92],"this":[94],"paper,":[95],"we":[96,204],"demonstrate":[97,108],"Time-Of-Check":[100],"Time-Of-Use":[101],"(TOCTOU)":[102],"attack":[103,137],"on":[104,162],"DICE-based":[105,130],"attestation.":[106,131],"We":[107,183,210],"possible":[112,216],"install":[114,140],"persistent":[115],"malware":[116,141,153,170,188],"flash":[119,165],"memory":[120],"constrained":[123],"microcontroller":[124],"cannot":[126],"detected":[128],"The":[132,152],"main":[133],"idea":[134],"our":[136,202],"during":[142],"runtime":[143],"application":[145],"logic":[146],"top":[149],"layer.":[151],"reads":[154],"valid":[156],"key":[158,175,193],"and":[159,189],"stores":[160],"device's":[164],"memory.":[166],"After":[167],"reboot,":[168],"uses":[171],"previously":[173],"stored":[174],"all":[177],"subsequent":[178],"attestations":[179],"backend.":[182],"conduct":[184],"installation":[186],"copying":[190],"Return-Oriented":[195],"Programming":[196],"(ROP).":[197],"As":[198],"platform":[200],"demonstration,":[203],"use":[205],"Cortex-M-based":[207],"nRF52840":[208],"microcontroller.":[209],"provide":[211],"discussion":[213],"several":[215],"countermeasures":[217],"mitigate":[220],"shortcomings":[222]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-08-05T07:39:15.569665","created_date":"2025-10-10T00:00:00"}