{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:12:53Z","timestamp":1750219973565,"version":"3.41.0"},"reference-count":54,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2023,3,7]],"date-time":"2023-03-07T00:00:00Z","timestamp":1678147200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"U.S. National Science Foundation","doi-asserted-by":"crossref","award":["CNS-1453647, NSF-1663051, and NSF-2219920"],"award-info":[{"award-number":["CNS-1453647, NSF-1663051, and NSF-2219920"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Microsoft Research Grant"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Digital Threats"],"published-print":{"date-parts":[[2023,3,31]]},"abstract":"<jats:p>\n            Enterprise Internet of Things (E-IoT) systems allow users to control audio, video, scheduled events, lightning fixtures, door access, and relays in complex smart installations. These systems are widely used in government or smart private offices, smart buildings\/homes, conference rooms, schools, hotels, and similar professional settings. However, even with their widespread use, the security of many E-IoT systems and components has not been researched in the literature. To address this research gap, we focus on E-IoT communication buses, one of the core components used to connect E-IoT devices, and introduce\n            <jats:sc>LightningStrike<\/jats:sc>\n            attacks that demonstrate several weaknesses with E-IoT proprietary communication protocols used in E-IoT communication buses. Specifically, we show that popular E-IoT proprietary communication protocols are susceptible to Denial-of-Service (DoS), eavesdropping, impersonation, and replay attacks. As such threats cannot be mitigated through traditional defense mechanisms due to the limitations posed by E-IoT, we propose\n            <jats:sc>LGuard<\/jats:sc>\n            , a defense system to protect E-IoT systems against the attacks over communication buses.\n            <jats:sc>LGuard<\/jats:sc>\n            uses closed-circuit television footage and computer vision techniques to detect replay attacks. For impersonation and DoS attacks,\n            <jats:sc>LGuard<\/jats:sc>\n            utilizes traffic analysis. Finally,\n            <jats:sc>LGuard<\/jats:sc>\n            obfuscates the E-IoT traffic via inserting redundant traffic to the bus against eavesdropping attacks. We evaluated the performance of\n            <jats:sc>LGuard<\/jats:sc>\n            in a realistic E-IoT deployment, and our detailed evaluations show that\n            <jats:sc>LGuard<\/jats:sc>\n            achieves an overall accuracy and precision of 99% in detecting DoS, impersonation, and replay attacks while effectively increasing the difficulty of extracting valuable information for eavesdroppers. In addition,\n            <jats:sc>LGuard<\/jats:sc>\n            does not incur any operational overhead or modification to the existing E-IoT system.\n          <\/jats:p>","DOI":"10.1145\/3555721","type":"journal-article","created":{"date-parts":[[2022,9,14]],"date-time":"2022-09-14T13:22:55Z","timestamp":1663161775000},"page":"1-26","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["<scp>LGuard<\/scp>\n            : Securing Enterprise-IoT Systems against Serial-Based Attacks via Proprietary Communication Buses"],"prefix":"10.1145","volume":"4","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6287-0787","authenticated-orcid":false,"given":"Luis","family":"Puche Rondon","sequence":"first","affiliation":[{"name":"Florida International University, Miami, FL"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7082-8423","authenticated-orcid":false,"given":"Leonardo","family":"Babun","sequence":"additional","affiliation":[{"name":"Florida