{"id":"https://openalex.org/W2474516640","doi":null,"title":"FlowFence: practical data protection for emerging IoT application frameworks","display_name":"FlowFence: practical data protection for emerging IoT application frameworks","publication_year":2016,"publication_date":"2016-08-10","ids":{"openalex":"https://openalex.org/W2474516640","mag":"2474516640"},"language":"en","primary_location":{"id":"pmh:oai:www.research.unipd.it:11577/3211925","doi":null,"is_oa":false,"landing_page_url":"http://hdl.handle.net/11577/3211925","pdf_url":null,"source":{"id":"https://openalex.org/S4306402547","display_name":"Padua Research Archive (University of Padova)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I138689650","host_organization_name":"University of Padua","host_organization_lineage":["https://openalex.org/I138689650"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"},"volume":null,"type":"conference-paper","indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060924315","display_name":"Earlence Fernandes","orcid":"https://orcid.org/0000-0001-8593-2840","observed_orcids":["https://orcid.org/0000-0001-8593-2840"]},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Earlence Fernandes","raw_affiliation_strings":["\u2020University of Michigan"],"raw_orcid":"https://orcid.org/0000-0001-8593-2840","affiliations":[{"raw_affiliation_string":"\u2020University of Michigan","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006065205","display_name":"Justin Paupore","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Justin Paupore","raw_affiliation_strings":["\u2020University of Michigan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"\u2020University of Michigan","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021423602","display_name":"Amir Rahmati","orcid":"https://orcid.org/0000-0001-7361-1898","observed_orcids":["https://orcid.org/0000-0001-7361-1898"]},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Amir Rahmati","raw_affiliation_strings":["\u2020University of Michigan"],"raw_orcid":"https://orcid.org/0000-0001-7361-1898","affiliations":[{"raw_affiliation_string":"\u2020University of Michigan","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041211360","display_name":"Daniel Simionato","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I138689650","display_name":"University of Padua","ror":"https://ror.org/00240q980","country_code":"IT","type":"education","lineage":["https://openalex.org/I138689650"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Daniel Simionato","raw_affiliation_strings":["University of Padova#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Padova#TAB#","institution_ids":["https://openalex.org/I138689650"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063847107","display_name":"Mauro Conti","orcid":"https://orcid.org/0000-0002-3612-1934","observed_orcids":["https://orcid.org/0000-0002-3612-1934"]},"institutions":[{"id":"https://openalex.org/I138689650","display_name":"University of Padua","ror":"https://ror.org/00240q980","country_code":"IT","type":"education","lineage":["https://openalex.org/I138689650"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Mauro Conti","raw_affiliation_strings":["University of Padova#TAB#"],"raw_orcid":"https://orcid.org/0000-0002-3612-1934","affiliations":[{"raw_affiliation_string":"University of Padova#TAB#","institution_ids":["https://openalex.org/I138689650"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019723791","display_name":"Atul Prakash","orcid":"https://orcid.org/0000-0002-4907-3687","observed_orcids":["https://orcid.org/0000-0002-4907-3687"]},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Atul Prakash","raw_affiliation_strings":["\u2020University of Michigan"],"raw_orcid":"https://orcid.org/0000-0002-4907-3687","affiliations":[{"raw_affiliation_string":"\u2020University of Michigan","institution_ids":["https://openalex.org/I27837315"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":16.3341,"has_fulltext":false,"cited_by_count":212,"citation_normalized_percentile":{"value":0.99374582,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"531","last_page":"548"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.98580002784729,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.98580002784729,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13999","display_name":"Digital Rights Management and Security","score":0.002300000051036477,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.002099999925121665,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sensitive-data-protection","display_name":"sensitive data protection","score":0.9049999713897705},{"id":"https://openalex.org/keywords/data-flow-tracking","display_name":"data flow tracking","score":0.6899999976158142},{"id":"https://openalex.org/keywords/taint-tracking","display_name":"taint tracking","score":0.7419999837875366},{"id":"https://openalex.org/keywords/sandboxing","display_name":"sandboxing","score":0.7360000014305115},{"id":"https://openalex.org/keywords/permission-based-access-control","display_name":"permission-based access control","score":0.8539999723434448},{"id":"https://openalex.org/keywords/smart-home","display_name":"home automation","score":0.5839999914169312},{"id":"https://openalex.org/keywords/wearable-devices","display_name":"wearable devices","score":0.765999972820282}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8325164318084717},{"id":"https://openalex.org/C106251023","wikidata":"https://www.wikidata.org/wiki/Q851989","display_name":"Porting","level":3,"score":0.6507014036178589},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5404598712921143},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.5122165083885193},{"id":"https://openalex.org/C49020025","wikidata":"https://www.wikidata.org/wiki/Q1059099","display_name":"Chaining","level":2,"score":0.49599894881248474},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.4916897416114807},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.4765613377094269},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4621563255786896},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4421907067298889},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.386283814907074},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2751436233520508},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:www.research.unipd.it:11577/3211925","doi":null,"is_oa":false,"landing_page_url":"http://hdl.handle.net/11577/3211925","pdf_url":null,"source":{"id":"https://openalex.org/S4306402547","display_name":"Padua Research Archive (University of Padova)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I138689650","host_organization_name":"University of Padua","host_organization_lineage":["https://openalex.org/I138689650"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"mag:2474516640","doi":null,"is_oa":false,"landing_page_url":"https://atc.usenix.org/system/files/conference/usenixsecurity16/sec16_paper_fernandes.