{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T15:55:15Z","timestamp":1783007715859,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":16,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,11,15]],"date-time":"2019-11-15T00:00:00Z","timestamp":1573776000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1801601"],"award-info":[{"award-number":["CNS-1801601"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100014043","name":"Office of the Under Secretary of Defense","doi-asserted-by":"publisher","award":["Air Force Contract No. FA8702-15-D-0001"],"award-info":[{"award-number":["Air Force Contract No. FA8702-15-D-0001"]}],"id":[{"id":"10.13039\/100014043","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100007297","name":"Office of Naval Research","doi-asserted-by":"publisher","award":["N00014-17-1-2513"],"award-info":[{"award-number":["N00014-17-1-2513"]}],"id":[{"id":"10.13039\/100007297","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,11,15]]},"DOI":"10.1145\/3338507.3358616","type":"proceedings-article","created":{"date-parts":[[2019,11,8]],"date-time":"2019-11-08T13:40:33Z","timestamp":1573220433000},"page":"15-21","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":78,"title":["FirmFuzz"],"prefix":"10.1145","author":[{"given":"Prashast","family":"Srivastava","sequence":"first","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hui","family":"Peng","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiahao","family":"Li","sequence":"additional","affiliation":[{"name":"Massachusetts Institute of Technology CSAIL, Cambridge, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hamed","family":"Okhravi","sequence":"additional","affiliation":[{"name":"Massachusetts Institute of Technology Lincoln Laboratory, Lexington, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Howard","family":"Shrobe","sequence":"additional","affiliation":[{"name":"Massachusetts Institute of Technology CSAIL, Cambridge, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mathias","family":"Payer","sequence":"additional","affiliation":[{"name":"EPFL, Lausanne, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2019,11,15]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Proceedings of the 26th USENIX Security Symposium. 1093--1110","author":"Antonakakis Manos","year":"2017","unstructured":"Manos Antonakakis , Tim April , Michael Bailey , Elie Bursztein , Jaime Cochran , Zakir Durumeric , J Alex Halderman , Damian Menscher , Chad Seaman , Nick Sullivan , Kurt Thomas , Yi Zhou , Manos Antonakakis Tim April Michael Bailey Matthew Bernhard Elie Bursztein , Bullet J Jaime Cochran Zakir Durumeric Alex Halderman Luca Invernizzi , Bullet Michalis Kallitsis Deepak Kumar Chaz Lever Zane Ma , Joshua Mason Damian Menscher , Bullet Chad Seaman Nick Sullivan Kurt Thomas, and Bullet Yi Zhou . 2017 . Understanding the Mirai Botnet . In Proceedings of the 26th USENIX Security Symposium. 1093--1110 . https:\/\/www.usenix.org\/conference\/usenixsecurity17\/technical-sessions\/presentation\/antonakakis Manos Antonakakis, Tim April, Michael Bailey, Elie Bursztein, Jaime Cochran,Zakir Durumeric, J Alex Halderman, Damian Menscher, Chad Seaman, Nick Sullivan, Kurt Thomas, Yi Zhou, Manos Antonakakis Tim April Michael Bailey Matthew Bernhard Elie Bursztein, Bullet J Jaime Cochran Zakir Durumeric Alex Halderman Luca Invernizzi, Bullet Michalis Kallitsis Deepak Kumar Chaz Lever Zane Ma, Joshua Mason Damian Menscher, Bullet Chad Seaman Nick Sullivan Kurt Thomas, and Bullet Yi Zhou. 2017. Understanding the Mirai Botnet. In Proceedings of the 26th USENIX Security Symposium. 1093--1110. https:\/\/www.usenix.org\/conference\/usenixsecurity17\/technical-sessions\/presentation\/antonakakis"},{"key":"e_1_3_2_1_2_1","volume-title":"Towards Fully Automated Dynamic Analysis for Embedded Firmware. Network and Distributed System Security Symposium","author":"Chen Daming Dominic","year":"2016","unstructured":"Daming Dominic Chen , Manuel Egele , Maverick Woo , and David Brumley . 2016 . Towards Fully Automated Dynamic Analysis for Embedded Firmware. Network and Distributed System Security Symposium February (2016), 21--24. https:\/\/doi.org\/10.14722\/ndss.2016.23415 10.14722\/ndss.2016.23415 Daming Dominic Chen, Manuel Egele, Maverick Woo, and David Brumley. 