{"id":"https://openalex.org/W7161954405","doi":"https://doi.org/10.1016/j.cose.2026.104974","title":"An analysis of IoT device update mechanisms","display_name":"An analysis of IoT device update mechanisms","publication_year":2026,"publication_date":"2026-05-21","ids":{"openalex":"https://openalex.org/W7161954405","doi":"https://doi.org/10.1016/j.cose.2026.104974"},"language":"en","primary_location":{"id":"doi:10.1016/j.cose.2026.104974","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.104974","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.cose.2026.104974","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065826523","display_name":"Ashley Andrews","orcid":"https://orcid.org/0000-0001-8657-3448"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Ashley Andrews","raw_affiliation_strings":["Electrical, Electronic and Mechanical Engineering, University of Bristol, Merchant Venturers Building, Bristol, BS8 1UB, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0001-8657-3448","affiliations":[{"raw_affiliation_string":"Electrical, Electronic and Mechanical Engineering, University of Bristol, Merchant Venturers Building, Bristol, BS8 1UB, United Kingdom","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072981915","display_name":"George Oikonomou","orcid":"https://orcid.org/0000-0002-1684-6989"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"George Oikonomou","raw_affiliation_strings":["Electrical, Electronic and Mechanical Engineering, University of Bristol, Merchant Venturers Building, Bristol, BS8 1UB, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0002-1684-6989","affiliations":[{"raw_affiliation_string":"Electrical, Electronic and Mechanical Engineering, University of Bristol, Merchant Venturers Building, Bristol, BS8 1UB, United Kingdom","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136650305","display_name":"Simon Armour","orcid":null},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Simon Armour","raw_affiliation_strings":["Electrical, Electronic and Mechanical Engineering, University of Bristol, Merchant Venturers Building, Bristol, BS8 1UB, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical, Electronic and Mechanical Engineering, University of Bristol, Merchant Venturers Building, Bristol, BS8 1UB, United Kingdom","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136725764","display_name":"Paul Thomas","orcid":null},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Paul Thomas","raw_affiliation_strings":["Electrical, Electronic and Mechanical Engineering, University of Bristol, Merchant Venturers Building, Bristol, BS8 1UB, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical, Electronic and Mechanical Engineering, University of Bristol, Merchant Venturers Building, Bristol, BS8 1UB, United Kingdom","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038672273","display_name":"Thomas Cattermole","orcid":"https://orcid.org/0009-0001-2069-4922"},"institutions":[{"id":"https://openalex.org/I4210092297","display_name":"Ulverscroft (United Kingdom)","ror":"https://ror.org/00p3nsd37","country_code":"GB","type":"company","lineage":["https://openalex.org/I4210092297"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Thomas Cattermole","raw_affiliation_strings":["Tiberos Research, Bencroft, Ware, SG11 2RW, United Kingdom"],"raw_orcid":"https://orcid.org/0009-0001-2069-4922","affiliations":[{"raw_affiliation_string":"Tiberos Research, Bencroft, Ware, SG11 2RW, United Kingdom","institution_ids":["https://openalex.org/I4210092297"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5065826523"],"corresponding_institution_ids":["https://openalex.org/I36234482"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.57843972,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"169","issue":null,"first_page":"104974","last_page":"104974"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.11620000004768372,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.11620000004768372,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12799","display_name":"Mobile and Web Applications","score":0.08470000326633453,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.03519999980926514,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.887499988079071},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.6402999758720398},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.6273999810218811},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5130000114440918},{"id":"https://openalex.org/keywords/smart-device","display_name":"Smart device","score":0.3659000098705292},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.3652999997138977},{"id":"https://openalex.org/keywords/networking-hardware","display_name":"Networking hardware","score":0.32109999656677246}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.887499988079071},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8633999824523926},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.6402999758720398},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.6273999810218811},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5130000114440918},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4408000111579895},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.38940000534057617},{"id":"https://openalex.org/C2776898695","wikidata":"https://www.wikidata.org/wiki/Q11253473","display_name":"Smart