{"id":"https://openalex.org/W4205842984","doi":"https://doi.org/10.1109/access.2021.3138768","title":"Riding the IoT Wave With VFuzz: Discovering Security Flaws in Smart Homes","display_name":"Riding the IoT Wave With VFuzz: Discovering Security Flaws in Smart Homes","publication_year":2021,"publication_date":"2021-12-27","ids":{"openalex":"https://openalex.org/W4205842984","doi":"https://doi.org/10.1109/access.2021.3138768"},"language":"en","primary_location":{"id":"doi:10.1109/access.2021.3138768","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3138768","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09663293.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09663293.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5090836543","display_name":"Carlos Kayembe Nkuba","orcid":"https://orcid.org/0000-0002-6424-9054"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Carlos Kayembe Nkuba","raw_affiliation_strings":["Department of Computer Science and Engineering, Korea University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-6424-9054","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Korea University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I197347611"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021364059","display_name":"Seulbae Kim","orcid":"https://orcid.org/0000-0001-9990-7953"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Seulbae Kim","raw_affiliation_strings":["Department of Computer Science, Georgia Institute of Technology, Atlanta, GA, USA"],"raw_orcid":"https://orcid.org/0000-0001-9990-7953","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112273201","display_name":"Sven Dietrich","orcid":null},"institutions":[{"id":"https://openalex.org/I174216632","display_name":"City University of New York","ror":"https://ror.org/00453a208","country_code":"US","type":"education","lineage":["https://openalex.org/I174216632"]},{"id":"https://openalex.org/I39694355","display_name":"Hunter College","ror":"https://ror.org/00g2xk477","country_code":"US","type":"education","lineage":["https://openalex.org/I39694355"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sven Dietrich","raw_affiliation_strings":["Department of Computer Science, Hunter College, City University of New York (CUNY), New York, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Hunter College, City University of New York (CUNY), New York, NY, USA","institution_ids":["https://openalex.org/I174216632","https://openalex.org/I39694355"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101630726","display_name":"Heejo Lee","orcid":"https://orcid.org/0000-0002-5831-0787"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Heejo Lee","raw_affiliation_strings":["Department of Computer Science and Engineering, Korea University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-5831-0787","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Korea University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I197347611"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":2.0907,"has_fulltext":true,"cited_by_count":22,"citation_normalized_percentile":{"value":0.87763072,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"10","issue":null,"first_page":"1775","last_page":"1789"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.8762738704681396},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6768738031387329},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6273784041404724},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.432380735874176},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.42620849609375},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4246547818183899},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.22218108177185059},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.10021108388900757}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.8762738704681396},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6768738031387329},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6273784041404724},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.432380735874176},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.42620849609375},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4246547818183899},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.22218108177185059},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10021108388900757},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2021.3138768","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3138768","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09663293.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:495e3f93e1524cb3b987b5e7a1c674c4","is_oa":true,"landing_page_url":"https://doaj.org/article/495e3f93e1524cb3b987b5e7a1c674c4","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 10, Pp 1775-1789 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2021.3138768","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3138768","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09663293.