{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T16:46:31Z","timestamp":1783788391336,"version":"3.55.0"},"reference-count":222,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62122066"],"award-info":[{"award-number":["62122066"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U20A20182"],"award-info":[{"award-number":["U20A20182"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61872274"],"award-info":[{"award-number":["61872274"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2021ZD0112803"],"award-info":[{"award-number":["2021ZD0112803"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"name":"GRF\u2019s RIF","award":["R4032-18"],"award-info":[{"award-number":["R4032-18"]}]},{"name":"Key Research and Development Program of Zhejiang","award":["2022C01018"],"award-info":[{"award-number":["2022C01018"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Commun. Surv. Tutorials"],"published-print":{"date-parts":[[2022]]},"DOI":"10.1109\/comst.2022.3201557","type":"journal-article","created":{"date-parts":[[2022,8,29]],"date-time":"2022-08-29T21:04:49Z","timestamp":1661807089000},"page":"2292-2328","source":"Crossref","is-referenced-by-count":65,"title":["A Survey on IoT-Enabled Home Automation Systems: Attacks and Defenses"],"prefix":"10.1109","volume":"24","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5804-3279","authenticated-orcid":false,"given":"Zhibo","family":"Wang","sequence":"first","affiliation":[{"name":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Defang","family":"Liu","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yunan","family":"Sun","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2763-2695","authenticated-orcid":false,"given":"Xiaoyi","family":"Pang","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6221-8142","authenticated-orcid":false,"given":"Peng","family":"Sun","sequence":"additional","affiliation":[{"name":"College of Computer Science and Electronic Engineering, Hunan University, Changsha, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5240-5200","authenticated-orcid":false,"given":"Feng","family":"Lin","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7466-0384","authenticated-orcid":false,"given":"John C. S.","family":"Lui","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, The Chinese University of Hong Kong, Shatin, New Territories, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1969-2591","authenticated-orcid":false,"given":"Kui","family":"Ren","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref170","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2013.122313.130423"},{"key":"ref172","year":"2022","journal-title":"An Open Protocol to Allow Secure Authorization in a Simple and Standard Method From Web Mobile and Desktop Applications"},{"key":"ref171","doi-asserted-by":"publisher","DOI":"10.1109\/EuCNC.2016.7561070"},{"key":"ref174","doi-asserted-by":"publisher","DOI":"10.1145\/3266444.3266452"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.40"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2747560"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1145\/3317549.3323409"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1145\/3302505.3310073"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2019.2904364"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1145\/2899007.2899008"},{"key":"ref169","year":"2016","journal-title":"Backdooring the Frontdoor Hacking a &#x201C;perfectly secure&#x201D; smart lock"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3281411.3281440"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23282"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3338507.3358616"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CIT.2017.61"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00016"},{"key":"ref30","first-page":"1102","article-title":"If this then what? Controlling flows in IoT Apps","author":"bastys","year":"2018","journal-title":"Proc ACM SIGSAC Conf Comput Commun Security (CCS)"},{"key":"ref37","first-page":"2177","article-title":"IoT SENTINEL: Automated device-type identification for security enforcement in IoT","author":"miettinen","year":"2017","journal-title":"Proc IEEE Int Conf Distrib Comput Syst (ICDCS)"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2020.2988293"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.13052\/jcsm2245-1439.414"},{"key":"ref34","first-page":"1099","article-title":"FIRM-AFL: high-throughput greybox fuzzing of IoT firmware via augmented process emulation","author":"zheng","year":"2019","journal-title":"Proc Usenix Security Symp"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1109\/BigData47090.2019.9006156"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.1109\/IoTSMS.2018.8554432"},{"key":"ref185","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2017.04.002"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2014.10.010"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.1109\/PERCOM.2006.32"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2014.11.008"},{"key":"ref189","first-page":"1306","article-title":"Detection