{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,29]],"date-time":"2026-06-29T19:51:46Z","timestamp":1782762706783,"version":"3.54.5"},"reference-count":101,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"13","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62171217"],"award-info":[{"award-number":["62171217"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472234"],"award-info":[{"award-number":["62472234"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62502226"],"award-info":[{"award-number":["62502226"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100010023","name":"Natural Science Foundation of the Jiangsu Higher Education Institutions of China","doi-asserted-by":"publisher","award":["24KJB520030"],"award-info":[{"award-number":["24KJB520030"]}],"id":[{"id":"10.13039\/501100010023","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100010023","name":"Natural Science Foundation of the Jiangsu Higher Education Institutions of China","doi-asserted-by":"publisher","award":["25KJB520029"],"award-info":[{"award-number":["25KJB520029"]}],"id":[{"id":"10.13039\/501100010023","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Natural Science Research Start-Up Foundation of Recruiting Talents of Nanjing University of Posts and Telecommunications","award":["NY224001"],"award-info":[{"award-number":["NY224001"]}]},{"name":"Natural Science Research Start-Up Foundation of Recruiting Talents of Nanjing University of Posts and Telecommunications","award":["NY223164"],"award-info":[{"award-number":["NY223164"]}]},{"name":"Natural Science Research Start-Up Foundation of Recruiting Talents of Nanjing University of Posts and Telecommunications","award":["NY224143"],"award-info":[{"award-number":["NY224143"]}]},{"name":"Natural Science Research Start-Up Foundation of Recruiting Talents of Nanjing University of Posts and Telecommunications","award":["NY224023"],"award-info":[{"award-number":["NY224023"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Internet Things J."],"published-print":{"date-parts":[[2026,7,1]]},"DOI":"10.1109\/jiot.2026.3686461","type":"journal-article","created":{"date-parts":[[2026,4,22]],"date-time":"2026-04-22T19:51:17Z","timestamp":1776887477000},"page":"29723-29745","source":"Crossref","is-referenced-by-count":0,"title":["NASchecker: Automatically Identifying the Performance, Security, and Privacy Issues of NAS Devices"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-6662-5942","authenticated-orcid":false,"given":"Guangyue","family":"Ren","sequence":"first","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-4496-0978","authenticated-orcid":false,"given":"Jincheng","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1457-6329","authenticated-orcid":false,"given":"Le","family":"Yu","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1676-8263","authenticated-orcid":false,"given":"Liping","family":"Han","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9808-4967","authenticated-orcid":false,"given":"Mingzhe","family":"Hu","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6248-1298","authenticated-orcid":false,"given":"Wei","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7649-2385","authenticated-orcid":false,"given":"Tingting","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9082-3208","authenticated-orcid":false,"given":"Xiapu","family":"Luo","sequence":"additional","affiliation":[{"name":"Faculty of Computer and Mathematical Sciences, The Hong Kong Polytechnic University, Kowloon, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1888-7001","authenticated-orcid":false,"given":"Guozi","family":"Sun","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"What is NAS (Network Attached Storage) and Why is NAS Important for Small Businesses?","author":"Blog","year":"2024"},{"key":"ref2","volume-title":"Network Attached Storage (nas) Statistics and Fact","author":"D\u2019Souza","year":"2024"},{"key":"ref3","volume-title":"NAS (Network Attached Storage) vs. Cloud: What to Choose?","year":"2013"},{"key":"ref4","volume-title":"NAS Vs. the Cloud: Which Remote Storage is Right for You?","author":"Betts","year":"2022"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2016.2626784"},{"key":"ref6","first-page":"775","article-title":"Remote regions: A simple abstraction for remote memory","volume-title":"Proc. USENIX ATC","author":"Aguilera"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504762"},{"key":"ref8","volume-title":"How To Compress a File","author":"Harris","year":"2024"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SC.2012.14"},{"key":"ref10","volume-title":"The Best NAS (Network Attached Storage) Devices for 