{"id":"https://openalex.org/W7163994325","doi":"https://doi.org/10.1145/3748522.3779871","title":"Blank Pages Tell All: Reverse Engineering NEC 78K/0 Automotive Firmware","display_name":"Blank Pages Tell All: Reverse Engineering NEC 78K/0 Automotive Firmware","publication_year":2026,"publication_date":"2026-03-23","ids":{"openalex":"https://openalex.org/W7163994325","doi":"https://doi.org/10.1145/3748522.3779871"},"language":null,"primary_location":{"id":"doi:10.1145/3748522.3779871","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3748522.3779871","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 41st ACM/SIGAPP Symposium on Applied Computing","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3748522.3779871","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138212855","display_name":"James Todd","orcid":"https://orcid.org/0009-0009-2670-8473"},"institutions":[{"id":"https://openalex.org/I142263535","display_name":"University of Nottingham","ror":"https://ror.org/01ee9ar58","country_code":"GB","type":"education","lineage":["https://openalex.org/I142263535"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"James Todd","raw_affiliation_strings":["School of Computer Science, University of Nottingham, Nottingham, United Kingdom"],"raw_orcid":"https://orcid.org/0009-0009-2670-8473","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Nottingham, Nottingham, United Kingdom","institution_ids":["https://openalex.org/I142263535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108999962","display_name":"Tim Muller","orcid":"https://orcid.org/0000-0003-1263-4230"},"institutions":[{"id":"https://openalex.org/I142263535","display_name":"University of Nottingham","ror":"https://ror.org/01ee9ar58","country_code":"GB","type":"education","lineage":["https://openalex.org/I142263535"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Tim Muller","raw_affiliation_strings":["School of Computer Science, University of Nottingham, Nottingham, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0003-1263-4230","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Nottingham, Nottingham, United Kingdom","institution_ids":["https://openalex.org/I142263535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033300489","display_name":"Xavier Carpent","orcid":"https://orcid.org/0000-0003-1697-6940"},"institutions":[{"id":"https://openalex.org/I142263535","display_name":"University of Nottingham","ror":"https://ror.org/01ee9ar58","country_code":"GB","type":"education","lineage":["https://openalex.org/I142263535"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Xavier Carpent","raw_affiliation_strings":["School of Computer Science, University of Nottingham, Nottingham, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0003-1697-6940","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Nottingham, Nottingham, United Kingdom","institution_ids":["https://openalex.org/I142263535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064304070","display_name":"Steven R. Bagley","orcid":"https://orcid.org/0009-0003-5761-5292"},"institutions":[{"id":"https://openalex.org/I142263535","display_name":"University of Nottingham","ror":"https://ror.org/01ee9ar58","country_code":"GB","type":"education","lineage":["https://openalex.org/I142263535"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Steven Bagley","raw_affiliation_strings":["School of Computer Science, University of Nottingham, Nottingham, United Kingdom"],"raw_orcid":"https://orcid.org/0009-0003-5761-5292","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Nottingham, Nottingham, United Kingdom","institution_ids":["https://openalex.org/I142263535"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063107629","display_name":"Roderick C. I. MacKenzie","orcid":"https://orcid.org/0000-0002-8833-2872"},"institutions":[{"id":"https://openalex.org/I190082696","display_name":"Durham University","ror":"https://ror.org/01v29qb04","country_code":"GB","type":"education","lineage":["https://openalex.org/I190082696"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Roderick C. I. MacKenzie","raw_affiliation_strings":["Department of Engineering, Durham University, Durham, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0002-8833-2872","affiliations":[{"raw_affiliation_string":"Department of Engineering, Durham University, Durham, United Kingdom","institution_ids":["https://openalex.org/I190082696"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5138212855"],"corresponding_institution_ids":["https://openalex.org/I142263535"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.96206854,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"293","last_page":"300"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.2865000069141388,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.2865000069141388,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.16910000145435333,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.0632999986410141,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.9327999949455261},{"id":"https://openalex.org/keywords/automotive-industry","display_name":"Automotive