{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T07:01:11Z","timestamp":1782975671950,"version":"3.54.5"},"reference-count":42,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"NSFC Program","doi-asserted-by":"publisher","award":["62502254,62525207,U2441238"],"award-info":[{"award-number":["62502254,62525207,U2441238"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002858","name":"China Postdoctoral Science Foundation","doi-asserted-by":"publisher","award":["2024M761690,GZC20240828"],"award-info":[{"award-number":["2024M761690,GZC20240828"]}],"id":[{"id":"10.13039\/501100002858","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00002","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"2834-2849","source":"Crossref","is-referenced-by-count":0,"title":["Camveil: Unveiling Security Camera Vulnerabilities Through Multi-Protocol Coordinated Fuzzing"],"prefix":"10.1109","author":[{"given":"Fuchen","family":"Ma","sequence":"first","affiliation":[{"name":"School of Software, Tsinghua University, KLISS, BNRist,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuqiao","family":"Yang","sequence":"additional","affiliation":[{"name":"University of Electronic Science and Technology of China,Chengdu,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuanliang","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Software, Tsinghua University, KLISS, BNRist,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yanyang","family":"Zhao","sequence":"additional","affiliation":[{"name":"School of Software, Tsinghua University, KLISS, BNRist,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ting","family":"Chen","sequence":"additional","affiliation":[{"name":"University of Electronic Science and Technology of China,Chengdu,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yu","family":"Jiang","sequence":"additional","affiliation":[{"name":"School of Software, Tsinghua University, KLISS, BNRist,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Onvif is an open industry forum that provides and promotes standardized interfaces for effective interoperability of ip-based physical security products.","year":"2024"},{"key":"ref2","volume-title":"HTTP: the definitive guide","author":"Gourley","year":"2002"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2326"},{"key":"ref4","volume-title":"Cve-2023-3959 detail","author":"Database","year":"2023"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23159"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00066"},{"key":"ref7","volume-title":"Peach is a smartfuzzer that is capable of performing both generation and mutation based fuzzing.","year":"2024"},{"key":"ref8","first-page":"4481","article-title":"Bleem: Packet sequence oriented fuzzing for protocol implementations","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Luo","year":"2023"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/DICTA.2009.84"},{"key":"ref10","volume-title":"The device access program allows users to access, control, and manage google nest devices using the sdm api.","year":"2024"},{"key":"ref11","volume-title":"The global security market goes for onvif","year":"2025"},{"key":"ref12","volume-title":"Onvif reaches new milestone of 30,000 conformant products","year":"2024"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3605"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3550"},{"key":"ref15","volume-title":"Cve-2023-3959,cve-2023-4249 - zavio ip","year":"2025"},{"key":"ref16","volume-title":"Welcome to scapy version 2.6.0","year":"2024"},{"key":"ref17","volume-title":"Soap","year":"2025"},{"key":"ref18","volume-title":"15 years of vlc and videolan","year":"2025"},{"key":"ref19","volume-title":"Dart implementation of onvif ip camera client","year":"2024"},{"key":"ref20","volume-title":"Cctv camera market demand & sustainability trends 2025-2035","year":"2025"},{"key":"ref21","volume-title":"Insight: Ezviz and ring remain smart home surveillance camera leaders","author":"Insight","year":"2025"},{"key":"ref22","volume-title":"Local network attacks","author":"Kristoff","year":"2024"},{"key":"ref23","volume-title":"Hik or hack? (not) iot security using hikvision ip cameras","year":"2017"},{"key":"ref24","volume-title":"The global security market goes for onvif","year":"2024"},{"key":"ref25","volume-title":"The bug lead to video freeze of webrtc","year":"2025"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/DAC18072.2020.9218603"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3649329.3658270"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24078"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179386"},{"key":"ref30","volume-title":"Defensics fuzz testing","year":"2024"},{"key":"ref31","volume-title":"boofuzz: Network protocol fuzzing for humans","year":"2025"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICST46399.2020.00062"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3358227"},{"key":"ref34","volume-title":"american fuzzy lop","year":"2024"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.24556"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3415153"},{"key":"ref37","doi-asserted-by":"crossref","first-page":"111032","DOI":"10.1016\/j.jss.2021.111032","article-title":"Model-based testing in practice: An experience report from the web applications domain","volume":"180","author":"Garousi","year":"2021","journal-title":"Journal of Systems and Software"},{"key":"ref38","first-page":"15","article-title":"Firmfuzz: Automated iot firmware introspection and analysis.\/prashast srivastava, hui peng, jiahao li, hamed okhravi, howard shrobe, and mathias payer","volume-title":"Proceedings of the 2nd International ACM Workshop on Security and Privacy for the Internet-of-Things (IoT S&P\u201919)","author":"Prashast","year":"2019"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23229"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23415"},{"key":"ref41","first-page":"1151","article-title":"Looking from the mirror: Evaluating $\\{\\text{IoT}\\}$ device security through mobile companion apps","volume-title":"28th USENIX security symposium (USENIX security 19)","author":"Wang","year":"2019"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670342"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573550.pdf?arnumber=11573550","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:28:10Z","timestamp":1782970090000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573550\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":42,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00002","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}