{"id":"https://openalex.org/W4396886476","doi":"https://doi.org/10.1109/jiot.2024.3400858","title":"Detection and Analysis of Broken Access Control Vulnerabilities in App\u2013Cloud Interaction in IoT","display_name":"Detection and Analysis of Broken Access Control Vulnerabilities in App\u2013Cloud Interaction in IoT","publication_year":2024,"publication_date":"2024-05-14","ids":{"openalex":"https://openalex.org/W4396886476","doi":"https://doi.org/10.1109/jiot.2024.3400858"},"language":"en","primary_location":{"id":"doi:10.1109/jiot.2024.3400858","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2024.3400858","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102839694","display_name":"Zehui Zhang","orcid":"https://orcid.org/0009-0008-6715-4983"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zehui Zhang","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0008-6715-4983","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066205926","display_name":"Futai Zou","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Futai Zou","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-5898-7317","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110562345","display_name":"Jianan Hong","orcid":"https://orcid.org/0009-0000-1452-5252"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianan Hong","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0000-1452-5252","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100621400","display_name":"Libo Chen","orcid":"https://orcid.org/0000-0003-3236-4805"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Libo Chen","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-3236-4805","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100709379","display_name":"Ping Yi","orcid":"https://orcid.org/0000-0003-4530-5118"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ping Yi","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-4530-5118","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":null,"apc_paid":null,"fwci":0.8687,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.69177942,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"11","issue":"17","first_page":"28267","last_page":"28280"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8566082715988159},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.7445542216300964},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.7266061902046204},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7086213231086731},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6164425611495972},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5336927175521851},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.441109836101532},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3227123022079468},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.12693354487419128},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.08771207928657532}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8566082715988159},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.7445542216300964},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.7266061902046204},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7086213231086731},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6164425611495972},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5336927175521851},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.441109836101532},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3227123022079468},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.12693354487419128},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.08771207928657532}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2024.3400858","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2024.3400858","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7599999904632568}],"awards":[{"id":"https://openalex.org/G828402418","display_name":null,"funder_award_id":"2020YFB1807500","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W1716079485","https://openalex.org/W1985697096","https://openalex.org/W2070561595","https://openalex.org/W2144211451","https://openalex.org/W2170334586","https://openalex.org/W2791018263","https://openalex.org/W2890591751","https://openalex.org/W2955671858","https://openalex.org/W2969759835","https://openalex.org/W2989837574","https://openalex.org/W3001307185","https://openalex.org/W3015797940","https://openalex.org/W3046246673","https://openalex.org/W3136780060","https://openalex.org/W3155102819","https://openalex.org/W3212565000","https://openalex.org/W4221001515","https://openalex.org/W4224316713","https://openalex.org/W4285163447","https://openalex.org/W4287848621","https://openalex.org/W4288057749","https://openalex.org/W4290996325","https://openalex.org/W4308410011","https://openalex.org/W4308462374","https://openalex.org/W4308469381","https://openalex.org/W4313135279","https://openalex.org/W4321792543","https://openalex.org/W4385080290","https://openalex.org/W6766830175","https://openalex.org/W6776032291","https://openalex.org/W6782007757"],"related_works":["https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W2766647240","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4210660460","https://openalex.org/W3203597304","https://openalex.org/W4248424560","https://openalex.org/W3119380829","https://openalex.org/W2521811015"],"abstract_inverted_index":{"At":[0],"present,":[1],"there":[2],"is":[3,68],"less":[4],"research":[5],"on":[6,94,165],"the":[7,37,59,95,112,153,158],"detection":[8,46,74,128,154],"of":[9,39,44,61,134,180],"broken":[10,48,89,174],"access":[11,49,90,175],"control":[12,50,91,176],"vulnerabilities":[13,92,192],"in":[14,190,193],"IoT":[15],"systems,":[16],"mostly":[17],"using":[18],"state":[19,24],"machines":[20],"to":[21,58,70,76,80,107,143],"analyze":[22],"abnormal":[23],"transitions,":[25],"and":[26,52,64,99,117,126,136,150,162,183],"no":[27],"systematic":[28],"tools":[29,75],"have":[30],"been":[31],"developed.":[32],"The":[33,102],"main":[34],"challenges":[35],"include":[36],"inaccessibility":[38],"communication":[40,109],"messages,":[41],"a":[42,85,132],"lack":[43],"effective":[45,118],"for":[47,87],"vulnerabilities,":[51,177],"excessive":[53],"manual":[54],"involvement.":[55],"Moreover,":[56],"due":[57],"existence":[60],"encryption,":[62],"signatures,":[63],"other":[65],"fields,":[66],"it":[67,164],"challenging":[69],"directly":[71],"port":[72],"web-based":[73],"IoT.":[77,194],"In":[78,130],"response":[79],"these":[81],"challenges,":[82],"we":[83,156],"propose":[84],"framework":[86,103],"detecting":[88,191],"based":[93],"interaction":[96],"between":[97,111],"applications":[98,167],"cloud":[100],"platforms.":[101],"employs":[104],"man-in-the-middle":[105],"techniques":[106,140],"obtain":[108],"messages":[110],"two":[113],"entities,":[114],"enabling":[115],"fast":[116],"fuzz":[119],"testing":[120],"through":[121],"keyword":[122],"extraction,":[123],"database-guided":[124],"fuzzing,":[125],"response-based":[127],"algorithms.":[129],"addition,":[131],"combination":[133],"dynamic":[135],"static":[137],"reverse":[138],"analysis":[139],"are":[141],"used":[142],"overcome":[144],"anti-tampering":[145],"measures,":[146],"such":[147],"as":[148],"encryption":[149],"signatures.":[151],"Following":[152],"framework,":[155],"implemented":[157],"semi-automated":[159],"BACDetector":[160,171],"system":[161],"tested":[163],"six":[166],"from":[168],"four":[169],"manufacturers.":[170],"discovered":[172],"nine":[173],"including":[178],"risks":[179],"device":[181],"hijacking":[182],"privacy":[184],"leakage.":[185],"This":[186],"validated":[187],"its":[188],"effectiveness":[189]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}