industry","score":0.7060999870300293},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6743000149726868},{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.6201000213623047},{"id":"https://openalex.org/keywords/programmer","display_name":"Programmer","score":0.5846999883651733},{"id":"https://openalex.org/keywords/microcode","display_name":"Microcode","score":0.5604000091552734},{"id":"https://openalex.org/keywords/blank","display_name":"Blank","score":0.49889999628067017}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.9327999949455261},{"id":"https://openalex.org/C526921623","wikidata":"https://www.wikidata.org/wiki/Q190117","display_name":"Automotive industry","level":2,"score":0.7060999870300293},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6743000149726868},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.6201000213623047},{"id":"https://openalex.org/C2778514511","wikidata":"https://www.wikidata.org/wiki/Q1374194","display_name":"Programmer","level":2,"score":0.5846999883651733},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5717999935150146},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.571399986743927},{"id":"https://openalex.org/C22174128","wikidata":"https://www.wikidata.org/wiki/Q175869","display_name":"Microcode","level":2,"score":0.5604000091552734},{"id":"https://openalex.org/C2778089247","wikidata":"https://www.wikidata.org/wiki/Q368951","display_name":"Blank","level":2,"score":0.49889999628067017},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4027999937534332},{"id":"https://openalex.org/C165005293","wikidata":"https://www.wikidata.org/wiki/Q1074500","display_name":"Chip","level":2,"score":0.3889000117778778},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.382999986410141},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.37290000915527344},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3569999933242798},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.35199999809265137},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.27730000019073486},{"id":"https://openalex.org/C2780098074","wikidata":"https://www.wikidata.org/wiki/Q6037362","display_name":"Insert (composites)","level":2,"score":0.26179999113082886},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.26030001044273376}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3748522.3779871","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3748522.3779871","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 41st ACM/SIGAPP Symposium on Applied Computing","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3748522.3779871","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3748522.3779871","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 41st ACM/SIGAPP Symposium on Applied Computing","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W1965884932","https://openalex.org/W2926259481","https://openalex.org/W3109429860","https://openalex.org/W4226349076","https://openalex.org/W4294811443","https://openalex.org/W4404556704","https://openalex.org/W4404556716","https://openalex.org/W4404556717"],"related_works":[],"abstract_inverted_index":{"We":[0,95,116,133],"present":[1],"a":[2,23,86,107,139],"firmware":[3,119],"extraction":[4,53],"and":[5,17,33,85,143,151,166],"reverse-engineering":[6,91],"toolkit":[7,21,70],"for":[8,90],"flash-based":[9],"NEC":[10],"78K/0":[11,52,77],"microcontrollers,":[12],"widely":[13],"used":[14,34],"in":[15,153],"embedded":[16],"automotive":[18,101],"systems.":[19],"The":[20,69],"exploits":[22],"vulnerability":[24],"that":[25,123],"allows":[26],"blank":[27],"memory":[28],"locations":[29],"to":[30,35,63,112,127,141],"be":[31],"identified":[32,135],"insert":[36],"arbitrary":[37],"code.":[38],"This":[39],"circumvents":[40],"the":[41,61,92,97,114,118,149,154,159],"chip's":[42],"Code":[43],"Readout":[44],"Protection":[45],"mechanism.":[46],"Our":[47],"implementation":[48],"improves":[49],"upon":[50,172],"existing":[51],"methods":[54],"by":[55,177],"introducing":[56],"error":[57],"checking,":[58],"while":[59],"allowing":[60],"chip":[62,81],"remain":[64],"on":[65,99],"its":[66],"original":[67],"PCB.":[68],"includes":[71],"additional":[72],"open-source":[73],"tools;":[74],"an":[75],"Arduino":[76],"programmer":[78],"implementation;":[79],"improved":[80],"read-out":[82],"exploit":[83],"code;":[84],"Ghidra":[87],"processor":[88],"module":[89],"extracted":[93],"firmware.":[94,115],"demonstrate":[96],"approach":[98],"production":[100],"engine":[102],"control":[103],"units":[104],"(ECUs)":[105],"from":[106],"legacy":[108],"mass-market":[109],"vehicle":[110,152],"platform,":[111],"obtain":[113],"find":[117],"contains":[120],"seed-to-key":[121],"algorithms":[122],"are":[124],"universal":[125],"keys":[126],"all":[128],"variants":[129],"of":[130,161],"this":[131,169],"ECUs.":[132],"also":[134],"undocumented":[136],"functionality,":[137],"including":[138],"mechanism":[140],"read":[142],"erase":[144],"hidden":[145],"information":[146],"-":[147],"breaking":[148],"ECU":[150],"process.":[155],"Finally,":[156],"we":[157],"analyse":[158],"impacts":[160],"such":[162],"tools":[163],"being":[164],"available":[165],"what":[167],"effects":[168],"may":[170],"have":[171],"any":[173],"security":[174],"assumptions":[175],"made":[176],"manufacturers.":[178]},"counts_by_year":[],"updated_date":"2026-06-10T14:10:52.464848","created_date":"2026-06-10T00:00:00"}