{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T20:26:51Z","timestamp":1783628811579,"version":"3.55.0"},"reference-count":52,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"14","license":[{"start":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T00:00:00Z","timestamp":1784073600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T00:00:00Z","timestamp":1784073600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T00:00:00Z","timestamp":1784073600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Funda\u00e7\u00e3o para a Ci\u00eancia e a Tecnologia (FCT), I.P., within the scope of the Research Unit","award":["UID\/00326"],"award-info":[{"award-number":["UID\/00326"]}]},{"name":"Centre for Informatics and Systems of the University of Coimbra","award":["UIDB\/00326\/2020"],"award-info":[{"award-number":["UIDB\/00326\/2020"]}]},{"name":"Centre for Informatics and Systems of the University of Coimbra","award":["UID\/00326\/2025"],"award-info":[{"award-number":["UID\/00326\/2025"]}]},{"name":"Agenda \u201cNEXUS\u2013Pacto de Inova\u00e7\u00e3o\u2013Transi\u00e7\u00e3o Verde e Digital Para Transportes, Log\u00cdstica e Mobilidade\u201d through Portuguese Recovery and Resilience Plan (PRR)","award":["C645112083-00000059"],"award-info":[{"award-number":["C645112083-00000059"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Internet Things J."],"published-print":{"date-parts":[[2026,7,15]]},"DOI":"10.1109\/jiot.2026.3703749","type":"journal-article","created":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T19:48:35Z","timestamp":1781552915000},"page":"30303-30324","source":"Crossref","is-referenced-by-count":0,"title":["A Comprehensive Empirical Study of Security Vulnerabilities in IoT Gateway Software"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3944-0068","authenticated-orcid":false,"given":"Diego R.","family":"Gomes","sequence":"first","affiliation":[{"name":"Department of Informatics Engineering, CISUC\/LASI, University of Coimbra, Coimbra, Portugal"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4007-3891","authenticated-orcid":false,"given":"Fernando A. Aires","family":"Lins","sequence":"additional","affiliation":[{"name":"Department of Applied Computing, Federal Rural University of Pernambuco, Recife, Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5103-8541","authenticated-orcid":false,"given":"Marco","family":"Vieira","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of North Carolina at Charlotte, Charlotte, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"ACM Digital Library","year":"2025"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2024.101333"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-48256-5_9"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.102213.00229"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2024.3506976"},{"key":"ref6","volume-title":"CVE Details\u2014Security Vulnerability Database","year":"2025"},{"key":"ref7","volume-title":"Cybersecurity Labelling Scheme (CLS)","year":"2020"},{"key":"ref8","volume-title":"ScienceDirect","year":"2025"},{"key":"ref9","volume-title":"Scopus","year":"2025"},{"key":"ref10","volume-title":"Cyber Security for Consumer Internet of Things: Baseline Requirements","year":"2020"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/AIAM48774.2019.00039"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2022.3231567"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.3390\/app142210513"},{"key":"ref14","volume-title":"Guidelines for Securing the Internet of Things: Secure Supply Chain for IoT","year":"2020"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2832041"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.5753\/jisa.2024.3834"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3745019"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/s10922-023-09754-z"},{"key":"ref19","article-title":"A comprehensive empirical study of security vulnerabilities in IoT gateway source code - dataset","author":"Gomes","year":"2025"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2022.01.022"},{"key":"ref21","year":"2025","journal-title":"IEEE Xplore Digital Library"},{"key":"ref22","volume-title":"Router and IoT Vulnerabilities: Insecure By Design"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.3390\/s21134359"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.5220\/0011784400003405"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3041049"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534380"},{"key":"ref27","volume-title":"Common Platform Enumeration (CPE)","year":"2025"},{"key":"ref28","volume-title":"Common Vulnerabilities and Exposures (CVE)","year":"2025"},{"key":"ref29","volume-title":"CWE VIEW: Research Concepts","year":"2025"},{"key":"ref30","volume-title":"CWE VIEW: Weaknesses for Simplified Mapping of Published Vulnerabilities","year":"2025"},{"key":"ref31","volume-title":"Root Cause Mapping","year":"2024"},{"key":"ref32","volume-title":"CWE Mapping Guidance - Common Terms Cheatsheet","year":"2021"},{"key":"ref33","volume-title":"Cwe View 1400: Comprehensive Categorization for Software Assurance Trends","year":"2025"},{"key":"ref34","volume-title":"NVD Vulnerability Metrics \u2013 Common Vulnerability Scoring System (CVSS)"},{"key":"ref35","volume-title":"Trusted IoT Device Network-Layer Onboarding and Lifecycle Management Community of Interest","year":"2021"},{"key":"ref36","volume-title":"NVD CPE Search","year":"2025"},{"key":"ref37","volume-title":"National Vulnerability Database\u2014CVE Search","year":"2025"},{"key":"ref38","volume-title":"National Vulnerability Database\u2014CVE API","year":"2025"},{"key":"ref39","volume-title":"OWASP IoT Top 10 2018 Mapping Project","year":"2018"},{"key":"ref40","volume-title":"OWASP Community Pages: Vulnerability","year":"2024"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.3390\/s20215969"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3703790.3703820"},{"key":"ref43","volume-title":"State of IoT 2025: Number of Connected IoT Devices Growing 14% To 21.1 Billion Globally","year":"2023"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3691628"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/iri58017.2023.00009"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3608951"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CNS48642.2020.9162256"},{"key":"ref48","volume-title":"SpringerLink","year":"2025"},{"key":"ref49","volume-title":"Internet of Things - Worldwide","year":"2025"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-022-00633-3"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2023.3334017"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3279846"}],"container-title":["IEEE Internet of Things Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6488907\/11599885\/11563472.pdf?arnumber=11563472","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T19:45:10Z","timestamp":1783626310000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11563472\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7,15]]},"references-count":52,"journal-issue":{"issue":"14"},"URL":"https:\/\/doi.org\/10.1109\/jiot.2026.3703749","relation":{},"ISSN":["2327-4662","2372-2541"],"issn-type":[{"value":"2327-4662","type":"electronic"},{"value":"2372-2541","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7,15]]}}}