International University, Miami, FL"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4114-5321","authenticated-orcid":false,"given":"Ahmet","family":"Aris","sequence":"additional","affiliation":[{"name":"Florida International University, Miami, FL"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7459-4612","authenticated-orcid":false,"given":"Kemal","family":"Akkaya","sequence":"additional","affiliation":[{"name":"Florida International University, Miami, FL"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9823-3464","authenticated-orcid":false,"given":"A. Selcuk","family":"Uluagac","sequence":"additional","affiliation":[{"name":"Florida International University, Miami, FL"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,3,7]]},"reference":[{"key":"e_1_3_1_2_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00013"},{"key":"e_1_3_1_3_2","volume-title":"Proceedings of the 2013 19th International Conference on Control Systems and Computer Science","author":"Arabo A.","year":"2013","unstructured":"A. Arabo and B. Pranggono. 2013. Mobile malware and smart device security: Trends, challenges and solutions. In Proceedings of the 2013 19th International Conference on Control Systems and Computer Science."},{"key":"e_1_3_1_4_2","first-page":"28","article-title":"A system-level behavioral detection framework for compromised CPS devices: Smart-grid case","volume":"4","author":"Babun Leonardo","year":"2019","unstructured":"Leonardo Babun, Hidayet Aksu, and A. Selcuk Uluagac. 2019. A system-level behavioral detection framework for compromised CPS devices: Smart-grid case. ACM Transactions on Cyber-Physical Systems 4, 2 (Nov. 2019), Article 16, 28 pages.","journal-title":"ACM Transactions on Cyber-Physical Systems"},{"key":"e_1_3_1_5_2","unstructured":"Leonardo Babun Z. Berkay Celik Patrick McDaniel and A. Selcuk Uluagac. 2019. Real-time analysis of privacy-(un)aware IoT applications. arxiv:1911.10461 [cs.CR]."},{"key":"e_1_3_1_6_2","article-title":"The OpenCV Library","author":"Bradski G.","year":"2000","unstructured":"G. Bradski. 2000. The OpenCV Library. Dr. Dobb\u2019s Journal of Software Tools 120 (2000), 122\u2013125.","journal-title":"Dr. Dobb\u2019s Journal of Software Tools"},{"key":"e_1_3_1_7_2","doi-asserted-by":"publisher","DOI":"10.1109\/STA.2017.8314877"},{"key":"e_1_3_1_8_2","doi-asserted-by":"publisher","DOI":"10.5555\/3277203.3277329"},{"key":"e_1_3_1_9_2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2016.2548426"},{"key":"e_1_3_1_10_2","unstructured":"Control4. 2013. Configurable Decora Wired Keypad Installation Guide. Retrieved September 22 2022 from https:\/\/www.control4.com\/docs\/product\/wired-keypad\/installation-guide\/english\/revision\/B\/wired-keypad-installation-guide-rev-b.pdf."},{"key":"e_1_3_1_11_2","unstructured":"Control4. 2021. Control4 Camera Solutions. Retrieved September 22 2022 from https:\/\/www.control4.com\/solutions\/products\/cameras\/."},{"key":"e_1_3_1_12_2","unstructured":"Control4. 2021. Control4 Driver Search\u2014Camera. Retrieved September 22 2022 from https:\/\/drivers.control4.com\/solr\/drivers\/browse?&fq=primaryProxy%3A%22camera%22."},{"key":"e_1_3_1_13_2","unstructured":"Control4. 2010. Getting Started with Composer Pro. Retrieved September 22 2022 from https:\/\/www.yumpu.com\/en\/document\/view\/35663397\/composer-pro-getting-started."},{"key":"e_1_3_1_14_2","unstructured":"Control4. 2010. Composer Pro Software Release Update Instructions. Retrieved September 22 2022 from http:\/\/www.davidsonfamily.ca\/wpcontent\/uploads\/asgarosforum\/27894\/TechDoc00033_RevB_ComposerUpdateQuickInstructions_MultipleControllers.pdf."