2024","author":"Delaney","year":"2024"},{"key":"ref11","volume-title":"Protecting NAS From Malware","year":"2017"},{"key":"ref12","volume-title":"Thousands of D-Link NAS Devices Have Serious Backdoor Security Issues","year":"2024"},{"key":"ref13","volume-title":"NAS Security: What to Expect and How to Secure Your NAS","year":"2024"},{"key":"ref14","volume-title":"Reinforcing NAS Security Against Pivoting Threats","year":"2022"},{"issue":"5","key":"ref15","first-page":"17","article-title":"Review of research on ransomware in industrial control systems","volume":"2","author":"Dai","year":"2024","journal-title":"J. Cybersecurity"},{"key":"ref16","volume-title":"General Data Protection Regulation (GDPR)","year":"2024"},{"key":"ref17","volume-title":"The PRC Personal Information Protection Law (Final): A Full Translation","year":"2021"},{"key":"ref18","volume-title":"Secure Personal Data","author":"Board","year":"2024"},{"key":"ref19","volume-title":"GDPR: Consent","year":"2018"},{"key":"ref20","article-title":"Measuring and improving single-user NAS performance","author":"Tony","year":"2013"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.25299\/itjrd.2022.5712"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2016.03.025"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2398776.2398827"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987465"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-45065-5_16"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2015.2427191"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CLOUD.2013.25"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.5120\/ijca2017913520"},{"key":"ref29","volume-title":"LG Network-Attached Storage Devices Can be Easily Hacked","year":"2018"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2013.6566769"},{"key":"ref31","first-page":"985","article-title":"Actions speak louder than words: Entity-sensitive privacy policy and data flow analysis with PoliCheck","volume-title":"Proc. USENIX Secur.","author":"Andow"},{"key":"ref32","first-page":"3667","article-title":"Share first, ask later (or never?) studying violations of GDPR\u2019s explicit consent in Android apps","volume-title":"Proc. USENIX Secur.","author":"Nguyen"},{"key":"ref33","volume-title":"NASchecker","year":"2026"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.heliyon.2024.e39192"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2018.11.025"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.5220\/0011783000003405"},{"key":"ref37","volume-title":"What is Wannacry Ransomware?","year":"2024"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1016\/j.pmcj.2010.07.005"},{"key":"ref39","volume-title":"Android TCPdump: TCPdump for Android\u2014Binary","year":"2024"},{"key":"ref40","volume-title":"An Interactive TLS-Capable Intercepting HTTP Proxy for Penetration Testers and Software Developers","year":"2024"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3174"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/CCECE.2001.933564"},{"key":"ref43","volume-title":"How Google Drive Handles Huge File Uploads","author":"Jain","year":"2022"},{"key":"ref44","volume-title":"File Bundling and HTTP\/2: Rethinking Best Practices","year":"2016"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSN.2010.104"},{"key":"ref46","volume-title":"What is a Replay Attack?","year":"2024"},{"key":"ref47","volume-title":"What is a Replay Attack?","year":"2024"},{"key":"ref48","volume-title":"CVE-2017-7494","year":"2017"},{"key":"ref49","volume-title":"Storagecrypt Ransomware Infects NAS Devices!","year":"2024"},{"key":"ref50","volume-title":"Owasp Top 10 Security Risks: A05: Injection","year":"2025"},{"key":"ref51","volume-title":"Owasp Top 10 A01 Security Risks: Broken Access Control","year":"2025"},{"key":"ref52","volume-title":"Cwe-119: Improper Restriction of Operations Within the Bounds of a Memory Buffer","year":"2025"},{"key":"ref53","first-page":"781","article-title":"BootStomp: On the security of bootloaders in mobile devices","volume-title":"Proc. USENIX Secur.","author":"Redini"},{"key":"ref54","volume-title":"CWE-20: Improper Input Validation","year":"2023"},{"key":"ref55","first-page":"177","article-title":"Automatic generation of data-oriented exploits","volume-title":"Proc. USENIX Secur.","author":"Hu"},{"key":"ref56","first-page":"763","article-title":"Automatic heap layout manipulation for exploitation","volume-title":"Proc. USENIX Secur.","author":"Heelan"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2017.7884635"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.44"},{"key":"ref59","volume-title":"CWE-22: Improper Limitation of a Pathname To a Restricted Directory (\u2019Path