and resolution of normative conflicts in multi-agent systems: A literature survey","author":"dos santos","year":"2018","journal-title":"Proc ACM Int Conf Auton Agents MultiAgent Syst (AAMAS)"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-26832-3_12"},{"key":"ref187","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW.2019.00024"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2015.03.030"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300782"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23326"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2002.1176279"},{"key":"ref29","first-page":"1183","article-title":"Shattered chain of trust: Understanding security risks in cross-cloud IoT access delegation","author":"yuan","year":"2020","journal-title":"Proc Usenix Security Symp"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.sysarc.2019.101696"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2018.1331033"},{"key":"ref21","first-page":"123","article-title":"On the feasibility of DoS attack on smart door lock IoT network","author":"asad","year":"2020","journal-title":"Proc Security Comput Commun (SSCC)"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243865"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897886"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3345662"},{"key":"ref25","first-page":"182","article-title":"IoTBox: Sandbox mining to prevent interaction threats in IoT systems","author":"kang","year":"2021","journal-title":"Proc IEEE Conf Softw Testing Verif Valid (ICST)"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/s11235-018-0430-8"},{"key":"ref51","first-page":"74","article-title":"Program analysis of commodity IoT applications for security and privacy: Challenges and opportunities","volume":"52","author":"celik","year":"2019","journal-title":"ACM Comput Surveys"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.23111"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.13"},{"key":"ref156","first-page":"19","article-title":"Tracking information flow via delayed output&#x2014;Addressing privacy in IoT and emailing apps","author":"bastys","year":"2018","journal-title":"Proc Nordic Conf"},{"key":"ref155","first-page":"411","article-title":"&#x2018;It&#x2019;s the company, the government, you and I&#x2019;: User perceptions of responsibility for smart home privacy and security","author":"haney","year":"2021","journal-title":"Proc Usenix Security Symp"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1145\/2736277.2741630"},{"key":"ref152","year":"2022","journal-title":"What is Malware in Ads or Malvertising?"},{"key":"ref151","year":"2022","journal-title":"Your security partner for ad quality"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3409682"},{"key":"ref147","year":"2014","journal-title":"Auto humidity vent"},{"key":"ref148","year":"2015","journal-title":"Big turn OFF"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1145\/2939918.2939925"},{"key":"ref59","year":"2022","journal-title":"AWS AWS IoT device shadows"},{"key":"ref58","year":"2021","journal-title":"A multi-faceted language for the Java platform"},{"key":"ref57","year":"2020","journal-title":"Connect the services and devices you love to hyperlocal weather data"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-012-0935-5"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ICoICT.2013.6574587"},{"key":"ref54","year":"2016","journal-title":"Oomi-camera"},{"key":"ref53","author":"uel de la cruz","year":"2020","journal-title":"SmartThing&#x2019;s hub V3 review"},{"key":"ref52","year":"2022","journal-title":"Hubitat elevation is a powerful home automation platform"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2899758"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2010.07.006"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1145\/3444963"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2019.2914190"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1145\/3460319.3464838"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046779"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1145\/3333165.3333169"},{"key":"ref161","author":"williams","year":"2016","journal-title":"Sony kills off secret backdoor in 80 Internet-connected CCTV models"},{"key":"ref160","author":"osborne","year":"2016","journal-title":"Surveillance cameras sold on Amazon infected with malware"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3239566"},{"key":"ref3","first-page":"54","article-title":"A survey on big multimedia data processing and management in smart cities","volume":"52","author":"usman","year":"2019","journal-title":"ACM Comput