},{"key":"e_1_3_1_15_1","unstructured":"Crestron. (n.d). Crestron Technical Institute. Retrieved September 22 2022 from https:\/\/support.crestron.com\/app\/answers\/detail\/a_id\/1000253\/\/crestron-technical-institute---latest-courseofferings."},{"key":"e_1_3_1_16_2","unstructured":"Crestron. 2006. Crestron Isys Touchpanel Operation Guide. Retrieved September 22 2022 from https:\/\/www.crestron.com\/getmedia\/e8833a2a-1d68-40ef-84af-0789e6de9f1d\/mg_tpmc-4xg-b_1."},{"key":"e_1_3_1_17_2","unstructured":"Crestron. 2020. Wiring and Connectors. Retrieved September 22 2022 from https:\/\/docs.crestron.com\/en-us\/9292\/Content\/Topics\/Cresnet-Wiring.htm."},{"key":"e_1_3_1_18_2","unstructured":"Crestron. 2020. Security at Crestron. Retrieved September 22 2022 from https:\/\/www.crestron.com\/Security\/Security-at-Crestron."},{"key":"e_1_3_1_19_2","unstructured":"Crestron. 2021. Crestron Application Market\u2014Integrated Pan\/Tilt. Retrieved September 22 2022 from https:\/\/applicationmarket.crestron.com\/integrated-pan-tilt-1\/."},{"key":"e_1_3_1_20_2","unstructured":"Crestron. 2021. Works with Crestron\u2014Cameras. Retrieved September 22 2022 from https:\/\/docs.crestron.com\/en-us\/8525\/Content\/CP4R\/Appendix\/Works-With-Crestron-Home\/Cameras.htm."},{"key":"e_1_3_1_21_2","unstructured":"Crestron. 2022. DIN Rail Cresnet\u00aeDistribution Hub. Retrieved September 22 2022 from https:\/\/www.crestron.com\/getmedia\/f085dca1-aeab-4cff-b3c4-22a2989869a8\/ss_din-hub_1."},{"key":"e_1_3_1_22_2","unstructured":"David Kravets. 2011. Wi-Fi\u2013Hacking Neighbor from Hell Sentenced to 18 Years. Retrieved September 22 2022 from https:\/\/www.wired.com\/2011\/07\/hacking-neighbor-from-hell\/."},{"key":"e_1_3_1_23_2","doi-asserted-by":"publisher","DOI":"10.1145\/3317549.3326315"},{"key":"e_1_3_1_24_2","first-page":"126","volume-title":"Proceedings of the International Conference on Security and Privacy in Communication Systems","author":"Denney Kyle","year":"2019","unstructured":"Kyle Denney, Enes Erdin, Leonardo Babun, Michael Vai, and Selcuk Uluagac. 2019. USB-Watch: A dynamic hardware-assisted USB threat detection framework. In Proceedings of the International Conference on Security and Privacy in Communication Systems. 126\u2013146."},{"issue":"1","key":"e_1_3_1_25_2","doi-asserted-by":"crossref","first-page":"378","DOI":"10.1109\/JSEN.2018.2874898","article-title":"Serial communication protocol with enhanced properties\u2014Securing communication layer for smart sensors applications","volume":"19","author":"Dudak J.","year":"2019","unstructured":"J. Dudak, G. Gaspar, S. Sedivy, P. Fabo, L. Pepucha, and P. Tanuska. 2019. Serial communication protocol with enhanced properties\u2014Securing communication layer for smart sensors applications. IEEE Sensors Journal 19, 1 (2019), 378\u2013390.","journal-title":"IEEE Sensors Journal"},{"key":"e_1_3_1_26_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSSA.2016.19"},{"key":"e_1_3_1_27_2","unstructured":"Josh Hendrickson. 2018. ZigBee vs. Z-Wave: Choosing between Two Big Smarthome Standards. Retrieved September 22 2022 from https:\/\/www.howtogeek.com\/394567\/zigbee-vs.-z-wave-choosing-between-two-big-smarthome-standards\/."},{"key":"e_1_3_1_28_2","first-page":"1","article-title":"IEEE standard for secure SCADA communications protocol (SSCP)","year":"2020","unstructured":"IEEE. 2020. IEEE standard for secure SCADA communications protocol (SSCP). IEEE Std 1711.2-2019 (2020), 1\u201337.","journal-title":"IEEE Std 1711.2-2019"},{"key":"e_1_3_1_29_2","unstructured":"IoTBusinessNews. 