{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T15:54:56Z","timestamp":1783007696283,"version":"3.54.5"},"reference-count":48,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"17","license":[{"start":{"date-parts":[[2024,9,1]],"date-time":"2024-09-01T00:00:00Z","timestamp":1725148800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,9,1]],"date-time":"2024-09-01T00:00:00Z","timestamp":1725148800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,9,1]],"date-time":"2024-09-01T00:00:00Z","timestamp":1725148800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2020YFB1807500"],"award-info":[{"award-number":["2020YFB1807500"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Internet Things J."],"published-print":{"date-parts":[[2024,9,1]]},"DOI":"10.1109\/jiot.2024.3400858","type":"journal-article","created":{"date-parts":[[2024,5,14]],"date-time":"2024-05-14T17:35:51Z","timestamp":1715708151000},"page":"28267-28280","source":"Crossref","is-referenced-by-count":5,"title":["Detection and Analysis of Broken Access Control Vulnerabilities in App\u2013Cloud Interaction in IoT"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-6715-4983","authenticated-orcid":false,"given":"Zehui","family":"Zhang","sequence":"first","affiliation":[{"name":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5898-7317","authenticated-orcid":false,"given":"Futai","family":"Zou","sequence":"additional","affiliation":[{"name":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-1452-5252","authenticated-orcid":false,"given":"Jianan","family":"Hong","sequence":"additional","affiliation":[{"name":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3236-4805","authenticated-orcid":false,"given":"Libo","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4530-5118","authenticated-orcid":false,"given":"Ping","family":"Yi","sequence":"additional","affiliation":[{"name":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"State of IoT 2022: Number of Connected IoT Devices Growing % to 14.4 Billion Globally","year":"2023"},{"key":"ref2","volume-title":"Unpatched Dahua Cams Vulnerable to Unauthenticated Remote Access","year":"2021"},{"key":"ref3","volume-title":"Critical Bug Impacting Millions of IoT Devices Lets Hackers Spy on You","year":"2021"},{"key":"ref4","article-title":"OWASP top ten.","year":"2021"},{"key":"ref5","first-page":"1183","article-title":"Shattered chain of trust: Understanding security risks in cross-cloud IoT access delegation","volume-title":"Proc. USENIX Secur. Symp.","author":"Yuan"},{"key":"ref6","first-page":"1102","article-title":"If this then what? Controlling flows in IoT apps","volume-title":"Proc. ACM SIGSAC Conf. Comput. Commun. Secur.","author":"Bastys"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2019.06.017"},{"key":"ref8","first-page":"1133","article-title":"Discovering and understanding the security hazards in the interactions between IoT devices, mobile apps, and cloud on smart home platforms","volume-title":"Proc. USENIX Secur. Symp.","author":"Zhou"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00034"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICC45855.2022.9838581"},{"key":"ref11","article-title":"Burp suite.","year":"2023"},{"key":"ref12","article-title":"Charles.","year":"2023"},{"key":"ref13","article-title":"Defeating android certificate pinning with Frida.","year":"2023"},{"key":"ref14","article-title":"CVE.","year":"2023"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24368"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/DSN53405.2022.00055"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.5555\/3277203.3277223"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3162312"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560590"},{"key":"ref20","volume-title":"Mitmproxy: A Free and Open Source Interactive HTTPS Proxy, Version 9.0","author":"Cortesi","year":"2010"},{"key":"ref21","volume-title":"Frida a World-Class Dynamic Instrumentation Toolkit"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3363824"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1147\/rd.14.0309"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1108\/eb026526"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4648"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1002\/ett.4460050406"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-5906-5"},{"key":"ref28","article-title":"Pysoot.","year":"2023"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359826"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484543"},{"key":"ref31","article-title":"Xiaomi.","year":"2023"},{"key":"ref32","article-title":"EZVIZ.","year":"2023"},{"key":"ref33","first-page":"1","article-title":"ContexloT: Towards providing contextual integrity to appified IoT platforms","volume-title":"Proc. NDSS","author":"Jia"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243817"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48063.2020.00056"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/sp46215.2023.10179475"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3216297"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3179294"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00051"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560680"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23159"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00066"},{"key":"ref43","first-page":"1099","article-title":"FIRM-AFL: High-throughput Greybox fuzzing of IoT firmware via augmented process emulation","volume-title":"Proc. USENIX Secur. Symp.","author":"Zheng"},{"key":"ref44","first-page":"1237","article-title":"P2im: Scalable and hardware-independent firmware testing via automatic peripheral interface modeling","volume-title":"Proc. 29th USENIX Conf. Secur. Symp.","author":"Feng"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559367"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833610"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3512213"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103157"}],"container-title":["IEEE Internet of Things Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6488907\/10643444\/10530330.pdf?arnumber=10530330","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,2]],"date-time":"2024-09-02T04:04:43Z","timestamp":1725249883000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10530330\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,9,1]]},"references-count":48,"journal-issue":{"issue":"17"},"URL":"https:\/\/doi.org\/10.1109\/jiot.2024.3400858","relation":{},"ISSN":["2327-4662","2372-2541"],"issn-type":[{"value":"2327-4662","type":"electronic"},{"value":"2372-2541","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,9,1]]}}}