Surveys"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2016.7840829"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/GLOBECOM42002.2020.9348000"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1109\/WI-IAT.2013.123"},{"key":"ref8","year":"2017","journal-title":"Smart home Everything you need to know"},{"key":"ref7","first-page":"44","article-title":"A survey of IIoT protocols: A measure of vulnerability risk analysis based on CVSS","volume":"53","author":"figueroa","year":"2020","journal-title":"ACM Comput Surveys"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2021.3064507"},{"key":"ref157","author":"lowenstein","year":"2021","journal-title":"Apps for popular smart home devices contain security flaws"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1145\/3360664.3360670"},{"key":"ref9","year":"2022","journal-title":"Number of subscriptions for smart home services worldwide from 2016 to 2022"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-77970-2_39"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SmartWorld-UIC-ATC-SCALCOM-IOP-SCI.2019.00094"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2320093"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2556288.2557420"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23051"},{"key":"ref41","first-page":"194","article-title":"Smart home control through unwitting trigger-action programming","author":"peroni","year":"2016","journal-title":"Proc Int Conf Distrib Multimedia Syst (DMS)"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23119"},{"key":"ref43","first-page":"1133","article-title":"Discovering and understanding the security hazards in the interactions between IoT devices, mobile apps, and clouds on smart home platforms","author":"zhou","year":"2019","journal-title":"Proc Usenix Security Symp"},{"key":"ref73","author":"lakshmanan","year":"2020","journal-title":"House automation using home assistant"},{"key":"ref72","year":"2022","journal-title":"AWS Amazon RDS"},{"key":"ref71","year":"2022","journal-title":"Amazon AWS data pipeline"},{"key":"ref70","year":"2022","journal-title":"AWS AWS redshift"},{"key":"ref76","year":"2021","journal-title":"The octoverse in"},{"key":"ref77","year":"2022","journal-title":"The Dynamic Module System for Java?"},{"key":"ref74","year":"2017","journal-title":"No privacy compromise home automation"},{"key":"ref75","year":"2021","journal-title":"What is home assistant and what it can do?"},{"key":"ref78","year":"2020","journal-title":"Eclipse Project"},{"key":"ref79","year":"2022","journal-title":"openHAB empowering the smart home"},{"key":"ref60","year":"2022","journal-title":"Amazon Amazon DynamoDB"},{"key":"ref62","year":"2022","journal-title":"Amazon Machine Learning Amazon"},{"key":"ref61","year":"2022","journal-title":"AWS Amazon S3"},{"key":"ref63","year":"2021","journal-title":"Conversational Actions"},{"key":"ref64","year":"2014","journal-title":"iMore HomeKit in iOS 8 Explained"},{"key":"ref65","year":"2021","journal-title":"Apple HomeKitADK"},{"key":"ref66","year":"2019","journal-title":"What&#x2019;s new in HomeKit"},{"key":"ref67","year":"2022","journal-title":"IFTTT channels"},{"key":"ref68","year":"2022","journal-title":"Creating applets"},{"key":"ref69","year":"2017","journal-title":"Kafka APACHE KAFKA"},{"key":"ref197","article-title":"On data-driven curation, learning, and analysis for inferring evolving Internet-of-Things (IoT) botnets in the wild","volume":"91","author":"pour","year":"2020","journal-title":"Comput Security"},{"key":"ref198","doi-asserted-by":"publisher","DOI":"10.3390\/s20071863"},{"key":"ref199","year":"2022","journal-title":"SmartThings ANDS"},{"key":"ref193","year":"2022","journal-title":"Shodan Search engine for the internet of everything"},{"key":"ref194","first-page":"327","article-title":"Acquisitional rule-based engine for discovering Internet-of-Thing devices","author":"feng","year":"2018","journal-title":"Proc Usenix Security Symp"},{"key":"ref195","year":"2014","journal-title":"Honeypot (Computing)"},{"key":"ref196","year":"2022","journal-title":"National Vulnerability Database"},{"key":"ref95","first-page":"1169","article-title":"All things considered: An analysis of IoT devices on home networks","author":"kumar","year":"2019","journal-title":"Proc Usenix Security Symp"},{"key":"ref94","year":"2019","journal-title":"CCIDconsulting 2019 China cybersecurity development white paper"},{"key":"ref190","first-page":"531","article-title":"FlowFence: Practical data protection for emerging IoT application frameworks","author":"fernandes","year":"2016","journal-title":"Proc Usenix Security Symp"},{"key":"ref93","year":"2022","journal-title":"HomeKit support for the impatient"},{"key":"ref191","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133963"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.44"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23149"},{"key":"ref91","year":"2020","journal-title":"Privacy