2018. The Number of Smart Homes in Europe and North America Reached 45 Million in 2017. Retrieved September 22 2022 from https:\/\/iotbusinessnews.com\/2018\/09\/24\/20413-the-number-of-smart-homes-in-europe-and-north-america-reached-45-million-in-2017\/."},{"key":"e_1_3_1_30_2","first-page":"1","volume-title":"Proceedings of the 2018 IEEE International Conference on Communications (ICC\u201918)","author":"Kaygusuz C.","year":"2018","unstructured":"C. Kaygusuz, L. Babun, H. Aksu, and A. S. Uluagac. 2018. Detection of compromised smart grid devices with machine learning and convolution techniques. In Proceedings of the 2018 IEEE International Conference on Communications (ICC\u201918). 1\u20136."},{"key":"e_1_3_1_31_2","doi-asserted-by":"publisher","DOI":"10.1109\/DSA.2019.00067"},{"key":"e_1_3_1_32_2","unstructured":"Frank Liang. 2020. Evaluating the Performance of Machine Learning Models. Retrieved September 22 2022 from https:\/\/towardsdatascience.com\/classifying-model-outcomes-true-false-positives-negatives-177c1e702810."},{"key":"e_1_3_1_33_2","unstructured":"LiquidSpace. 2021. LiquidSpace: Rent Flexible Office Space. Retrieved September 22 2022 from https:\/\/liquidspace.com\/."},{"key":"e_1_3_1_34_2","unstructured":"LiteTouch. 2006. LiteTouch Lighting Control Systems Installation and Troubleshooting Manual. Retrieved September 22 2022 from http:\/\/sav-documentation.s3.amazonaws.com\/InternalDocumentation\/LiteTouchandSavantLighting\/TroubleshootingManual.pdf."},{"key":"e_1_3_1_35_2","doi-asserted-by":"publisher","DOI":"10.1007\/s41635-017-0013-2"},{"key":"e_1_3_1_36_2","unstructured":"Camillo Lugaresi Jiuqiang Tang Hadon Nash Chris McClanahan Esha Uboweja Michael Hays Fan Zhang et\u00a0al. 2019. MediaPipe: A framework for building perception pipelines. arxiv:1906.08172 [cs.DC]."},{"key":"e_1_3_1_37_2","unstructured":"Lutron. 2020. Lutron Integration Protocol. Retrieved September 22 2022 from http:\/\/www.lutron.com\/TechnicalDocumentLibrary\/040249.pdf."},{"key":"e_1_3_1_38_2","unstructured":"Mark N. Vena. 2018. How Crestron Paved the Way for the Smart Home and More. Retrieved September 22 2022 from https:\/\/www.forbes.com\/sites\/moorinsights\/2018\/08\/23\/how-crestron-paved-the-way-for-the-smart-home-and-more\/#397001f141f8."},{"key":"e_1_3_1_39_2","doi-asserted-by":"crossref","first-page":"535","DOI":"10.1007\/978-3-030-00470-5_25","volume-title":"Research in Attacks, Intrusions, and Defenses","author":"Morgner Philipp","year":"2018","unstructured":"Philipp Morgner, Stefan Pfennig, Dennis Salzner, and Zinaida Benenson. 2018. Malicious IoT implants: Tampering with serial communication over the Internet. In Research in Attacks, Intrusions, and Defenses, Michael Bailey, Thorsten Holz, Manolis Stamatogiannakis, and Sotiris Ioannidis (Eds.). Springer International Publishing, Cham, Switzerland, 535\u2013555."},{"key":"e_1_3_1_40_2","unstructured":"U.S. Department of Energy. 2018. Cyber Security for Lighting Systems. Retrieved September 22 2022 from https:\/\/www.energy.gov\/sites\/prod\/files\/2018\/06\/f52\/cyber_security_lighting.pdf."},{"key":"e_1_3_1_41_2","unstructured":"Pushstack. 2016. Control4 Driver Decryption. Retrieved September 22 2022 from https:\/\/pushstack.wordpress.com\/2016\/03\/06\/control4-driver-decryption\/."},{"key":"e_1_3_1_42_2","unstructured":"Pushstack. 2016. Somfy Smoove Origin RTS Protocol. Retrieved September 22 2022 from https:\/\/pushstack.wordpress.com\/somfy-rts-protocol\/."},{"key":"e_1_3_1_43_2","volume-title":"Proceedings of the 35th Annual Computer Security Applications Conference.","author":"Rondon Luis Puche","year":"2019","unstructured":"Luis Puche Rondon, Leonardo Babun, Kemal Akkaya, and A. Selcuk Uluagac. 