{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,24]],"date-time":"2026-07-24T06:07:37Z","timestamp":1784873257082,"version":"3.55.0"},"reference-count":44,"publisher":"Institute of Electronics, Information and Communications Engineers (IEICE)","issue":"12","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEICE Trans. Inf. & Syst."],"published-print":{"date-parts":[[2025,12,1]]},"DOI":"10.1587\/transinf.2024edp7325","type":"journal-article","created":{"date-parts":[[2025,6,8]],"date-time":"2025-06-08T18:07:12Z","timestamp":1749406032000},"page":"1556-1569","source":"Crossref","is-referenced-by-count":1,"title":["Prioritizing Vulnerability Assessment Items for IoT Devices Based on Suitability Evaluation Using LLMs"],"prefix":"10.1587","volume":"E108.D","author":[{"given":"Yuka","family":"IKEGAMI","sequence":"first","affiliation":[{"name":"The Department of Computer Science and Communications Engineering, Waseda University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kento","family":"HASEGAWA","sequence":"additional","affiliation":[{"name":"KDDI Research, Inc."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Seira","family":"HIDANO","sequence":"additional","affiliation":[{"name":"KDDI Research, Inc."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kazuhide","family":"FUKUSHIMA","sequence":"additional","affiliation":[{"name":"KDDI Research, Inc."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kazuo","family":"HASHIMOTO","sequence":"additional","affiliation":[{"name":"The Department of Computer Science and Communications Engineering, Waseda University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nozomu","family":"TOGAWA","sequence":"additional","affiliation":[{"name":"The Department of Computer Science and Communications Engineering, Waseda University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"532","reference":[{"key":"1","doi-asserted-by":"publisher","unstructured":"[1] W. Zhou, Y. Jia, A. Peng, Y. Zhang, and P. Liu, \u201cThe Effect of IoT New Features on Security and Privacy: New Threats, Existing Solutions, and Challenges Yet to Be Solved,\u201d IEEE Internet Things J., vol.6, no.2, pp.1606-1616, 2019. 10.1109\/jiot.2018.2847733","DOI":"10.1109\/JIOT.2018.2847733"},{"key":"2","doi-asserted-by":"publisher","unstructured":"[2] I. Ahmad, M.S. Niazy, R.A. Ziar, and S. Khan, \u201cSurvey on IoT: security threats and applications,\u201d Journal of Robotics and Control (JRC), vol.2, no.1, pp.42-46, 2021. 10.18196\/jrc.2150","DOI":"10.18196\/jrc.2150"},{"key":"3","unstructured":"[3] \u201cOpenVAS.\u201d https:\/\/www.openvas.org\/. Accessed on March 6, 2025."},{"key":"4","unstructured":"[4] \u201cVuls.\u201d https:\/\/vuls.io\/. Accessed on March 6, 2025."},{"key":"5","unstructured":"[5] \u201cNikto.\u201d https:\/\/cirt.net\/Nikto2. Accessed on March 6, 2025."},{"key":"6","unstructured":"[6] M. Takiguchi, T. Shinohara, and M. Kato, \u201cAutomating Vulnerability Checks Based on the IoT Security Checklist (in Japanese),\u201d Computer Security Symposium 2019, vol.2019, pp.612-617, 2019."},{"key":"7","doi-asserted-by":"publisher","unstructured":"[7] O.A. Waraga, M. Bettayeb, Q. Nasir, and M.A. Talib, \u201cDesign and implementation of automated IoT security testbed,\u201d Computers & Security, vol.88, p.101648, 2020. 10.1016\/j.cose.2019.101648","DOI":"10.1016\/j.cose.2019.101648"},{"key":"8","unstructured":"[8] JPCERT\/CC, \u201cIoT Security Checklist.