device","level":2,"score":0.3659000098705292},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.3652999997138977},{"id":"https://openalex.org/C159631557","wikidata":"https://www.wikidata.org/wiki/Q1546066","display_name":"Networking hardware","level":2,"score":0.32109999656677246},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.31619998812675476},{"id":"https://openalex.org/C204222849","wikidata":"https://www.wikidata.org/wiki/Q104954","display_name":"Radio-frequency identification","level":2,"score":0.3127000033855438},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.3001999855041504},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.2930000126361847},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.27459999918937683},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.25589999556541443},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.250900000333786}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1016/j.cose.2026.104974","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.104974","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},{"id":"pmh:oai:research-information.bris.ac.uk:publications/2940c182-a84c-4f8e-96af-a76a02ba0525","is_oa":true,"landing_page_url":"https://research-information.bris.ac.uk/en/publications/2940c182-a84c-4f8e-96af-a76a02ba0525","pdf_url":null,"source":{"id":"https://openalex.org/S7407055359","display_name":"Explore Bristol Research","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Andrews, A, Oikonomou, G, Armour, S M D, Thomas, P & Cattermole, T 2026, 'An analysis of IoT device update mechanisms', Computers and Security, vol. 169, 104974. https://doi.org/10.1016/j.cose.2026.104974","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:research-information.bris.ac.uk:openaire_cris_publications/2940c182-a84c-4f8e-96af-a76a02ba0525","is_oa":true,"landing_page_url":"https://hdl.handle.net/1983/2940c182-a84c-4f8e-96af-a76a02ba0525","pdf_url":null,"source":{"id":"https://openalex.org/S4306400895","display_name":"Bristol Research (University of Bristol)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I36234482","host_organization_name":"University of Bristol","host_organization_lineage":["https://openalex.org/I36234482"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Andrews, A, Oikonomou, G, Armour, S M D, Thomas, P & Cattermole, T 2026, 'An analysis of IoT device update mechanisms', Computers and Security, vol. 169, 104974. https://doi.org/10.1016/j.cose.2026.104974","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1016/j.cose.2026.104974","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.104974","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W2888505697","https://openalex.org/W2921669466","https://openalex.org/W3005876284","https://openalex.org/W3093880997","https://openalex.org/W3096391524","https://openalex.org/W3096708903","https://openalex.org/W4281288583","https://openalex.org/W4285226206","https://openalex.org/W4388015764","https://openalex.org/W4391099804","https://openalex.org/W4406318550"],"related_works":[],"abstract_inverted_index":{"IoT":[0,30,48,67,165],"devices":[1,31,49,68,112,122,141,166],"are":[2,50,55,99,142],"becoming":[3],"more":[4],"embedded":[5],"within":[6,69],"our":[7,179],"lives,":[8],"but":[9],"the":[10,14,79,87,111,161,183],"competitive":[11],"nature":[12],"of":[13,38,83,89,93,110,147,164,185],"industry":[15],"requires":[16],"quick":[17],"time":[18],"to":[19,28,34,101],"market":[20],"with":[21],"security":[22],"being":[23],"an":[24,62],"afterthought.":[25],"One":[26],"way":[27],"keep":[29],"secure":[32],"is":[33,198],"regularly":[35],"patch":[36],"them":[37],"known":[39],"vulnerabilities.":[40],"This":[41],"relies":[42],"on":[43,155,201],"knowing":[44],"what":[45,178],"firmware":[46],"versions":[47],"running,":[51],"and":[52,95,119,132,150,188],"when":[53,195],"they":[54],"updating.":[56],"In":[57],"this":[58,156],"paper":[59],"we":[60,158],"complete":[61],"update":[63,152,186],"analysis":[64,180],"for":[65,120,182,193],"50":[66],"a":[70,74,107,190,196],"lab":[71],"that":[72,106,123,139],"simulates":[73],"smart":[75],"home.":[76],"We":[77,104,136,175],"analyse":[78],"passive":[80],"network":[81],"traffic":[82],"these":[84],"devices,":[85],"documenting":[86],"prevalence":[88],"automatic":[90,125,162],"updates,":[91,94,126],"frequency":[92],"whether":[96],"encrypted":[97],"channels":[98],"used":[100],"send":[102],"updates.":[103],"find":[105],"significant":[108],"proportion":[109],"analysed":[113],"can":[114,133,172],"only":[115],"be":[116,134,173],"updated":[117,144],"manually;":[118],"those":[121],"have":[124],"many":[127,140],"typically":[128],"require":[129],"user":[130],"confirmation":[131],"disabled.":[135],"also":[137,176],"see":[138],"not":[143],"over":[145],"periods":[146],"several":[148],"months,":[149],"often":[151],"insecurely.":[153],"Based":[154],"analysis,":[157],"discuss":[159],"how":[160],"identification":[163,170],"\u2014":[167,171],"including":[168],"version":[169],"improved.":[174],"consider":[177],"means":[181],"problem":[184],"detection":[187],"provide":[189],"step-by-step":[191],"outline":[192],"detecting":[194],"device":[197],"updating":[199],"based":[200],"its":[202],"traffic.":[203]},"counts_by_year":[],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2026-05-22T00:00:00"}