2019. HDMI-walk: Attacking HDMI distribution networks via consumer electronic control protocol. In Proceedings of the 35th Annual Computer Security Applications Conference."},{"key":"e_1_3_1_44_2","doi-asserted-by":"publisher","DOI":"10.1145\/3408308.3427606"},{"key":"e_1_3_1_45_2","doi-asserted-by":"publisher","DOI":"10.1145\/3448300.3467830"},{"key":"e_1_3_1_46_2","doi-asserted-by":"crossref","unstructured":"Luis Puche Rondon Leonardo Babun Ahmet Aris Kemal Akkaya and A. Selcuk Uluagac. 2021. Survey on Enterprise Internet-of-Things systems (E-IoT): A security perspective. arxiv:2102.10695 [cs.CR].","DOI":"10.1016\/j.adhoc.2021.102728"},{"key":"e_1_3_1_47_2","unstructured":"Savant. 2014. Savant Smart Lightning Deployment Guide. Retrieved September 22 2022 from https:\/\/sav-documentation.s3.amazonaws.com\/Product%20Deployment%20Guides\/SmartLightingControl_DeploymentGuide.pdf."},{"key":"e_1_3_1_48_2","volume-title":"Proceedings of the 35th Annual Computer Security Applications Conference.","author":"Sikder Amit Kumar","year":"2019","unstructured":"Amit Kumar Sikder, Leonardo Babun, Hidayet Aksu, and A. Selcuk Uluagac. 2019. Aegis: A context-aware security framework for smart home systems. In Proceedings of the 35th Annual Computer Security Applications Conference."},{"key":"e_1_3_1_49_2","unstructured":"Somfy. 2020. Control RTS Solutions with Most Automation Systems. Retrieved September 22 2022 from https:\/\/www.somfysystems.com\/en-us\/products\/1810872\/universal-rts-interface."},{"key":"e_1_3_1_50_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICOIN.2016.7427089"},{"key":"e_1_3_1_51_2","unstructured":"Stephen Genusa. 2015. Crestron Cresnet Monitor. Retrieved September 22 2022 from https:\/\/pushstack.wordpress.com\/somfy-rts-protocol\/."},{"key":"e_1_3_1_52_2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2872114"},{"key":"e_1_3_1_53_2","volume-title":"ModSec: A Secure Modbus Protocol","author":"Wilson Paul Lawrence","year":"2018","unstructured":"Paul Lawrence Wilson. 2018. ModSec: A Secure Modbus Protocol. Master\u2019s Thesis. Georgia Institute of Technology."},{"key":"e_1_3_1_54_2","unstructured":"Ryan Winfield and Mark Gerrior. 2006. Avoiding Interference in the 2.4-GHz ISM Band. Retrieved September 22 2022 from https:\/\/www.eetimes.com\/avoiding-interference-in-the-2-4-ghz-ism-band\/."},{"key":"e_1_3_1_55_2","article-title":"Survey of automotive controller area network intrusion detection systems","author":"Young C.","year":"2019","unstructured":"C. Young, J. Zambreno, H. Olufowobi, and G. Bloom. 2019. Survey of automotive controller area network intrusion detection systems. IEEE Design & Test 36, 6 (2019), 48\u201355.","journal-title":"IEEE Design & Test"}],"container-title":["Digital Threats: Research and Practice"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3555721","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3555721","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:49:19Z","timestamp":1750182559000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3555721"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,7]]},"references-count":54,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2023,3,31]]}},"alternative-id":["10.1145\/3555721"],"URL":"https:\/\/doi.org\/10.1145\/3555721","relation":{},"ISSN":["2692-1626","2576-5337"],"issn-type":[{"type":"print","value":"2692-1626"},{"type":"electronic","value":"2576-5337"}],"subject":[],"published":{"date-parts":[[2023,3,7]]},"assertion":[{"value":"2021-11-05","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2022-07-22","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-03-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}