{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T16:16:47Z","timestamp":1783613807891,"version":"3.55.0"},"reference-count":80,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2023,2,1]],"date-time":"2023-02-01T00:00:00Z","timestamp":1675209600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"European Unions Horizon 2020 research and innovation programme","award":["830892"],"award-info":[{"award-number":["830892"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2023,2,1]]},"DOI":"10.1109\/tse.2022.3163969","type":"journal-article","created":{"date-parts":[[2022,3,31]],"date-time":"2022-03-31T19:45:11Z","timestamp":1648755911000},"page":"816-830","source":"Crossref","is-referenced-by-count":20,"title":["A Large-Scale Analysis of IoT Firmware Version Distribution in the Wild"],"prefix":"10.1109","volume":"49","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3416-077X","authenticated-orcid":false,"given":"Frank","family":"Ebbers","sequence":"first","affiliation":[{"name":"Fraunhofer Institute for Systems and Innovation Research ISI, Karlsruhe, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3394504"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2874978"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.5555\/3241189.3241275"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICBAIE52039.2021.9389849"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2834050.2834095"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2021.106771"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3070692"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313692"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2019.2893950"},{"key":"ref10","article-title":"Software updates for Internet of Things","year":"2021"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2919760"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2858036.2858303"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2910750"},{"key":"ref14","article-title":"Directive (EU) 2019\/770","year":"2020"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijinfomgt.2020.102123"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.011.2000450"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-30440-9_18"},{"key":"ref18","article-title":"Censys","year":"2020"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2019.01.014"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.48"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2017.201"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1287\/isre.2016.0683"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3333501"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3397333"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3229565.3229568"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2018.00064"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/MSPEC.2017.8093798"},{"key":"ref28","doi-asserted-by":"crossref","DOI":"10.1109\/ASE51524.2021.9678785","article-title":"IFIZZ: Deep-state and efficient fault-scenario generation to test IoT firmware","author":"Liu","year":"2021"},{"key":"ref29","article-title":"Cyber-physical systems and industrial IoT cybersecurity: Issues and solutions","author":"Shim","year":"2019"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2009.38"},{"key":"ref31","article-title":"Costs and consequences of gaps in vulnerability response","year":"2018"},{"key":"ref32","article-title":"Cyber hygiene report: Lessons learned from a survey of the state of endpoint patching and hardening","year":"2020"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3022842"},{"key":"ref34","article-title":"Securing the Internet of Things opportunity: Putting cybersecurity at the heart of the ioT","year":"2021"},{"key":"ref35","article-title":"Studie Internet of Things","year":"2019"},{"key":"ref36","article-title":"Software engineering body of knowledge (SWEBOK)","year":"2022"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2018.2888765"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CCGrid51090.2021.00082"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2013.6531128"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2016.2592913"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE43902.2021.00103"},{"key":"ref42","article-title":"Patching the Internet of Things: IoT software update workshop","author":"Pfister","year":"2016"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2905925"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2017.1600993"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00021"},{"key":"ref46","first-page":"97","article-title":"Do or do not, there is no try: User engagement may not improve security outcomes","author":"Forget","year":"2016"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.11.015"},{"key":"ref48","article-title":"Octoverse report 2020","year":"2020"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1080.0226"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423346"},{"key":"ref51","article-title":"The Internet of Things: The effects of security attitudes and knowledge on security practices","author":"Singer","year":"2019"},{"key":"ref52","article-title":"Taking charge of the iots security vulnerabilities: White paper","year":"2017"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3025453.3025509"},{"key":"ref54","article-title":"Software version share","year":"2020"},{"key":"ref55","article-title":"PC trends report","year":"2020"},{"key":"ref56","article-title":"WhatWeb","year":"2020"},{"key":"ref57","article-title":"Can IoT devices be trusted? An exploratory study","volume-title":"Proc. ACM SIGSAC Conf. Comput. Commun. Secur.","author":"Privitera"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/WoWMoM.2019.8793012"},{"key":"ref59","first-page":"1","article-title":"When firmware modifications attack: A case study of embedded exploitation","volume-title":"Proc. 20th Annu. Netw. Distrib. System Secur. Symp.","author":"Cui"},{"key":"ref60","article-title":"Abusing P2P to hack 3 million cameras","author":"Marrapese"},{"key":"ref61","article-title":"All things considered: An analysis of IoT devices on home networks","author":"Kumar","year":"2019"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.25300\/misq\/2016\/40.1.09"},{"key":"ref63","article-title":"Global cybersecurity index","year":"2018"},{"key":"ref64","first-page":"327","article-title":"Acquisitional rule-based engine for discovering Internet-of-Thing devices","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Feng"},{"key":"ref65","article-title":"Superspreaders: Quantifying the role of IoT manufacturers in device infections","author":"Rodr\u00edguez","year":"2021"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP48549.2020.00037"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2018.2866249"},{"key":"ref68","first-page":"506","article-title":"ProfilIoT","volume-title":"Proc. 32nd Annu. ACM Symp. Appl. Comput.","author":"Meidan"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/3302505.3310073"},{"key":"ref71","article-title":"Complete guide to shodan","author":"Matherly","year":"2018"},{"key":"ref72","article-title":"Introduction to SEMMA","author":"Institute","year":"2020"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-53914-5_10"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2020.3009425"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.4135\/9781071802625"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/WF-IoT.2016.7845450"},{"key":"ref78","article-title":"The state of DDoS weapons","year":"2020"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1108\/09685220810908787"},{"key":"ref80","article-title":"A list of IP addresses by country","author":"WhoisXML","year":"2021"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1287\/mnsc.35.8.982"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.17705\/1cais.04621"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/32\/10044379\/09745815.pdf?arnumber=9745815","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,18]],"date-time":"2024-01-18T00:25:42Z","timestamp":1705537542000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9745815\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,2,1]]},"references-count":80,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tse.2022.3163969","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,2,1]]}}}