{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T23:47:52Z","timestamp":1781740072355,"version":"3.54.5"},"reference-count":218,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["1755179"],"award-info":[{"award-number":["1755179"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["1829698"],"award-info":[{"award-number":["1829698"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Commun. Surv. Tutorials"],"published-print":{"date-parts":[[2019]]},"DOI":"10.1109\/comst.2019.2910750","type":"journal-article","created":{"date-parts":[[2019,8,22]],"date-time":"2019-08-22T20:24:21Z","timestamp":1566505461000},"page":"2702-2733","source":"Crossref","is-referenced-by-count":708,"title":["Demystifying IoT Security: An Exhaustive Survey on IoT Vulnerabilities and a First Empirical Look on Internet-Scale IoT Exploitations"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8404-3475","authenticated-orcid":false,"given":"Nataliia","family":"Neshenko","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8040-4635","authenticated-orcid":false,"given":"Elias","family":"Bou-Harb","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6705-5300","authenticated-orcid":false,"given":"Jorge","family":"Crichigno","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5025-6624","authenticated-orcid":false,"given":"Georges","family":"Kaddoum","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9475-7439","authenticated-orcid":false,"given":"Nasir","family":"Ghani","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref170","year":"2018","journal-title":"Baby Monitor Hacker Delivers Creepy Message to Child"},{"key":"ref172","year":"2018","journal-title":"DDoS attack halts heating in Finland amidst winter"},{"key":"ref171","doi-asserted-by":"publisher","DOI":"10.1145\/586115.586117"},{"key":"ref174","article-title":"A sensor network simulator for the Contiki OS","author":"\u00f6sterlind","year":"2006"},{"key":"ref173","author":"dunkels","year":"2011","journal-title":"The Contiki OS The Operating System for the Internet of Things"},{"key":"ref176","article-title":"SEC 4: Elliptic curve Qu-Vanstone implicit certificate scheme (ECQV)","author":"campagna","year":"2013"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6347"},{"key":"ref178","first-page":"662","article-title":"IEEE 802.15.4a channel model&#x2013;final report","author":"molisch","year":"2004"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3972"},{"key":"ref168","first-page":"388","article-title":"Side-channel attacks: Ten years after its publication and the impacts on cryptographic module security testing","volume":"2005","author":"zhou","year":"2005","journal-title":"IACR Cryptology ePrint"},{"key":"ref169","doi-asserted-by":"crossref","first-page":"1630","DOI":"10.1109\/TSG.2015.2495133","article-title":"A review of false data injection attacks against modern power systems","volume":"8","author":"liang","year":"2017","journal-title":"IEEE Trans Smart Grid"},{"key":"ref39","doi-asserted-by":"crossref","first-page":"2796","DOI":"10.3390\/s18092796","article-title":"IoT elements, layered architectures and security issues: A comprehensive survey","volume":"18","author":"burhan","year":"2018","journal-title":"SENSORS"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2017.02.009"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-015-0310-0"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/FiCloud.2016.20"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2016.07.002"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2016.12.004"},{"key":"ref37","doi-asserted-by":"crossref","first-page":"10","DOI":"10.1016\/j.jnca.2017.04.002","article-title":"Internet of Things security: A survey","volume":"88","author":"alaba","year":"2017","journal-title":"J Netw Comput Appl"},{"key":"ref36","article-title":"Understanding IoT security through the data crystal ball: Where we are now and where we are going to be","author":"zhang","year":"2017","journal-title":"arXiv preprint arXiv 1703 06870"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2016.11.007"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TETC.2016.2606384"},{"key":"ref181","year":"2018","journal-title":"Cujo"},{"key":"ref180","year":"2018","journal-title":"BullGuard"},{"key":"ref185","year":"2018","journal-title":"OWASP Zed Attack Proxy Project"},{"key":"ref184","year":"2018","journal-title":"Arachni web application security scanner framework"},{"key":"ref183","year":"2018","journal-title":"Luma"},{"key":"ref182","year":"2018","journal-title":"RATtrap"},{"key":"ref189","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2871866"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2017.2781126"},{"key":"ref187","author":"mellon","year":"2018","journal-title":"CBMC Bounded Model Checking for Software"},{"key":"ref186","year":"2018","journal-title":"W3AF&#x2014;Open Source Web Application Security Scanner"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2014.11.008"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2444095"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7401"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2388550"},{"key":"ref20","year":"2018","journal-title":"Who Should Bear the Cost of IoT Security Consumers or Vendors?"