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2325797177","display_name":null,"funder_award_id":"2019-0-01343","funder_id":"https://openalex.org/F4320335489","funder_display_name":"Institute for Information and Communications Technology Promotion"},{"id":"https://openalex.org/G263811790","display_name":null,"funder_award_id":"2019-0-01343","funder_id":"https://openalex.org/F4320328359","funder_display_name":"Ministry of Science and ICT, South Korea"},{"id":"https://openalex.org/G2964929314","display_name":null,"funder_award_id":"IITP-2021-2020-0-01819","funder_id":"https://openalex.org/F4320328359","funder_display_name":"Ministry of Science and ICT, South Korea"},{"id":"https://openalex.org/G3756510953","display_name":null,"funder_award_id":"2019-0-01697","funder_id":"https://openalex.org/F4320328359","funder_display_name":"Ministry of Science and ICT, South Korea"},{"id":"https://openalex.org/G731599535","display_name":null,"funder_award_id":"IITP-2021-2020-0-01819","funder_id":"https://openalex.org/F4320335489","funder_display_name":"Institute for Information and Communications Technology Promotion"},{"id":"https://openalex.org/G8018065544","display_name":null,"funder_award_id":"2020-0-01819","funder_id":"https://openalex.org/F4320328359","funder_display_name":"Ministry of Science and ICT, South Korea"}],"funders":[{"id":"https://openalex.org/F4320320719","display_name":"Department of Science and Technology, Ministry of Science and Technology, India","ror":"https://ror.org/0101xrq71"},{"id":"https://openalex.org/F4320328359","display_name":"Ministry of Science and ICT, South Korea","ror":"https://ror.org/01wpjm123"},{"id":"https://openalex.org/F4320332202","display_name":"Research Foundation of The City University of New York","ror":"https://ror.org/01d03cj21"},{"id":"https://openalex.org/F4320335489","display_name":"Institute for Information and Communications Technology Promotion","ror":"https://ror.org/01g0hqq23"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4205842984.pdf","grobid_xml":"https://content.openalex.org/works/W4205842984.grobid-xml"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W197529132","https://openalex.org/W1249592992","https://openalex.org/W1910751411","https://openalex.org/W2002934700","https://openalex.org/W2027281287","https://openalex.org/W2043118292","https://openalex.org/W2095343582","https://openalex.org/W2207843080","https://openalex.org/W2271247047","https://openalex.org/W2272707815","https://openalex.org/W2305049525","https://openalex.org/W2538592916","https://openalex.org/W2576376563","https://openalex.org/W2584230735","https://openalex.org/W2606838258","https://openalex.org/W2774161712","https://openalex.org/W2782780792","https://openalex.org/W2788004592","https://openalex.org/W2791018263","https://openalex.org/W2904219749","https://openalex.org/W2962949309","https://openalex.org/W3001228218","https://openalex.org/W3036343437","https://openalex.org/W3160783671","https://openalex.org/W6608103139","https://openalex.org/W6748360417","https://openalex.org/W6750636184","https://openalex.org/W6766830175","https://openalex.org/W6773417001","https://openalex.org/W6794187937"],"related_works":["https://openalex.org/W4232884709","https://openalex.org/W4385625698","https://openalex.org/W3017338730","https://openalex.org/W2517087431","https://openalex.org/W3006477812","https://openalex.org/W3021250941","https://openalex.org/W4322716318","https://openalex.org/W2884244258","https://openalex.org/W3213837676","https://openalex.org/W2042616262"],"abstract_inverted_index":{"Z-Wave":[0,25,67,100,118,123,165],"smart":[1],"home":[2,17],"Internet":[3],"of":[4,107,121],"Things":[5],"devices":[6,124,151],"are":[7],"used":[8],"to":[9,78,103,128,163],"save":[10],"energy,":[11],"increase":[12],"comfort,":[13],"and":[14,33,75,82,145,152,158],"remotely":[15],"monitor":[16],"activities.":[18],"In":[19],"the":[20,71,84,105,108,149,164],"past,":[21],"security":[22,143],"researchers":[23],"found":[24,140],"device":[26,73,135],"vulnerabilities":[27,65,144,157],"through":[28],"reverse":[29],"engineering,":[30],"manual":[31],"audits,":[32],"penetration":[34],"testing.":[35],"However,":[36],"they":[37],"did":[38],"not":[39],"fully":[40],"use":[41],"fuzzing,":[42],"which":[43,97],"is":[44],"an":[45],"automated":[46],"cost-effective":[47],"testing":[48],"technique.":[49],"Thus,":[50],"in":[51,66],"this":[52],"paper,":[53],"we":[54],"present":[55],"VFUZZ,":[56],"a":[57,116],"protocol-aware":[58],"blackbox":[59],"fuzzing":[60],"framework":[61],"for":[62,86],"quickly":[63],"assessing":[64],"devices.":[68],"VFUZZ":[69,114,138],"assesses":[70],"target":[72,85],"capabilities":[74],"encryption":[76],"support":[77],"guide":[79],"seed":[80],"selection":[81],"tests":[83],"new":[87],"vulnerability":[88],"discovery.":[89],"It":[90],"uses":[91],"our":[92],"field":[93],"prioritization":[94],"algorithm":[95],"(FIPA),":[96],"mutates":[98],"specific":[99],"frame":[101],"fields":[102],"ensure":[104],"validity":[106],"generated":[109],"test":[110],"cases.":[111],"We":[112],"assessed":[113],"on":[115],"real":[117],"network":[119],"consisting":[120],"19":[122],"ranging":[125],"from":[126],"legacy":[127],"recent":[129],"ones,":[130],"as":[131,133],"well":[132],"different":[134],"types.":[136],"Our":[137],"evaluation":[139],"10":[141],"distinct":[142],"seven":[146],"crashes":[147],"among":[148],"tested":[150],"yielded":[153],"six":[154],"unique":[155],"common":[156],"exposures":[159],"(CVE)":[160],"identifiers":[161],"related":[162],"chipset.":[166]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":2}],"updated_date":"2026-08-12T21:12:35.861297","created_date":"2025-10-10T00:00:00"}