{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,14]],"date-time":"2025-05-14T05:40:11Z","timestamp":1747201211070,"version":"3.40.5"},"reference-count":35,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,2,17]],"date-time":"2025-02-17T00:00:00Z","timestamp":1739750400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,2,17]],"date-time":"2025-02-17T00:00:00Z","timestamp":1739750400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,2,17]]},"DOI":"10.1109\/icnc64010.2025.10993917","type":"proceedings-article","created":{"date-parts":[[2025,5,13]],"date-time":"2025-05-13T17:44:51Z","timestamp":1747158291000},"page":"382-386","source":"Crossref","is-referenced-by-count":0,"title":["On Software Security of Building Automation Systems"],"prefix":"10.1109","author":[{"given":"Christopher","family":"Morales-Gonzalez","sequence":"first","affiliation":[{"name":"University of Massachusetts Lowell"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Matthew","family":"Harper","sequence":"additional","affiliation":[{"name":"University of Massachusetts Lowell"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Boya","family":"Yuan","sequence":"additional","affiliation":[{"name":"University of Massachusetts Lowell"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xinwen","family":"Fu","sequence":"additional","affiliation":[{"name":"University of Massachusetts Lowell"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"first-page":"2024","article-title":"Building automation systems market size","year":"2024","key":"ref1"},{"article-title":"Hackers use ddos attack to cut heat to apartments","year":"2016","author":"Mathews","key":"ref2"},{"year":"2021","key":"ref3","article-title":"Cyberattacks shut down building automation systems"},{"year":"2022","key":"ref4","article-title":"Attacks on industrial control systems using shadowpad"},{"article-title":"Simple \u00e2\u0102\u0178frostygoop\u00e2\u0102\u0179 malware responsible for turning off ukrainians\u00e2\u0102\u0179 heat in january attack","year":"2024","author":"Vasquez","key":"ref5"},{"issue":"3","key":"ref6","first-page":"100236","article-title":"On building automation system security","volume-title":"High-Confidence Computing","volume":"4","author":"Morales-Gonzalez","year":"2024"},{"journal-title":"ASHRAE, Tech. Rep.","article-title":"Ansi\/ashrae standard 135 - 2020","year":"2020","key":"ref7"},{"journal-title":"v2.1 ed., KNX","article-title":"KNX Standard Specifications","year":"2013","key":"ref8"},{"journal-title":"Introduction to the LonWorks System","year":"1999","key":"ref9"},{"journal-title":"MODBUS APPLICATION PROTOCOL SPECIFICATION","year":"2012","key":"ref10"},{"volume-title":"ZigBee Specification","year":"2015","key":"ref11"},{"journal-title":"Z-Wave Device Class Specification","year":"2021","key":"ref12"},{"year":"2021","key":"ref13","article-title":"Radio technology"},{"key":"ref14","article-title":"Arcnet \u00e2\u0102\u0164 an embedded real-time network"},{"volume-title":"Application Note 158\/13 v02 KNX Data Security","year":"2013","key":"ref15"},{"volume-title":"Application Note 159\/13 v04 KNXnet\/IP Secure","year":"2013","key":"ref16"},{"volume-title":"MODBUS\/TCP Security","year":"2018","key":"ref17"},{"volume-title":"Security of EnOcean Radio Networks","year":"2018","key":"ref18"},{"volume-title":"ZigBee Pro Specification","year":"2023","author":"Alliance","key":"ref19"},{"journal-title":"Z-Wave Plus v2 Device Type Specification","year":"2021","key":"ref20"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.32"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690216"},{"author":"Miller","key":"ref23","article-title":"Fuzz testing of application reliability"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/96267.96279"},{"key":"ref25","article-title":"Find software bugs"},{"article-title":"AFL++: Combining incremental steps of fuzzing research","volume-title":"14th USENIX Workshop on Offensive Technologies (WOOT 20)","author":"Fioraldi","key":"ref26"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICST46399.2020.00062"},{"key":"ref28","article-title":"boofuzz: Network protocol fuzzing for humans"},{"key":"ref29","article-title":"Sulley"},{"key":"ref30","article-title":"Valgrind"},{"article-title":"Boofuzz: Network protocol fuzzing for humans","year":"2016","author":"Pereyda","key":"ref31"},{"article-title":"Sulley","year":"2007","author":"Amini","key":"ref32"},{"article-title":"SPIKE","year":"2017","author":"Ferreira","key":"ref33"},{"article-title":"American fuzzy lop","year":"2018","author":"Zalewski","key":"ref34"},{"article-title":"Winafl","year":"2016","author":"Fratric","key":"ref35"}],"event":{"name":"2025 International Conference on Computing, Networking and Communications (ICNC)","start":{"date-parts":[[2025,2,17]]},"location":"Honolulu, HI, USA","end":{"date-parts":[[2025,2,20]]}},"container-title":["2025 International Conference on Computing, Networking and Communications (ICNC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10993495\/10993515\/10993917.pdf?arnumber=10993917","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,14]],"date-time":"2025-05-14T05:13:06Z","timestamp":1747199586000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10993917\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,2,17]]},"references-count":35,"URL":"https:\/\/doi.org\/10.1109\/icnc64010.2025.10993917","relation":{},"subject":[],"published":{"date-parts":[[2025,2,17]]}}}