{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,20]],"date-time":"2026-04-20T10:23:57Z","timestamp":1776680637561,"version":"3.51.2"},"reference-count":18,"publisher":"Wiley","license":[{"start":{"date-parts":[[2019,11,4]],"date-time":"2019-11-04T00:00:00Z","timestamp":1572825600000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"National Key R&D Program of China","award":["2017YFB0802300"],"award-info":[{"award-number":["2017YFB0802300"]}]},{"name":"National Key R&D Program of China","award":["2017YFB0802900"],"award-info":[{"award-number":["2017YFB0802900"]}]},{"name":"National Key R&D Program of China","award":["61602092"],"award-info":[{"award-number":["61602092"]}]},{"name":"National Key R&D Program of China","award":["61972073"],"award-info":[{"award-number":["61972073"]}]},{"name":"National Key R&D Program of China","award":["61572115"],"award-info":[{"award-number":["61572115"]}]},{"name":"National Key R&D Program of China","award":["2019-MS-05"],"award-info":[{"award-number":["2019-MS-05"]}]},{"name":"National Key R&D Program of China","award":["2017YFB0802300"],"award-info":[{"award-number":["2017YFB0802300"]}]},{"name":"National Key R&D Program of China","award":["2017YFB0802900"],"award-info":[{"award-number":["2017YFB0802900"]}]},{"name":"National Key R&D Program of China","award":["61602092"],"award-info":[{"award-number":["61602092"]}]},{"name":"National Key R&D Program of China","award":["61972073"],"award-info":[{"award-number":["61972073"]}]},{"name":"National Key R&D Program of China","award":["61572115"],"award-info":[{"award-number":["61572115"]}]},{"name":"National Key R&D Program of China","award":["2019-MS-05"],"award-info":[{"award-number":["2019-MS-05"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2017YFB0802300"],"award-info":[{"award-number":["2017YFB0802300"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2017YFB0802900"],"award-info":[{"award-number":["2017YFB0802900"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61602092"],"award-info":[{"award-number":["61602092"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972073"],"award-info":[{"award-number":["61972073"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61572115"],"award-info":[{"award-number":["61572115"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2019-MS-05"],"award-info":[{"award-number":["2019-MS-05"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2017YFB0802300"],"award-info":[{"award-number":["2017YFB0802300"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2017YFB0802900"],"award-info":[{"award-number":["2017YFB0802900"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61602092"],"award-info":[{"award-number":["61602092"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972073"],"award-info":[{"award-number":["61972073"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61572115"],"award-info":[{"award-number":["61572115"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2019-MS-05"],"award-info":[{"award-number":["2019-MS-05"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2017YFB0802300"],"award-info":[{"award-number":["2017YFB0802300"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2017YFB0802900"],"award-info":[{"award-number":["2017YFB0802900"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61602092"],"award-info":[{"award-number":["61602092"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972073"],"award-info":[{"award-number":["61972073"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61572115"],"award-info":[{"award-number":["61572115"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2019-MS-05"],"award-info":[{"award-number":["2019-MS-05"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002367","name":"Chinese Academy of Sciences","doi-asserted-by":"publisher","award":["2017YFB0802300"],"award-info":[{"award-number":["2017YFB0802300"]}],"id":[{"id":"10.13039\/501100002367","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002367","name":"Chinese Academy of Sciences","doi-asserted-by":"publisher","award":["2017YFB0802900"],"award-info":[{"award-number":["2017YFB0802900"]}],"id":[{"id":"10.13039\/501100002367","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002367","name":"Chinese Academy of Sciences","doi-asserted-by":"publisher","award":["61602092"],"award-info":[{"award-number":["61602092"]}],"id":[{"id":"10.13039\/501100002367","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002367","name":"Chinese Academy of Sciences","doi-asserted-by":"publisher","award":["61972073"],"award-info":[{"award-number":["61972073"]}],"id":[{"id":"10.13039\/501100002367","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002367","name":"Chinese Academy of Sciences","doi-asserted-by":"publisher","award":["61572115"],"award-info":[{"award-number":["61572115"]}],"id":[{"id":"10.13039\/501100002367","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002367","name":"Chinese