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306421123","display_name":"USENIX Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":"USENIX Security Symposium","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W12540587","https://openalex.org/W74184291","https://openalex.org/W174674715","https://openalex.org/W1264845515","https://openalex.org/W1438425488","https://openalex.org/W1584125386","https://openalex.org/W1605360721","https://openalex.org/W1849042743","https://openalex.org/W1963971515","https://openalex.org/W1984879109","https://openalex.org/W2003276999","https://openalex.org/W2013073142","https://openalex.org/W2014235365","https://openalex.org/W2014609883","https://openalex.org/W2015084990","https://openalex.org/W2027538101","https://openalex.org/W2033811191","https://openalex.org/W2047370472","https://openalex.org/W2050379150","https://openalex.org/W2061445336","https://openalex.org/W2063972446","https://openalex.org/W2066588645","https://openalex.org/W2099878912","https://openalex.org/W2102460407","https://openalex.org/W2107643854","https://openalex.org/W2107881300","https://openalex.org/W2114275288","https://openalex.org/W2123307077","https://openalex.org/W2125011234","https://openalex.org/W2129592257","https://openalex.org/W2132185316","https://openalex.org/W2132461047","https://openalex.org/W2138788987","https://openalex.org/W2148397566","https://openalex.org/W2158126684","https://openalex.org/W2162283517","https://openalex.org/W2165120273","https://openalex.org/W2166743230","https://openalex.org/W2168769758","https://openalex.org/W2171690178","https://openalex.org/W2211400362","https://openalex.org/W2227487674","https://openalex.org/W2324401260","https://openalex.org/W2325283365","https://openalex.org/W2508433864","https://openalex.org/W2625599531"],"related_works":["https://openalex.org/W2751531621","https://openalex.org/W2613352518","https://openalex.org/W2508433864","https://openalex.org/W2408302068","https://openalex.org/W2947175569","https://openalex.org/W2792078641","https://openalex.org/W2686848947","https://openalex.org/W2964014507","https://openalex.org/W2889033824","https://openalex.org/W2791710451","https://openalex.org/W2293605433","https://openalex.org/W2963846158","https://openalex.org/W2890188242","https://openalex.org/W2890559797","https://openalex.org/W2748868501","https://openalex.org/W2605367183","https://openalex.org/W2358552375","https://openalex.org/W2354520588","https://openalex.org/W2889851986","https://openalex.org/W2119812052"],"abstract_inverted_index":{"Emerging":[0],"IoT":[1,151,166],"programming":[2],"frameworks":[3,20,152],"enable":[4],"building":[5],"apps":[6,35,99,170,193],"that":[7,51,109,119,140,195],"compute":[8],"on":[9,26,111,123,191],"sensitive":[10,27,55,112,124],"data":[11,37,56,61,82,113,125,139],"produced":[12],"by":[13,79,129],"smart":[14],"homes":[15],"and":[16,84,116,160,213],"wearables.":[17],"However,":[18],"these":[19,169],"only":[21,142],"support":[22,95],"permission-based":[23],"access":[24],"control":[25,87],"data,":[28],"which":[29,64],"is":[30,197],"ineffective":[31],"at":[32],"controlling":[33],"how":[34],"use":[36,93],"once":[38],"they":[39],"gain":[40],"access.":[41],"To":[42],"address":[43],"this":[44,78],"limitation,":[45],"we":[46,161],"present":[47],"FlowFence,":[48],"a":[49,205,211,215],"system":[50],"requires":[52],"consumers":[53],"of":[54,106,186],"to":[57,96,138,153,183,209],"declare":[58],"their":[59,98],"intended":[60],"flow":[62],"patterns,":[63],"it":[65],"enforces":[66],"with":[67],"low":[68],"overhead,":[69],"while":[70],"blocking":[71],"all":[72],"other":[73],"undeclared":[74],"flows.":[75],"FlowFence":[76,172,196],"achieves":[77],"explicitly":[80],"embedding":[81],"flows":[83,88],"the":[85],"related":[86],"within":[89],"app":[90,203],"structure.":[91],"Developers":[92],"Flow-Fence":[94],"split":[97],"into":[100],"two":[101],"components:":[102],"(1)":[103],"A":[104,199],"set":[105],"Quarantined":[107,131],"Modules":[108,132],"operate":[110,122],"in":[114,174,178],"sandboxes,":[115],"(2)":[117],"Code":[118],"does":[120],"not":[121],"but":[126],"orchestrates":[127],"execution":[128],"chaining":[130],"together":[133],"via":[134],"taint-tracked":[135],"opaque":[136],"handles-references":[137],"can":[141],"be":[143],"dereferenced":[144],"inside":[145],"sandboxes.":[146],"We":[147],"studied":[148],"three":[149,164],"existing":[150,165],"derive":[154],"key":[155],"functionality":[156],"goals":[157],"for":[158],"Flow-Fence,":[159],"then":[162],"ported":[163,192],"apps.":[167],"Securing":[168],"using":[171],"resulted":[173],"an":[175],"average":[176],"increase":[177],"size":[179],"from":[180],"232":[181],"lines":[182,185],"332":[184],"source":[187],"code.":[188],"Performance":[189],"results":[190],"indicate":[194],"practical:":[198],"face-recognition":[200],"based":[201],"door-controller":[202],"incurred":[204],"4.9%":[206],"latency":[207],"overhead":[208],"recognize":[210],"face":[212],"unlock":[214],"door.":[216]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":19},{"year":2021,"cited_by_count":32},{"year":2020,"cited_by_count":44},{"year":2019,"cited_by_count":37},{"year":2018,"cited_by_count":36},{"year":2017,"cited_by_count":17},{"year":2016,"cited_by_count":1}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2025-10-10T00:00:00"}