Policy"},{"key":"ref90","year":"2021","journal-title":"Securing access to openHAB"},{"key":"ref98","author":"fouladi","year":"2013","journal-title":"Security Evaluation of the Z-Wave Wireless Protocol"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48063.2020.00056"},{"key":"ref96","first-page":"2631","article-title":"Light commands: Laser-based audio injection attacks on voice-controllable systems","author":"sugawara","year":"2020","journal-title":"Proc Usenix Security Symp"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2013.475"},{"key":"ref82","author":"whitwam","year":"2019","journal-title":"Most IFTTT Gmail features will stop working next week"},{"key":"ref81","year":"2022","journal-title":"The best smart home systems 2022 Top ecosystems explained"},{"key":"ref84","year":"0","journal-title":"Security in AWS IoT"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052709"},{"key":"ref80","year":"2022","journal-title":"openHAB REST API"},{"key":"ref89","year":"2021","journal-title":"Apple platform security protection"},{"key":"ref85","year":"2022","journal-title":"Authorization and permissions"},{"key":"ref86","year":"2022","journal-title":"Data security and privacy on devices that work with assistant"},{"key":"ref87","year":"2021","journal-title":"Policies for actions on Google"},{"key":"ref88","year":"2021","journal-title":"Building trust takes more than just legal compliance"},{"key":"ref200","doi-asserted-by":"publisher","DOI":"10.1007\/s11280-019-00746-1"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2016.7448561"},{"key":"ref100","author":"lecount","year":"2020","journal-title":"Firmware attacks What they are & how i can protect myself"},{"key":"ref209","first-page":"218","article-title":"TAESim: A Testbed for IoT security analysis of trigger-action environment","author":"ban","year":"2021","journal-title":"Proc Comput Security Int Workshops CyberICPS SECPRE ADIoT SPOSE CPS4CIP CDT SECOMANE"},{"key":"ref203","year":"2015","journal-title":"Test Fitness wristbands reveal data"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1109\/WiMOB.2015.7347956"},{"key":"ref201","doi-asserted-by":"publisher","DOI":"10.1145\/3055245.3055255"},{"key":"ref202","first-page":"1","article-title":"Bluetooth: With low energy comes low security","author":"ryan","year":"2013","journal-title":"Proc USENIX Workshop Offensive Technol (WOOT)"},{"key":"ref207","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2016.2598968"},{"key":"ref208","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2012.2185493"},{"key":"ref205","author":"hron","year":"2018","journal-title":"Are Smart Homes Vulnerable to Hacking?"},{"key":"ref206","doi-asserted-by":"publisher","DOI":"10.1109\/MASS.2018.00047"},{"key":"ref211","doi-asserted-by":"publisher","DOI":"10.1145\/3117811.3117823"},{"key":"ref210","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24368"},{"key":"ref212","doi-asserted-by":"publisher","DOI":"10.1145\/3209582.3209591"},{"key":"ref213","first-page":"527","article-title":"WHYPER: Towards automating risk assessment of mobile applications","author":"pandita","year":"2013","journal-title":"Proc Usenix Security Symp"},{"key":"ref214","first-page":"361","article-title":"SmartAuth: User-centered authorization for the Internet of Things","author":"tian","year":"2017","journal-title":"Proc Usenix Security Symp"},{"key":"ref215","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243820"},{"key":"ref216","first-page":"1","article-title":"Signing into one billion mobile app accounts effortlessly with oAuth2.0","author":"yang","year":"2016","journal-title":"Proc BlackHat"},{"key":"ref217","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155459"},{"key":"ref218","first-page":"147","article-title":"Soteria: Automated IoT safety and security analysis","author":"celik","year":"2018","journal-title":"Proc Usenix Security Symp"},{"key":"ref219","doi-asserted-by":"publisher","DOI":"10.1145\/1592434.1592438"},{"key":"ref220","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-69850-0_12"},{"key":"ref222","doi-asserted-by":"publisher","DOI":"10.1145\/2993422.2993426"},{"key":"ref221","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00043"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1145\/2632048.2632107"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1109\/IECON.2017.8217429"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423341"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2016.2558521"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1145\/3392058"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-017-2139-y"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-37337-5_1"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2021.07.083"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2017.05.013"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2018.8622064"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00051"},{"key":"ref136","first-page":"353","article-title":"From