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2010.05.010"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2834050.2834095"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2012.12.018"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2013.01.010"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.042313.00197"},{"key":"ref25","doi-asserted-by":"crossref","first-page":"2233","DOI":"10.1109\/TII.2014.2300753","article-title":"Internet of Things in industries: A survey","volume":"10","author":"da xu","year":"2014","journal-title":"IEEE Trans Ind Informat"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ASPDAC.2016.7428064"},{"key":"ref51","article-title":"The current state of access control for smart devices in homes","author":"ur","year":"2014","journal-title":"Workshop on Home Usable Privacy and Security (HUPS)"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1109\/CCNC.2016.7444797"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2017.05.027"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2016.12.001"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.8"},{"key":"ref150","first-page":"1033","article-title":"You&#x2019;ve got vulnerability: Exploring effective vulnerability notifications","author":"li","year":"2016","journal-title":"Proc Usenix Security Symp"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1145\/3055245.3055252"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2013.04.014"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2018.8622243"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2865604"},{"key":"ref148","article-title":"IoT: A crowdsourced self-learning approach for detecting compromised IoT devices","author":"nguyen","year":"2018","journal-title":"arXiv preprint arXiv 1804 02671"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23142"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2011.274"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/CSNT.2015.94"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.3390\/s140202795"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2015.7"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2613841"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/WF-IoT.2016.7845447"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICET.2016.7813265"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2014.01.004"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1201\/b11149-31"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.102913.00020"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2018.3011052"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2018.00064"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504755"},{"key":"ref163","year":"2012","journal-title":"Internet census 2012-port scanning\/0 using insecure embedded devices"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15317-4_15"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1109\/3PGCIC.2010.79"},{"key":"ref160","author":"elahi","year":"2009","journal-title":"ZigBee Wireless Sensor and Control Network"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2016.2628938"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICIT.2016.7475060"},{"key":"ref6","author":"patel","year":"2018","journal-title":"Autism Glass Takes Top Student Health Tech Prize"},{"key":"ref5","year":"2018","journal-title":"The Autism Glass Project at Stanford Medicine"},{"key":"ref8","year":"2018","journal-title":"Internet of things applications part 2 The mining industry"},{"key":"ref159","author":"farahani","year":"2011","journal-title":"ZigBee Wireless Networks and Transceivers"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2971482"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ICITST.2015.7412116"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2017.104"},{"key":"ref9","year":"2016","journal-title":"Smart cities-international case studies"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2013.6400437"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2014.6883391"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2016.1500116NM"},{"key":"ref48","year":"2018","journal-title":"IoT Security Part 3 (101 IoT Top Ten Vulnerabilities)"},{"key":"ref47","year":"2018","journal-title":"Top 10 iot vulnerabilities (2014)"},{"key":"ref42","volume":"43","author":"shelby","year":"2011","journal-title":"6LoWPAN The Wireless Embedded Internet"},{"key":"ref41","year":"2014","journal-title":"The Internet of Things Reference Model"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOMW.2014.6849283"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2015.11.004"},{"key":"ref73","year":"2015","journal-title":"Internet of things research study"},{"key":"ref72","article-title":"Turning Internet of Things (IoT) into Internet of Vulnerabilities (IoV): IoT botnets","author":"angrishi","year":"2017","journal-title":"arXiv preprint arXiv 1702 03681"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/2981546"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-61204-1_22"},{"key":"ref76","article-title":"ContexloT: Towards providing contextual integrity to appified IoT platforms","author":"jia","year":"2017","journal-title":"Proc NDSS"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/MASS.2016.051"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/IDAACS.2015.7340779"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2017.01.003"},{"key":"ref78","year":"2018","journal-title":"BrickerBot results in PDoS attack"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2013.04.004"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2013.475"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2013.05.003"},{"key":"ref61","article-title":"All your bulbs are belong to us: Investigating the current state of security in connected lighting systems","author":"morgner","year":"2016","journal-title":"arXiv preprint arXiv 1608 