Traversal\u2019)","year":"2023"},{"key":"ref60","volume-title":"CAPEC-132: Symlink Attack","year":"2025"},{"key":"ref61","volume-title":"Cross Site Request Forgery (CSRF)","year":"2025"},{"key":"ref62","first-page":"95","article-title":"A Large-scale analysis of the security of embedded firmwares","volume-title":"Proc. USENIX Secur.","author":"Costin"},{"key":"ref63","first-page":"1949","article-title":"MOPT: Optimized mutation scheduling for fuzzers","volume-title":"Proc. USENIX Secur.","author":"Lyu"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00036"},{"key":"ref65","first-page":"303","article-title":"Sharing more and checking less: Leveraging common input keywords to detect bugs in embedded systems","volume-title":"Proc. USENIX Secur.","author":"Chen"},{"key":"ref66","first-page":"7123","article-title":"Operation mango: Scalable discovery of taint-style vulnerabilities in binary firmware services","volume-title":"Proc. USENIX Secur.","author":"Gibbs"},{"key":"ref67","volume-title":"Hacking-Proof: The Security Features of Golang","author":"Chakravorty","year":"2023"},{"key":"ref68","volume-title":"What is Personally Identifiable Information (PII)?","year":"2024"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2886875"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884855"},{"issue":"5","key":"ref71","first-page":"2","article-title":"Review of research on authentication key agreement protocols for Internet of Things","volume":"2","author":"Wang","year":"2024","journal-title":"J. Cybersecurity"},{"key":"ref72","volume-title":"Privacy Policy for Android Apps","year":"2024"},{"key":"ref73","volume-title":"Your Washing Machine Could be Sending 3.7 Gb of Data a Day\u2014LG Washing Machine Owner Disconnected His Device From Wi-Fi After Noticing Excessive Outgoing Daily Data Traffic","year":"2024"},{"key":"ref74","volume-title":"Write Automated Tests With Ui Automator","author":"Developers","year":"2024"},{"key":"ref75","volume-title":"Choosing the Right Compression Algorithm for Data Engineering Workloads","year":"2025"},{"key":"ref76","volume-title":"Nmap: Discover Your Network","year":"2016"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359826"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484543"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00127"},{"key":"ref80","volume-title":"EXT4 General Information","year":"2025"},{"key":"ref81","volume-title":"Samba","year":"2025"},{"key":"ref82","volume-title":"Webdav","year":"2025"},{"key":"ref83","volume-title":"Binwalk: Firmware Analysis Tool","author":"Heffner","year":"2023"},{"key":"ref84","first-page":"7067","article-title":"Leveraging semantic relations in code and data to enhance taint analysis of embedded systems","volume-title":"Proc. USENIX Secur.","author":"Zhao"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2024.3477563"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00137"},{"key":"ref87","volume-title":"RFC 9110: HTTP Semantics","year":"2024"},{"key":"ref88","volume-title":"HTTP Response Status Codes: 200 Ok","year":"2024"},{"key":"ref89","volume-title":"Bearer Authentication","year":"2024"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1145\/1644893.1644927"},{"key":"ref91","volume-title":"Block Exchange Protocol V1","year":"2014"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568286"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23034"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.24346"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690307"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23415"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427294"},{"key":"ref98","article-title":"Greenhouse: Single-service rehosting of linux-based firmware binaries in user-space emulation","volume-title":"Proc. USENIX Secur.","author":"Tay"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1016\/S1353-4858(04)00065-0"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.12688\/openreseurope.16631.1"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.5220\/0006294200001535"}],"container-title":["IEEE Internet of Things Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6488907\/11581326\/11493501.pdf?arnumber=11493501","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,29]],"date-time":"2026-06-29T19:41:19Z","timestamp":1782762079000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11493501\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7,1]]},"references-count":101,"journal-issue":{"issue":"13"},"URL":"https:\/\/doi.org\/10.1109\/jiot.2026.3686461","relation":{},"ISSN":["2327-4662","2372-2541"],"issn-type":[{"value":"2327-4662","type":"electronic"},{"value":"2372-2541","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7,1]]}}}