\u201d https:\/\/www.jpcert.or.jp\/research\/IoT-SecurityCheckList.html, 2020. Accessed on March 6, 2025."},{"key":"9","unstructured":"[9] TP-Link, \u201cUser Guide Mini Smart Wi-Fi Plug Tapo P105.\u201d https:\/\/static.tp-link.com\/upload\/manual\/2022\/202205\/20220507\/1910013091_Tapo%20P105_UG_V1.pdf. Accessed on March 6, 2025."},{"key":"10","doi-asserted-by":"publisher","unstructured":"[10] P. Anand, Y. Singh, A. Selwal, M. Alazab, S. Tanwar, and N. Kumar, \u201cIoT vulnerability assessment for sustainable computing: threats, current solutions, and open challenges,\u201d IEEE Access, vol.8, pp.168825-168853, 2020. 10.1109\/access.2020.3022842","DOI":"10.1109\/ACCESS.2020.3022842"},{"key":"11","doi-asserted-by":"crossref","unstructured":"[11] Y. Ikegami, R. Negishi, K. Hasegawa, S. Hidano, K. Fukushima, K. Hashimoto, and N. Togawa, \u201cPrioritizing Vulnerability Assessment Items Using LLM Based on IoT Device Documentations,\u201d The 11th International Conference on Internet of Things: Systems, Management and Security (IOTSMS 2024), pp.147-152, 2024. 10.1109\/iotsms62296.2024.10710294","DOI":"10.1109\/IOTSMS62296.2024.10710294"},{"key":"12","unstructured":"[12] \u201cGSMA IoT Security Assessment Checklist.\u201d https:\/\/www.gsma.com\/iot\/iot-security-assessment\/. Accessed on March 6, 2025."},{"key":"13","unstructured":"[13] P. Lewis, E. Perez, A. Piktus, F. Petroni, V. Karpukhin, N. Goyal, H. K\u00fcttler, M. Lewis, W.t. Yih, T. Rockt\u00e4schel, et al., \u201cRetrieval-augmented generation for knowledge-intensive nlp tasks,\u201d Advances in Neural Information Processing Systems, vol.33, pp.9459-9474, 2020."},{"key":"14","doi-asserted-by":"crossref","unstructured":"[14] C. Jeong, \u201cA Study on the Implementation of Generative AI Services Using an Enterprise Data-Based LLM Application Architecture,\u201d arXiv preprint arXiv:2309.01105, 2023.","DOI":"10.54364\/AAIML.2023.1191"},{"key":"15","doi-asserted-by":"crossref","unstructured":"[15] S.E. Robertson, S. Walker, S. Jones, M.M. Hancock-Beaulieu, and M. Gatford, \u201cOkapi at TREC-3,\u201d Nist Special Publication Sp, vol.109, p.109, 1995.","DOI":"10.6028\/NIST.SP.500-225.routing-city"},{"key":"16","doi-asserted-by":"crossref","unstructured":"[16] P.E. Mazar\u00e9, S. Humeau, M. Raison, and A. Bordes, \u201cTraining millions of personalized dialogue agents,\u201d arXiv preprint arXiv:1809.01984, 2018.","DOI":"10.18653\/v1\/D18-1298"},{"key":"17","doi-asserted-by":"publisher","unstructured":"[17] M.F. Porter, \u201cAn algorithm for suffix stripping,\u201d Program, vol.14, no.3, pp.130-137, 1980. 10.1108\/eb046814","DOI":"10.1108\/eb046814"},{"key":"18","doi-asserted-by":"crossref","unstructured":"[18] M. Douze, A. Guzhva, C. Deng, J. Johnson, G. Szilvasy, P.E. Mazar\u00e9, M. Lomeli, L. Hosseini, and H. J\u00e9gou, \u201cThe Faiss library,\u201d 2024.","DOI":"10.1109\/TBDATA.2025.3618474"},{"key":"19","doi-asserted-by":"crossref","unstructured":"[19] G.V. Cormack, C.L.A. Clarke, and S. Buettcher, \u201cReciprocal rank fusion outperforms condorcet and individual rank learning methods,\u201d Proceedings of the 32nd international ACM SIGIR conference on Research and development in information retrieval, pp.758-759, 2009. 10.1145\/1571941.1572114","DOI":"10.1145\/1571941.1572114"},{"key":"20","doi-asserted-by":"crossref","unstructured":"[20] M. Glass, G. Rossiello, M.F.M. Chowdhury, A.R. Naik, P. Cai, and A. Gliozzo, \u201cRe2G: Retrieve, rerank, generate,\u201d arXiv preprint arXiv:2207.06300, 2022.","DOI":"10.18653\/v1\/2022.naacl-main.194"},{"key":"21","unstructured":"[21] R. Nogueira and K. Cho, \u201cPassage Re-ranking with BERT,\u201d arXiv preprint arXiv:1901.04085, 2019."