{"id":"https://openalex.org/W7126073973","doi":"https://doi.org/10.1109/jiot.2026.3659185","title":"HScanner: A Knowledge-Driven Framework for Early-Stage Detection of Hardware Vulnerabilities in IIoT Devices","display_name":"HScanner: A Knowledge-Driven Framework for Early-Stage Detection of Hardware Vulnerabilities in IIoT Devices","publication_year":2026,"publication_date":"2026-01-29","ids":{"openalex":"https://openalex.org/W7126073973","doi":"https://doi.org/10.1109/jiot.2026.3659185"},"language":null,"primary_location":{"id":"doi:10.1109/jiot.2026.3659185","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2026.3659185","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Zhaorui Yang","orcid":"https://orcid.org/0000-0003-1107-7137"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaorui Yang","raw_affiliation_strings":["School of Information and Communication Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0003-1107-7137","affiliations":[{"raw_affiliation_string":"School of Information and Communication Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124160127","display_name":"Huan Li","orcid":null},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huan Li","raw_affiliation_strings":["School of Information and Communication Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information and Communication Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jian Wang","orcid":"https://orcid.org/0000-0001-5416-0649"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian Wang","raw_affiliation_strings":["School of Information and Communication Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0001-5416-0649","affiliations":[{"raw_affiliation_string":"School of Information and Communication Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103016499","display_name":"Zi\u2010Han Cheng","orcid":"https://orcid.org/0000-0002-4079-8681"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zi-Han Cheng","raw_affiliation_strings":["School of Information and Communication Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information and Communication Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I150229711"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0716249,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":"8","first_page":"16335","last_page":"16352"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.7616999745368958,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.7616999745368958,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.1307000070810318,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.02850000001490116,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6413000226020813},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.519599974155426},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5023999810218811},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.48069998621940613},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.4449999928474426},{"id":"https://openalex.org/keywords/constant-false-alarm-rate","display_name":"Constant false alarm rate","score":0.4413999915122986},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.43939998745918274},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.357699990272522}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8300999999046326},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6413000226020813},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.519599974155426},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5023999810218811},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.48069998621940613},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.4449999928474426},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.4413999915122986},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.43939998745918274},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.36399999260902405},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.357699990272522},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.3573000133037567},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.35690000653266907},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.33709999918937683},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.33219999074935913},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.311599999666214},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.31029999256134033},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3057999908924103},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2955999970436096},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2915000021457672},{"id":"https://openalex.org/C68859911","wikidata":"https://www.wikidata.org/wiki/Q1503724","display_name":"Pattern matching","level":2,"score":0.27970001101493835},{"id":"https://openalex.org/C39217717","wikidata":"https://www.wikidata.org/wiki/Q1432354","display_name":"Hardware security module","level":3,"score":0.27309998869895935},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2653999924659729},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.25769999623298645}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2026.3659185","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2026.3659185","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G517011580","display_name":null,"funder_award_id":"U25B2001","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Recurring":[0],"hardware":[1,22,43,57,90,104,135,177],"vulnerabilities,":[2],"which":[3,40,71],"refer":[4],"to":[5,20,192,195,199,242,247,253],"previously":[6],"discovered":[7],"vulnerabilities":[8,44,178,188],"inadvertently":[9],"reintroduced":[10],"into":[11],"new":[12],"devices":[13,149],"by":[14,87,238],"designers,":[15],"pose":[16],"a":[17,36,55,101,116,133,212],"significant":[18],"challenge":[19],"the":[21,46,77,93,97,126,139,155,165,221,234],"security":[23],"of":[24,27,49,76,96,167,182],"Industrial":[25],"Internet":[26],"Things":[28],"(IIoT).":[29],"To":[30],"tackle":[31],"this":[32],"issue,":[33],"we":[34,53,81,114,142],"propose":[35,115],"framework":[37],"called":[38],"HScanner,":[39],"detects":[41],"recurring":[42,176],"during":[45],"design":[47,94],"phase":[48],"IIoT":[50,78,148,152],"devices.":[51,184],"First,":[52],"abstract":[54],"hierarchical":[56],"feature":[58,202],"set":[59],"comprising":[60],"16":[61],"features":[62,66,91],"(i.e.,":[63],"6":[64],"coarse-grained":[65],"and":[67,100,159,207,226,236,240,245,249,251],"10":[68],"fine-grained":[69],"features),":[70],"encapsulate":[72],"crucial":[73],"architectural":[74],"information":[75],"device.":[79,140],"Next,":[80],"construct":[82],"two":[83,127,200],"knowledge":[84],"graphs":[85],"(KGs)":[86],"separately":[88],"extracting":[89],"from":[92],"specifications":[95],"target":[98],"device":[99],"well-known":[102],"public":[103,134],"vulnerability":[105,136],"database,":[106],"namely":[107,205],"National":[108],"Vulnerability":[109],"Database":[110],"(NVD).":[111],"After":[112],"that,":[113],"subgraph":[117,123],"matching":[118],"algorithm":[119],"that":[120],"identifies":[121],"all":[122],"mappings":[124],"between":[125],"KGs,":[128],"where":[129],"each":[130],"mapping":[131],"indicates":[132],"involved":[137],"in":[138,179],"Finally,":[141],"conduct":[143],"experiments":[144],"on":[145],"30":[146,183],"classical":[147],"spanning":[150],"four":[151],"layers,":[153],"including":[154],"perception,":[156],"network,":[157],"processing,":[158],"application":[160],"layers.":[161],"The":[162],"results":[163],"demonstrate":[164],"effectiveness":[166],"our":[168],"HScanner.":[169],"In":[170],"detail,":[171],"it":[172],"finds":[173],"out":[174,181],"40":[175],"15":[180],"Among":[185],"them,":[186],"34":[187],"are":[189],"successfully":[190],"validated":[191],"be":[193],"exploited":[194],"launch":[196],"attacks.":[197],"Compared":[198],"state-of-the-art":[201],"analysis":[203,214],"methods,":[204],"CYBOK":[206],"ICScope,":[208,248],"as":[209,211],"well":[210],"manual":[213],"approach":[215],"(MA),":[216],"HScanner":[217,232],"significantly":[218],"reduces":[219,233],"both":[220],"false":[222,227],"alarm":[223],"rate":[224,229],"(FAR)":[225],"negative":[228],"(FNR).":[230],"Specifically,":[231],"FAR":[235],"FNR":[237],"84.6%":[239],"5.9%":[241],"CYBOK,":[243],"21.4%":[244],"58.8%":[246],"43.5%":[250],"50%":[252],"MA,":[254],"respectively.":[255]},"counts_by_year":[],"updated_date":"2026-04-09T06:08:40.794217","created_date":"2026-01-30T00:00:00"}