2016. Towards Fully Automated Dynamic Analysis for Embedded Firmware. Network and Distributed System Security Symposium February (2016), 21--24. https:\/\/doi.org\/10.14722\/ndss.2016.23415"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897900"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2017.8115618"},{"key":"e_1_3_2_1_5_1","unstructured":"Mitmproxy. 2018. mitmproxy. https:\/\/mitmproxy.org\/.  Mitmproxy. 2018. mitmproxy. https:\/\/mitmproxy.org\/."},{"key":"e_1_3_2_1_6_1","unstructured":"Antoine Nervaux. 2018. Vulnerability disclosure TP-Link multiples CVEs - pentest- try harder. https:\/\/chmod750.com\/2017\/04\/23\/vulnerability-disclosure-tp-link\/.  Antoine Nervaux. 2018. Vulnerability disclosure TP-Link multiples CVEs - pentest- try harder. https:\/\/chmod750.com\/2017\/04\/23\/vulnerability-disclosure-tp-link\/."},{"key":"e_1_3_2_1_7_1","unstructured":"Amy Nordrum. 2018. Popular Internet of Things Forecast of 50 Billion Devices by 2020 Is Outdated - IEEE Spectrum. https:\/\/spectrum.ieee.org\/tech-talk\/telecom\/internet\/popular-internet-of-things-forecast-of-50-billion-devices-by-2020-is-outdated.  Amy Nordrum. 2018. Popular Internet of Things Forecast of 50 Billion Devices by 2020 Is Outdated - IEEE Spectrum. https:\/\/spectrum.ieee.org\/tech-talk\/telecom\/internet\/popular-internet-of-things-forecast-of-50-billion-devices-by-2020-is-outdated."},{"key":"e_1_3_2_1_8_1","unstructured":"Kim Pierre. 2018. Pwning the Dlink 850L routers and abusing the My Dlink Cloud protocol - IT Security Research by Pierre. https:\/\/pierrekim.github.io\/blog\/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html.  Kim Pierre. 2018. Pwning the Dlink 850L routers and abusing the My Dlink Cloud protocol - IT Security Research by Pierre. https:\/\/pierrekim.github.io\/blog\/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html."},{"key":"e_1_3_2_1_9_1","unstructured":"QEMU. 2018-01-08. QEMU. https:\/\/www.qemu.org\/.  QEMU. 2018-01-08. QEMU. https:\/\/www.qemu.org\/."},{"key":"e_1_3_2_1_10_1","unstructured":"RIPS. 2018. RIPS - PHP Static Analyser. https:\/\/www.ripstech.com\/.  RIPS. 2018. RIPS - PHP Static Analyser. https:\/\/www.ripstech.com\/."},{"key":"e_1_3_2_1_11_1","unstructured":"Router. 2018. Default Router Passwords - The internets most comprehensive router password database. http:\/\/routerpasswords.com\/.  Router. 2018. Default Router Passwords - The internets most comprehensive router password database. http:\/\/routerpasswords.com\/."},{"key":"e_1_3_2_1_12_1","unstructured":"Selenium. 2018. Selenium - Web Browser Automation. http:\/\/www.seleniumhq.org\/.  Selenium. 2018. Selenium - Web Browser Automation. http:\/\/www.seleniumhq.org\/."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23294"},{"key":"e_1_3_2_1_14_1","unstructured":"w3af. 2018. w3af: web application attack and audit framework. http:\/\/w3af.org\/.  w3af. 2018. w3af: web application attack and audit framework. http:\/\/w3af.org\/."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.23"},{"key":"e_1_3_2_1_16_1","unstructured":"ZAP. 2018. OWASP Zed Attack Proxy Project - OWASP. https:\/\/www.owasp.org\/index.php\/OWASP_Zed_Attack_Proxy_Project.  ZAP. 2018. OWASP Zed Attack Proxy Project - OWASP. https:\/\/www.owasp.org\/index.php\/OWASP_Zed_Attack_Proxy_Project."}],"event":{"name":"CCS '19: 2019 ACM SIGSAC Conference on Computer and Communications Security","location":"London United Kingdom","acronym":"CCS '19","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2nd International ACM Workshop on Security and Privacy for the Internet-of-Things"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3338507.3358616","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3338507.3358616","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3338507.3358616","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:44:46Z","timestamp":1750203886000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3338507.3358616"}},"subtitle":["Automated IoT Firmware Introspection and Analysis"],"short-title":[],"issued":{"date-parts":[[2019,11,15]]},"references-count":16,"alternative-id":["10.1145\/3338507.3358616","10.1145\/3338507"],"URL":"https:\/\/doi.org\/10.1145\/3338507.3358616","relation":{},"subject":[],"published":{"date-parts":[[2019,11,15]]},"assertion":[{"value":"2019-11-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}