{"id":"https://openalex.org/W4402953588","doi":"https://doi.org/10.1145/3658644.3690254","title":"<scp>BaseMirror:</scp> Automatic Reverse Engineering of Baseband Commands from Android's Radio Interface Layer","display_name":"<scp>BaseMirror:</scp> Automatic Reverse Engineering of Baseband Commands from Android's Radio Interface Layer","publication_year":2024,"publication_date":"2024-12-02","ids":{"openalex":"https://openalex.org/W4402953588","doi":"https://doi.org/10.1145/3658644.3690254"},"language":"en","primary_location":{"id":"doi:10.1145/3658644.3690254","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690254","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690254","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690254","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100363896","display_name":"Wenqiang Li","orcid":"https://orcid.org/0000-0002-1083-2842"},"institutions":[{"id":"https://openalex.org/I52357470","display_name":"The Ohio State University","ror":"https://ror.org/00rs6vg23","country_code":"US","type":"education","lineage":["https://openalex.org/I52357470"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wenqiang Li","raw_affiliation_strings":["The Ohio State University, Columbus, Ohio, USA"],"raw_orcid":"https://orcid.org/0000-0002-1083-2842","affiliations":[{"raw_affiliation_string":"The Ohio State University, Columbus, Ohio, USA","institution_ids":["https://openalex.org/I52357470"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008433466","display_name":"Haohuang Wen","orcid":"https://orcid.org/0000-0002-2753-0250"},"institutions":[{"id":"https://openalex.org/I52357470","display_name":"The Ohio State University","ror":"https://ror.org/00rs6vg23","country_code":"US","type":"education","lineage":["https://openalex.org/I52357470"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Haohuang Wen","raw_affiliation_strings":["The Ohio State University, Columbus, Ohio, USA"],"raw_orcid":"https://orcid.org/0000-0002-2753-0250","affiliations":[{"raw_affiliation_string":"The Ohio State University, Columbus, Ohio, USA","institution_ids":["https://openalex.org/I52357470"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026864098","display_name":"Zhiqiang Lin","orcid":"https://orcid.org/0000-0001-6527-5994"},"institutions":[{"id":"https://openalex.org/I52357470","display_name":"The Ohio State University","ror":"https://ror.org/00rs6vg23","country_code":"US","type":"education","lineage":["https://openalex.org/I52357470"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhiqiang Lin","raw_affiliation_strings":["The Ohio State University, Columbus, Ohio, USA"],"raw_orcid":"https://orcid.org/0000-0001-6527-5994","affiliations":[{"raw_affiliation_string":"The Ohio State University, Columbus, Ohio, USA","institution_ids":["https://openalex.org/I52357470"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I52357470"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2311","last_page":"2325"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9879000186920166,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7825161218643188},{"id":"https://openalex.org/keywords/baseband","display_name":"Baseband","score":0.6347827911376953},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5665886402130127},{"id":"https://openalex.org/keywords/vendor","display_name":"Vendor","score":0.5372263193130493},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.5060033202171326},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.4138905107975006},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3932252824306488},{"id":"https://openalex.org/keywords/bandwidth","display_name":"Bandwidth (computing)","score":0.10418727993965149}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7825161218643188},{"id":"https://openalex.org/C65165936","wikidata":"https://www.wikidata.org/wiki/Q575784","display_name":"Baseband","level":3,"score":0.6347827911376953},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5665886402130127},{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.5372263193130493},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.5060033202171326},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.4138905107975006},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3932252824306488},{"id":"https://openalex.org/C2776257435","wikidata":"https://www.wikidata.org/wiki/Q1576430","display_name":"Bandwidth (computing)","level":2,"score":0.10418727993965149},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3658644.3690254","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690254","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690254","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2409.00475","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2409.00475","pdf_url":"https://arxiv.org/pdf/2409.00475","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/3658644.3690254","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690254","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690254","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6200000047683716}],"awards":[{"id":"https://openalex.org/G1490425828","display_name":"NSF Convergence Accelerator Track: G: The Security-Enhanced Radio Access Network (SE-RAN)","funder_award_id":"2326882","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G2186497367","display_name":"AI Institute for Future Edge Networks and Distributed Intelligence (AI-EDGE)","funder_award_id":"2112471","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3254667246","display_name":null,"funder_award_id":"N6600120C4020","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G673832355","display_name":null,"funder_award_id":"CNS-2112471,ITE-2326882","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"},{"id":"https://openalex.org/G7568287664","display_name":null,"funder_award_id":"W911NF2110081","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G8904212531","display_name":null,"funder_award_id":"N6600120C4020","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4402953588.pdf"},"referenced_works_count":31,"referenced_works":["https://openalex.org/W200653874","https://openalex.org/W1964999724","https://openalex.org/W1996915144","https://openalex.org/W2051600169","https://openalex.org/W2127637733","https://openalex.org/W2144981449","https://openalex.org/W2516933175","https://openalex.org/W2526496292","https://openalex.org/W2544992706","https://openalex.org/W2599530178","https://openalex.org/W2766540688","https://openalex.org/W2890042297","https://openalex.org/W2945037375","https://openalex.org/W2958183263","https://openalex.org/W2990286122","https://openalex.org/W3008670474","https://openalex.org/W3024280588","https://openalex.org/W3097175861","https://openalex.org/W3103619372","https://openalex.org/W3108723500","https://openalex.org/W3136586396","https://openalex.org/W3137248741","https://openalex.org/W3153221864","https://openalex.org/W3154197417","https://openalex.org/W3186102200","https://openalex.org/W3204949517","https://openalex.org/W3213188189","https://openalex.org/W3213858345","https://openalex.org/W4220806723","https://openalex.org/W4284677821","https://openalex.org/W4324007123"],"related_works":["https://openalex.org/W2204547643","https://openalex.org/W1497578837","https://openalex.org/W4293208944","https://openalex.org/W4294892273","https://openalex.org/W2355697382","https://openalex.org/W2157434987","https://openalex.org/W2622425222","https://openalex.org/W2546635662","https://openalex.org/W2132134555","https://openalex.org/W2478661203"],"abstract_inverted_index":{"In":[0],"modern":[1],"mobile":[2],"devices,":[3],"baseband":[4,91,125,141,183],"is":[5],"an":[6,144,195],"integral":[7],"component":[8],"running":[9],"on":[10,52,63,174,190,218],"top":[11],"of":[12,169,211],"cellular":[13,212],"processors":[14],"to":[15,78,88,121,138,160,186,200,239],"handle":[16],"crucial":[17],"radio":[18],"communications.":[19],"However,":[20],"recent":[21],"research":[22],"reveals":[23],"significant":[24],"vulnerabilities":[25,207],"in":[26,82],"these":[27,191],"basebands,":[28],"posing":[29],"serious":[30],"security":[31,80],"risks":[32],"like":[33],"remote":[34],"code":[35],"execution.":[36],"Yet,":[37],"effectively":[38],"scrutinizing":[39],"basebands":[40,83],"remains":[41],"a":[42,75,85,99,116,133,166,219,234],"daunting":[43],"task,":[44],"as":[45],"they":[46],"run":[47],"closed-source":[48],"and":[49,66,113,203,214,229,233],"proprietary":[50],"software":[51],"vendor-specific":[53,90,128],"chipsets.":[54],"Existing":[55],"analysis":[56,119,136],"methods":[57],"are":[58],"limited":[59],"by":[60,231],"their":[61,70],"dependence":[62],"manual":[64],"processes":[65],"heuristic":[67],"approaches,":[68],"reducing":[69],"scalability.":[71],"This":[72],"paper":[73],"introduces":[74],"novel":[76],"approach":[77],"unveil":[79],"issues":[81],"from":[84,93,127,143],"unique":[86,182],"perspective:":[87],"uncover":[89],"commands":[92,126,142,184],"the":[94,175,187],"Radio":[95],"Interface":[96],"Layer":[97],"(RIL),":[98],"hardware":[100],"abstraction":[101],"layer":[102],"interfacing":[103],"with":[104,150],"basebands.":[105],"To":[106],"demonstrate":[107],"this":[108],"concept,":[109],"we":[110,193],"have":[111,226],"designed":[112],"developed":[114],"BaseMirror,":[115],"static":[117],"binary":[118],"tool":[120],"automatically":[122],"reverse":[123],"engineer":[124],"RIL":[129,163],"binaries.":[130],"It":[131],"utilizes":[132],"bidirectional":[134],"taint":[135],"algorithm":[137],"adeptly":[139],"identify":[140],"enhanced":[145],"control":[146],"flow":[147],"graph":[148],"enriched":[149],"reconstructed":[151],"virtual":[152],"function":[153],"calls.":[154],"Our":[155],"methodology":[156],"has":[157,179],"been":[158,227],"applied":[159],"28":[161],"vendor":[162],"libraries,":[164],"encompassing":[165],"wide":[167],"range":[168],"Samsung":[170,220,232],"Exynos":[171],"smartphone":[172],"models":[173],"market.":[176],"Remarkably,":[177],"BaseMirror":[178],"uncovered":[180],"873":[181],"undisclosed":[185],"public.":[188],"Based":[189],"results,":[192],"develop":[194],"automated":[196],"attack":[197],"discovery":[198],"framework":[199],"successfully":[201],"derive":[202],"validate":[204],"8":[205],"zero-day":[206],"that":[208],"trigger":[209],"denial":[210],"service":[213],"arbitrary":[215],"file":[216],"access":[217],"Galaxy":[221],"A53":[222],"device.":[223],"These":[224],"findings":[225],"reported":[228],"confirmed":[230],"bug":[235],"bounty":[236],"was":[237],"awarded":[238],"us.":[240]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2024-09-29T00:00:00"}