03732"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3010079.3012014"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1155\/2014\/357430"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1016\/j.simpat.2016.09.007"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.13"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3055245.3055251"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/2809695.2809723"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/CSE-EUC.2017.206"},{"key":"ref197","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2014.6814019"},{"key":"ref198","doi-asserted-by":"publisher","DOI":"10.1002\/wcm.2510"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2018.3011034"},{"key":"ref193","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.02.005"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2013.09.008"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.9"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2015.01.016"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2016.48"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/LES.2017.2741419"},{"key":"ref190","first-page":"59","article-title":"An empirical study of the robustness of windows NT applications using random testing","author":"forrester","year":"2000","journal-title":"Proc 4th Usenix Windows Systems Symp"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920276"},{"key":"ref191","year":"2018","journal-title":"Kippo&#x2014;SSH Honeypot"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/JISIC.2014.43"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.1109\/CRISIS.2012.6378947"},{"key":"ref91","article-title":"Don&#x2019;t forget to lock the back door! A characterization of IPv6 network security policy","author":"czyz","year":"2016","journal-title":"Proc NDSS"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2016.05.002"},{"key":"ref98","first-page":"7","article-title":"Green lights forever: Analyzing the security of traffic infrastructure","volume":"14","author":"ghena","year":"2014","journal-title":"Proc WOOT"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2015.7288421"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/2789168.2790121"},{"key":"ref97","doi-asserted-by":"crossref","first-page":"189","DOI":"10.1145\/2897845.2897847","article-title":"Friend or foe? Your wearable devices reveal your personal pin","author":"wang","year":"2016","journal-title":"Proc 11th ACM Asia Conf Comput Commun Security"},{"key":"ref82","first-page":"1","article-title":"XCS based hidden firmware modification on embedded devices","author":"bencs\u00e1th","year":"2011","journal-title":"Proc IEEE 19th Int Conf Softw Telecommun Comput Netw (SoftCOM)"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/SmartGridComm.2015.7436314"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978370"},{"key":"ref83","first-page":"95","article-title":"A large-scale analysis of the security of embedded firmwares","author":"costin","year":"2014","journal-title":"Proc Usenix Security"},{"key":"ref80","article-title":"When firmware modifications attack: A case study of embedded exploitation","author":"cui","year":"2013","journal-title":"Proc NDSS"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1016\/j.istr.2012.10.005"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1016\/j.micpro.2015.12.005"},{"key":"ref86","doi-asserted-by":"crossref","first-page":"461","DOI":"10.1145\/2897845.2897886","article-title":"Smart locks: Lessons for securing commodity Internet of Things devices","author":"ho","year":"2016","journal-title":"Proc 11th ACM Asia Conf Comput Commun Security"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2015.7372591"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2011.01.009"},{"key":"ref200","first-page":"1015","article-title":"Hey, you have a problem: On the feasibility of large-scale Web vulnerability notification","author":"stock","year":"2016","journal-title":"Proc Usenix Security Symp"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2017.201"},{"key":"ref100","year":"2017","journal-title":"Brickerbot Permanent Denial-of-Service Attack (Update A)"},{"key":"ref209","doi-asserted-by":"publisher","DOI":"10.1109\/TSUSC.2018.2809665"},{"key":"ref203","year":"2018","journal-title":"GeoIP Database"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1109\/WF-IoT.2018.8355182"},{"key":"ref201","doi-asserted-by":"publisher","DOI":"10.1145\/2872427.2883039"},{"key":"ref202","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2497690"},{"key":"ref207","doi-asserted-by":"publisher","DOI":"10.1109\/WF-IoT.2018.8355139"},{"key":"ref208","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2018.1700332"},{"key":"ref205","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS.2018.8328273"},{"key":"ref206","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2812239"},{"key":"ref211","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2018.111122026"},{"key":"ref210","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2779180"},{"key":"ref212","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2018.1700167"},{"key":"ref213","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2018.1700685"},{"key":"ref214","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.08.009"},{"key":"ref215","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-017-0089-0"},{"key":"ref216","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2869350"},{"key":"ref217","year":"2018","journal-title":"2017 Study on Mobile and IoT Application