},{"key":"22","doi-asserted-by":"crossref","unstructured":"[22] X. Yang, Y. Zhang, T. Yao, Z.-J. Zha, and C.-W. Ngo, \u201cClick-boosting random walk for image search reranking,\u201d Proceedings of the Fifth International Conference on Internet Multimedia Computing and Service, pp.1-6, 2013. 10.1145\/2499788.2499810","DOI":"10.1145\/2499788.2499810"},{"key":"23","unstructured":"[23] \u201cBAAI\/bge-reranker-large.\u201d https:\/\/huggingface.co\/BAAI\/bge-reranker-large. Accessed on March 6, 2025."},{"key":"24","unstructured":"[24] J. Vig and K. Ramea, \u201cComparison of transfer-learning approaches for response selection in multi-turn conversations,\u201d Workshop on DSTC7, 2019."},{"key":"25","unstructured":"[25] S. Humeau, K. Shuster, M.A. Lachaux, and J. Weston, \u201cPoly-encoders: Transformer architectures and pre-training strategies for fast and accurate multi-sentence scoring,\u201d arXiv preprint arXiv:1905.01969, 2019."},{"key":"26","unstructured":"[26] L. Kuhn, Y. Gal, and S. Farquhar, \u201cSemantic uncertainty: Linguistic invariances for uncertainty estimation in natural language generation,\u201d arXiv preprint arXiv:2302.09664, 2023."},{"key":"27","unstructured":"[27] A. Williams, N. Nangia, and S.R. Bowman, \u201cA broad-coverage challenge corpus for sentence understanding through inference,\u201d arXiv preprint arXiv:1704.05426, 2017."},{"key":"28","unstructured":"[28] Device.Report, \u201cNGTeco User Manual Smart Plug Version: 1.0.\u201d https:\/\/device.report\/m\/2086d7d249878397e594020ecfaa26be4104d66b355a87682a199931da50df64.pdf. Accessed on March 6, 2025."},{"key":"29","unstructured":"[29] TP-Link, \u201cUser Guide Tapo Smart Wi-Fi Light Bulb Tapo L510\/L530 Series.\u201d https:\/\/static.tp-link.com\/upload\/manual\/2023\/202303\/20230331\/1910013377_Tapo%20L510&L530_UG_V1.pdf. Accessed on March 6, 2025."},{"key":"30","unstructured":"[30] Device.Report, \u201cNGTeco User Manual Smart Bulb Version: 1.0.\u201d https:\/\/device.report\/m\/d157575b8ad16301d4ba823a707527ecd635470516b1e609b8a81efa5996550c.pdf. Accessed on March 6, 2025."},{"key":"31","unstructured":"[31] TP-Link, \u201cUser Guide Pan\/Tilt Home Security Wi-Fi Camera.\u201d https:\/\/static.tp-link.com\/upload\/manual\/2023\/202310\/20231016\/1910013527_Tapo%20C200(US)3.26_UG_V1.pdf. Accessed on March 6, 2025."},{"key":"32","unstructured":"[32] \u201cLangChain.\u201d https:\/\/www.langchain.com\/. Accessed on March 6, 2025."},{"key":"33","doi-asserted-by":"publisher","unstructured":"[33] J. Johnson, M. Douze, and H. J\u00e9gou, \u201cBillion-scale similarity search with GPUs,\u201d IEEE Trans. Big Data, vol.7, no.3, pp.535-547, 2019. 10.1109\/tbdata.2019.2921572","DOI":"10.1109\/TBDATA.2019.2921572"},{"key":"34","unstructured":"[34] \u201cmistralai\/Mistral-7B-Instruct-v0.2.\u201d https:\/\/huggingface.co\/mistralai\/Mistral-7B-Instruct-v0.2. Accessed on March 6, 2025."},{"key":"35","unstructured":"[35] A.Q. Jiang, A. Sablayrolles, A. Mensch, C. Bamford, D.S. Chaplot, D. de las Casas, F. Bressand, G. Lengyel, G. Lample, L. Saulnier, L.R. Lavaud, M.A. Lachaux, P. Stock, T.L. Scao, T. Lavril, T. Wang, T. Lacroix, and W.E. Sayed, \u201cMistral 7B,\u201d 2023."},{"key":"36","unstructured":"[36] \u201cmicrosoft\/deberta-large-mnli.