the aether to the Ethernet&#x2014;Attacking the Internet using broadcast digital television","author":"oren","year":"2014","journal-title":"Proc Usenix Security Symp"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1109\/CTS.2015.7210446"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/WAINA.2013.225"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1109\/CCNC.2010.5421782"},{"key":"ref139","article-title":"Discovering physical interaction vulnerabilities in IoT deployments","author":"ozmen","year":"2021","journal-title":"arXiv 2102 01812"},{"key":"ref140","first-page":"33","article-title":"Detecting anomalous sensor events in smart home data for enhancing the living experience","author":"jakkula","year":"2011","journal-title":"Proc AAAI"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2019.i2.199-224"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-48324-4_31"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/HASE.2008.26"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660358"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3122816"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1109\/ICCPS.2016.7479068"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2444095"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/TWC.2008.070194"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/TWC.2012.051512.111481"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2392564"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1145\/1741866.1741882"},{"key":"ref105","article-title":"Logic bugs in IoT platforms and systems: A review","author":"zhou","year":"2019","journal-title":"arXiv 1912 13410"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2021.102728"},{"key":"ref103","first-page":"49","article-title":"CommanderSong: A systematic approach for practical adversarial voice recognition","author":"yuan","year":"2018","journal-title":"Proc Usenix Security Symp"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2878035"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/CCNC.2015.7158097"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2015.7417597"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/ACSSC.2011.6189999"},{"key":"ref10","article-title":"Home automation market","year":"2022"},{"key":"ref11","year":"2022","journal-title":"SmartThings One simple home system A world of possibilities"},{"key":"ref12","year":"2022","journal-title":"Your home at your command"},{"key":"ref13","year":"2022","journal-title":"AWS AWS IOT"},{"key":"ref14","year":"2022","journal-title":"IFTTT every thing works better together"},{"key":"ref15","year":"2022","journal-title":"Google Home"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24068"},{"key":"ref16","first-page":"1687","article-title":"Sensitive information tracking in commodity IoT","author":"celik","year":"2018","journal-title":"Proc Usenix Security Symp"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134052"},{"key":"ref17","year":"2021","journal-title":"Which? How a smart home could be at risk from hackers"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3384419.3430436"},{"key":"ref119","first-page":"33","article-title":"Skill squatting attacks on Amazon Alexa","author":"kumar","year":"2018","journal-title":"Proc Usenix Security Symp"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/Cybermatics_2018.2018.00043"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2015.80"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2707465"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329813"},{"key":"ref115","first-page":"727","article-title":"Man-in-the-browser attacks against IoT devices: A study of smart homes","author":"rauti","year":"2020","journal-title":"Proc Int Conf Soft Comput Pattern Recognit (SoCPaR)"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2017.08.043"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1109\/ITNAC46935.2019.9077977"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/OJCOMS.2021.3054066"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2009.090404"}],"container-title":["IEEE Communications Surveys &amp; Tutorials"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9739\/9956928\/09869705.pdf?arnumber=9869705","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,12]],"date-time":"2022-12-12T19:17:52Z","timestamp":1670872672000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9869705\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"references-count":222,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/comst.2022.3201557","relation":{},"ISSN":["1553-877X","2373-745X"],"issn-type":[{"value":"1553-877X","type":"electronic"},{"value":"2373-745X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]}}}