A methodology for determining the image base of arm-based industrial control system firmware
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The NVD dataset contains common vulnerabilities in all domains and fails to focus on SCADA-specific vulnerabilities.
“NVD dataset [71] contains common vulnerabilities in all domains that fail to focus on SCADA specific vulnerabilities.”
From Architecture and security of SCADA systems: A review (2021) · cites this paper as [71]
Cites
Stuxnet: Dissecting a cyberwarfare weapon
Langner, R. (2011) · IEEE Security & Privacy Magazine · doi:10.1109/msp.2011.67 · Cited by 1,922 · see citing works
A Large-Scale Analysis of the Security of Embedded Firmwares
Costin, A., Zaddach, J., Francillon, A., et al. (2014) · Cited by 307 · see citing works
Programmable Logic Controllers
(2015) · Elsevier eBooks · doi:10.1016/c2014-0-03884-1 · Cited by 286 · see citing works
Firmware modification attacks on programmable logic controllers
Basnight, Z., Butts, J., Lopez, J., & Dube, T. (2013) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2013.04.004 · Cited by 152 · see citing works
Programmable Logic Controllers
Bolton, W. (2015) · Elsevier eBooks · doi:10.1016/b978-0-12-802929-9.00001-7 · Cited by 150 · see citing works
An evaluation of modification attacks on programmable logic controllers
Schuett, C., Butts, J., & Dunlap, S. (2014) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2014.01.004 · Cited by 52 · see citing works
A Firmware Verification Tool for Programmable Logic Controllers
McMinn, L. R., & Butts, J. (2012) · IFIP International Federation for Information Processing/IFIP · doi:10.1007/978-3-642-35764-0_5 · Cited by 30 · see citing works
Industrial PLC security issues
Milinković, S. A., & Lazić, L. (2012) · Telecommunications Forum (TELFOR) · doi:10.1109/telfor.2012.6419513 · Cited by 27 · see citing works
Determining image base of firmware for ARM devices by matching literal pools
Zhu, R., Tan, Y., Zhang, Q., et al. (2016) · Digital Investigation · doi:10.1016/j.diin.2016.01.002 · Cited by 26 · see citing works
Self-citationDetermining Image Base of Firmware Files for ARM Devices
Zhu, R., Tan, Y., Zhang, Q., et al. (2016) · IEICE Transactions on Information and Systems · doi:10.1587/transinf.2015edp7217 · Cited by 21 · see citing works
Self-citationCyber security issues of critical components for industrial control system
Yang, W., & Zhao, Q. (2014) · IEEE CSAA Guidance, Navigation and Control Conference (CGNCC) · doi:10.1109/cgncc.2014.7007593 · Cited by 15 · see citing works
Descrambling data on solid-state disks by reverse-engineering the firmware
Zhang, L., Hao, S., Zheng, J., et al. (2015) · Digital Investigation · doi:10.1016/j.diin.2014.12.003 · Cited by 12 · see citing works
Firmware Counterfeiting and Modification Attacks on Programmable Logic Controllers
Basnight, Z. H. (2013) · Cited by 11 · see citing works
Evaluating Industrial Control Devices Security: Standards, Technologies and Challenges
Xie, F., Peng, Y., Zhao, W., et al. (2014) · Lecture notes in computer science · doi:10.1007/978-3-662-45237-0_57 · Cited by 8 · see citing works
Security Analysis of an IP Phone: Cisco 7960G
Dacosta, I., Mehta, N., Metrock, E., et al. (2008) · Lecture notes in computer science · doi:10.1007/978-3-540-89054-6_12 · Cited by 7 · see citing works
Programmable Logic Controllers, Sixth Edition
Bolton, W. (2015) · Newnes eBooks · Cited by 6 · see citing works
Threat modelling of industrial controllers: A firmware security perspective
Varghese, A., & Bose, A. K. (2014) · International Conference on Anti-counterfeiting, Security, and Identification · doi:10.1109/icasid.2014.7064951 · Cited by 4 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Architecture and security of SCADA systems: A review
Yadav, G., & Paul, K. (2021) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2021.100433 · Cited by 261 · see citing works
- Authors
- Zhu, R., Zhang, B., Mao, J., Zhang, Q., & Tan, Y.-A.
- Affiliations
- Beijing Institute of Technology (CN)
- China Information Technology Security Evaluation Center (CN)
- Corresponding author
- Tan, Yu-an
- Venue
- International Journal of Critical Infrastructure Protection
- Publisher
- Elsevier BV
- Published
- 2017-03
- Volume
- 16
- Pages
- 26-35
- ISSN
- 1874-5482 (ISSN-L)
- OpenAlex
- W2569220913
- Cited by
- 33
- References
- 17
- Citations by year
- 2025: 1 · 2024: 2 · 2023: 3 · 2022: 1 · 2021: 8 · 2020: 1 · 2019: 3 · 2018: 9 · 2017: 5
- FWCI
- 2.94
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- International Journal of Critical Infrastructure Protection (publishedVersion)
- RePEc: Research Papers in Economics (submittedVersion)
- Funders
- National Natural Science Foundation of China
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Security and Verification in Computing
- Physical Sciences › Computer Science › Signal Processing › Advanced Malware Detection Techniques
- Physical Sciences › Computer Science › Information Systems › Digital and Cyber Forensics
- Keywords
- firmware reverse engineering, ARM architecture, industrial control systems, firmware security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