Security"},{"key":"ref218","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2014.6710070"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC.2017.7986297"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2015.7120024"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/WF-IoT.2018.8355198"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1145\/2675744.2675760"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2017.2751640"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1145\/3131672.3131697"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-012-0164-7"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.2197\/ipsjjip.24.522"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1145\/3055186.3055192"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1109\/DCOSS.2012.48"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1155\/2014\/762891"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10329-7_12"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2016.7502992"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/ISSC.2017.7983603"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2016.103"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-018-5307-3"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2017.1600292CM"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23149"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1109\/PIMRC.2017.8292628"},{"key":"ref143","year":"2018","journal-title":"Shodan&#x00AE;"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.artmed.2012.09.003"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813703"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2011.10.015"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1145\/3019612.3019878"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1155\/2013\/794326"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2010.5717499"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2015.2394358"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1145\/1952982.1952995"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/ICACCI.2017.8126193"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-43283-0_4"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1145\/3229598.3229604"},{"key":"ref102","first-page":"1093","article-title":"Understanding the Mirai botnet","author":"antonakakis","year":"2017","journal-title":"Proc 26th USENIX Security Symp (USENIX Security)"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2010.5685228"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.31"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2017.7876109"},{"key":"ref10","author":"stanislav","year":"2015","journal-title":"Hacking iot A case study on baby monitor exposures and vulnerabilities"},{"key":"ref11","author":"franceschi-bicchierai","year":"2018","journal-title":"How This Internet of Things Stuffed Animal Can Be Remotely Turned Into a Spy Device"},{"key":"ref12","author":"franceschi-bicchierai","year":"2018","journal-title":"Internet of Things Teddy Bear Leaked 2 Million Parent and Kids Message Recordings"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2017.62"},{"key":"ref14","author":"herzberg","year":"2016","journal-title":"Breaking Down Mirai An IoT DDoS Botnet Analysis"},{"key":"ref15","author":"weagle","year":"2018","journal-title":"Financial Impact of Mirai DDoS Attack on Dyn Revealed in New Data"},{"key":"ref16","year":"2017","journal-title":"Cybersecurity Vulnerabilities Identified in St Jude Medical&#x2019;s Implantable Cardiac Devices and Merlin home Transmitter FDA Safety Communication"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS.2016.7527491"},{"key":"ref17","author":"prigg","year":"2014","journal-title":"How to Get Green Lights All the Way to Work Hackers Reveal How Simple It Is to Control Traffic Lights in Major Cities Using Just a Laptop"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.2016.7721741"},{"key":"ref18","author":"mcgoogan","year":"2016","journal-title":"BMW Audi and Toyota Cars Can Be Unlocked and Started With Hacked Radios"},{"key":"ref19","author":"guardian","year":"2016","journal-title":"Team of hackers take remote control of Tesla Model S from 12 miles away"},{"key":"ref119","first-page":"531","article-title":"FlowFence: Practical data protection for emerging IoT application frameworks","author":"fernandes","year":"2016","journal-title":"Proc Usenix Security Symp"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/JSEN.2016.2625821"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1145\/2753476.2753477"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516658"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1145\/2462096.2462117"},{"key":"ref120","doi-asserted-by":"crossref","first-page":"437","DOI":"10.1145\/2897845.2897900","article-title":"Automated dynamic firmware analysis at scale: A case study on embedded Web interfaces","author":"costin","year":"2016","journal-title":"Proc 11th ACM Asia Conf Comput Commun Security"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1109\/LES.2013.2276434"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23229"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2006.302095"}],"container-title":["IEEE Communications Surveys &amp; Tutorials"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielaam\/9739\/8809933\/8688434-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9739\/8809933\/08688434.pdf?arnumber=8688434","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,13]],"date-time":"2022-07-13T20:53:00Z","timestamp":1657745580000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8688434\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"references-count":218,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/comst.2019.2910750","relation":{},"ISSN":["1553-877X","2373-745X"],"issn-type":[{"value":"1553-877X","type":"electronic"},{"value":"2373-745X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]}}}