Academy of Sciences","doi-asserted-by":"publisher","award":["2019-MS-05"],"award-info":[{"award-number":["2019-MS-05"]}],"id":[{"id":"10.13039\/501100002367","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security and Communication Networks"],"published-print":{"date-parts":[[2019,11,4]]},"abstract":"<jats:p>A novel approach for discovering vulnerability in commercial off-the-shelf (COTS) IoT devices is proposed in this paper, which will revolutionize the area. Unlike previous work, the web management interface in IoT was used to detect vulnerabilities by leveraging fuzzing technology. To validate and evaluate this scheme, a tool named WMIFuzzer was designed and implemented. There were also two challenges: (1) due to the diversity of web interface implementations, there were no existing seed messages for fuzzing this interface and it was inefficient while taking random messages to launch the fuzzing and (2) because of the highly structured seed message, fuzzing with byte-level mutation could conduce to be rejected by the device at an early stage. To address these challenges, a brute-force UI automation was designed to drive the web interface to generate initial seed messages automatically, as well as a weighted message parse tree (WMPT) was proposed to guide the mutation to generate mostly structure-valid messages. The extensive experimental results show that WMIFuzzer could achieve expected result while 10 vulnerabilities including 6 zero-days in 7 COTS IoT devices were discovered.<\/jats:p>","DOI":"10.1155\/2019\/5076324","type":"journal-article","created":{"date-parts":[[2019,11,4]],"date-time":"2019-11-04T18:59:54Z","timestamp":1572893994000},"page":"1-19","source":"Crossref","is-referenced-by-count":20,"title":["Discovering Vulnerabilities in COTS IoT Devices through Blackbox Fuzzing Web Management Interface"],"prefix":"10.1155","volume":"2019","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5141-9296","authenticated-orcid":true,"given":"Dong","family":"Wang","sequence":"first","affiliation":[{"name":"University of Electronic Science and Technology of China, ADLab of Venustech, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9886-1412","authenticated-orcid":true,"given":"Xiaosong","family":"Zhang","sequence":"additional","affiliation":[{"name":"University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ting","family":"Chen","sequence":"additional","affiliation":[{"name":"University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jingwei","family":"Li","sequence":"additional","affiliation":[{"name":"University of Electronic Science and Technology of China, State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","reference":[{"key":"7","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2017.2721359"},{"key":"8","doi-asserted-by":"publisher","DOI":"10.1109\/tii.2018.2834351"},{"key":"9","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2016.2605087"},{"key":"21","year":"2018"},{"key":"26","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2019.2914911"},{"key":"27","doi-asserted-by":"publisher","DOI":"10.1155\/2018\/6464036"},{"key":"28","doi-asserted-by":"publisher","DOI":"10.1109\/mce.2017.2685019"},{"key":"31","doi-asserted-by":"publisher","DOI":"10.1145\/1323293.1294265"},{"key":"32","year":"2000"},{"issue":"9","key":"33","first-page":"748","volume":"4","year":"1998","journal-title":"Journal of Universal Computer Science"},{"key":"39","doi-asserted-by":"publisher","DOI":"10.14569\/ijacsa.2012.030603"},{"key":"40","doi-asserted-by":"publisher","DOI":"10.1145\/2093548.2093564"},{"issue":"5","key":"41","first-page":"489","volume":"45","year":"2017","journal-title":"IEEE Transactions on Software Engineering"},{"key":"44","doi-asserted-by":"publisher","DOI":"10.1145\/1082983.1083143"},{"key":"47","doi-asserted-by":"publisher","DOI":"10.1109\/msp.2007.45"},{"key":"59","doi-asserted-by":"publisher","DOI":"10.1145\/1961296.1950396"},{"key":"63","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1262"},{"key":"64","doi-asserted-by":"publisher","DOI":"10.3837\/tiis.2013.08.014"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2019\/5076324.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2019\/5076324.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2019\/5076324.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,11,4]],"date-time":"2019-11-04T18:59:59Z","timestamp":1572893999000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/scn\/2019\/5076324\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,11,4]]},"references-count":18,"alternative-id":["5076324","5076324"],"URL":"https:\/\/doi.org\/10.1155\/2019\/5076324","relation":{},"ISSN":["1939-0114","1939-0122"],"issn-type":[{"value":"1939-0114","type":"print"},{"value":"1939-0122","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,11,4]]}}}