{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,27]],"date-time":"2026-06-27T15:46:47Z","timestamp":1782575207756,"version":"3.54.5"},"reference-count":33,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2025,2,1]],"date-time":"2025-02-01T00:00:00Z","timestamp":1738368000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,2,1]],"date-time":"2025-02-01T00:00:00Z","timestamp":1738368000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,2,1]],"date-time":"2025-02-01T00:00:00Z","timestamp":1738368000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62072253"],"award-info":[{"award-number":["62072253"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62302238"],"award-info":[{"award-number":["62302238"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"CCF-Tencent Rhino-Bird Open Research Fund"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Ind. Inf."],"published-print":{"date-parts":[[2025,2]]},"DOI":"10.1109\/tii.2024.3477563","type":"journal-article","created":{"date-parts":[[2024,10,28]],"date-time":"2024-10-28T13:47:02Z","timestamp":1730123222000},"page":"1429-1438","source":"Crossref","is-referenced-by-count":6,"title":["SFO-CID: Structural Feature Optimization Based Command Injection Vulnerability Discovery for Internet of Things"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-1311-4994","authenticated-orcid":false,"given":"Xiao","family":"Chen","sequence":"first","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-5547-3728","authenticated-orcid":false,"given":"Letian","family":"Sha","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-4496-0978","authenticated-orcid":false,"given":"Jincheng","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1815-2793","authenticated-orcid":false,"given":"Fu","family":"Xiao","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1693-3000","authenticated-orcid":false,"given":"Jiankuo","family":"Dong","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"State of IoTSpring 2023","author":"Analytics","year":"2023"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2021.3127267"},{"key":"ref3","article-title":"The tipping point: Exploring the surge in IoT cyberattacks globally","author":"Research","year":"2023"},{"key":"ref4","article-title":"Zyxel\u2019s guidance for the recent attacks on the ZyWALL devices","author":"Networks","year":"2023"},{"key":"ref5","article-title":"Cloudy with a chance of exploits: Compromising critical infrastructure through IIoT cloud solutions","year":"2023"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359826"},{"key":"ref7","first-page":"15","article-title":"Automated iot firmware introspection and analysis","volume-title":"Proc. 2nd Int. ACM Workshop Secur. Privacy Internet-of-Things","author":"Srivastava","year":"2019"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3624373"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00036"},{"key":"ref10","first-page":"303","article-title":"Sharing more and checking less: Leveraging common input keywords to detect bugs in embedded systems","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Secur. 21)","author":"Chen","year":"2021"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2024.3434667"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3307430"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978370"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134018"},{"key":"ref15","first-page":"2702","article-title":"Discriminative embeddings of latent variable models for structured data","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Dai","year":"2016"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1142\/S0218001493000339"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2947432"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.102032"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534367"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2024.3389014"},{"key":"ref21","article-title":"Efficient estimation of word representations in vector space","volume-title":"Proc. 1st Int. Conf. Learn. Representations","author":"Mikolov","year":"2013"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1406.1078"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.5555\/3241189.3241275"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.3390\/s21092985"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSN.2017.8230288"},{"key":"ref26","first-page":"17","article-title":"Postmortem PM analysis with hardware-enhanced post-crash artifacts","volume-title":"Proc. 26th USENIX Secur. Symp. (USENIX Secur. 17)","author":"Xu","year":"2017"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103157"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23185"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3517393"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.3390\/s23187789"},{"key":"ref31","article-title":"Malware exploited critical realtek SDK bug in millions of attacks","author":"Computer","year":"2023"},{"key":"ref32","article-title":"Dark.IoT botnet","year":"2021"},{"key":"ref33","article-title":"New mirai variant targets zyxel network-attached storage devices","author":"Networks","year":"2020"}],"container-title":["IEEE Transactions on Industrial Informatics"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/9424\/10874841\/10736974.pdf?arnumber=10736974","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,7]],"date-time":"2025-11-07T18:13:56Z","timestamp":1762539236000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10736974\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,2]]},"references-count":33,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tii.2024.3477563","relation":{},"ISSN":["1551-3203","1941-0050"],"issn-type":[{"value":"1551-3203","type":"print"},{"value":"1941-0050","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,2]]}}}