\u201d https:\/\/huggingface.co\/microsoft\/deberta-large-mnli. Accessed on March 6, 2025."},{"key":"37","doi-asserted-by":"publisher","unstructured":"[37] H. Wang, G. Ye, Z. Tang, S.H. Tan, S. Huang, D. Fang, Y. Feng, L. Bian, and Z. Wang, \u201cCombining graph-based learning with automated data collection for code vulnerability detection,\u201d IEEE Trans. Inf. Forensics Security, vol.16, pp.1943-1958, 2020. 10.1109\/tifs.2020.3044773","DOI":"10.1109\/TIFS.2020.3044773"},{"key":"38","doi-asserted-by":"publisher","unstructured":"[38] Z. Bilgin, M.A. Ersoy, E.U. Soykan, E. Tomur, P. \u00c7omak, and L. Kara\u00e7ay, \u201cVulnerability prediction from source code using machine learning,\u201d IEEE Access, vol.8, pp.150672-150684, 2020. 10.1109\/access.2020.3016774","DOI":"10.1109\/ACCESS.2020.3016774"},{"key":"39","doi-asserted-by":"crossref","unstructured":"[39] B. Alexander, D. Denis, M. Denis, and T. Aleksey, \u201cAutomatic detection of access control vulnerabilities via API specification processing,\u201d Voprosy Kiberbezopasnosti [Cybersecurity issue], no.1 (47), pp.49-65, 2022.","DOI":"10.21681\/2311-3456-2022-1-49-65"},{"key":"40","doi-asserted-by":"crossref","unstructured":"[40] C. Cheh and B. Chen, \u201cAnalyzing openapi specifications for security design issues,\u201d 2021 IEEE secure development conference (SecDev), pp.15-22, IEEE, 2021. 10.1109\/secdev51306.2021.00019","DOI":"10.1109\/SecDev51306.2021.00019"},{"key":"41","unstructured":"[41] J. Wei, X. Wang, D. Schuurmans, M. Bosma, F. Xia, E. Chi, Q.V. Le, D. Zhou, et al., \u201cChain-of-thought prompting elicits reasoning in large language models,\u201d Advances in neural information processing systems, vol.35, pp.24824-24837, 2022."},{"key":"42","doi-asserted-by":"publisher","unstructured":"[42] T. Salman, A. Ghubaish, D. Unal, and R. Jain, \u201cSafety score as an evaluation metric for machine learning models of security applications,\u201d IEEE Networking Letters, vol.2, no.4, pp.207-211, 2020. 10.1109\/lnet.2020.3016583","DOI":"10.1109\/LNET.2020.3016583"},{"key":"43","doi-asserted-by":"publisher","unstructured":"[43] N.H. Noi, D. Hoa, and T.N. Ngoc, \u201cA deep learning approach combining autoencoder with supervised classifiers for iot anomaly detection,\u201d Journal of Modern Science and Technology, no.CSCE7, pp.98-110, 2023. 10.54939\/1859-1043.j.mst.csce7.2023.98-110","DOI":"10.54939\/1859-1043.j.mst.CSCE7.2023.98-110"},{"key":"44","unstructured":"[44] Y. Ikegami, K. Hasegawa, S. Hidano, K. Fukushima, K. Hashimoto, and N. Togawa, \u201cPrioritizing Security Tests Using LLM Based on ETSI TS 103 701 (in Japanese),\u201d Computer Security Symposium 2024, pp.24-31, 2024."}],"container-title":["IEICE Transactions on Information and Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/transinf\/E108.D\/12\/E108.D_2024EDP7325\/_pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,6]],"date-time":"2025-12-06T03:27:31Z","timestamp":1764991651000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/transinf\/E108.D\/12\/E108.D_2024EDP7325\/_article"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,1]]},"references-count":44,"journal-issue":{"issue":"12","published-print":{"date-parts":[[2025]]}},"URL":"https:\/\/doi.org\/10.1587\/transinf.2024edp7325","relation":{},"ISSN":["0916-8532","1745-1361"],"issn-type":[{"value":"0916-8532","type":"print"},{"value":"1745-1361","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,12,1]]},"article-number":"2024EDP7325"}}