{"id":"https://openalex.org/W3097868972","doi":"https://doi.org/10.1109/mnet.011.2000450","title":"Toward Hybrid Static-Dynamic Detection of Vulnerabilities in IoT Firmware","display_name":"Toward Hybrid Static-Dynamic Detection of Vulnerabilities in IoT Firmware","publication_year":2020,"publication_date":"2020-11-02","ids":{"openalex":"https://openalex.org/W3097868972","doi":"https://doi.org/10.1109/mnet.011.2000450","mag":"3097868972"},"language":"en","primary_location":{"id":"doi:10.1109/mnet.011.2000450","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mnet.011.2000450","pdf_url":null,"source":{"id":"https://openalex.org/S186584794","display_name":"IEEE Network","issn_l":"0890-8044","issn":["0890-8044","1558-156X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Network","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082144617","display_name":"Daojing He","orcid":"https://orcid.org/0000-0002-3820-8128"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]},{"id":"https://openalex.org/I4510145","display_name":"Jiangxi University of Science and Technology","ror":"https://ror.org/03q0t9252","country_code":"CN","type":"education","lineage":["https://openalex.org/I4510145"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Daojing He","raw_affiliation_strings":["Jiangxi University of Science and Technology, and East China Normal University"],"affiliations":[{"raw_affiliation_string":"Jiangxi University of Science and Technology, and East China Normal University","institution_ids":["https://openalex.org/I4510145","https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109589989","display_name":"Hongjie Gu","orcid":null},"institutions":[{"id":"https://openalex.org/I4510145","display_name":"Jiangxi University of Science and Technology","ror":"https://ror.org/03q0t9252","country_code":"CN","type":"education","lineage":["https://openalex.org/I4510145"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongjie Gu","raw_affiliation_strings":["Jiangxi University of Science and Technology"],"affiliations":[{"raw_affiliation_string":"Jiangxi University of Science and Technology","institution_ids":["https://openalex.org/I4510145"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101472801","display_name":"Tinghui Li","orcid":"https://orcid.org/0000-0002-4124-3311"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tinghui Li","raw_affiliation_strings":["East China Normal University"],"affiliations":[{"raw_affiliation_string":"East China Normal University","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101184686","display_name":"Yongliang Du","orcid":null},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongliang Du","raw_affiliation_strings":["East China Normal University"],"affiliations":[{"raw_affiliation_string":"East China Normal University","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100367715","display_name":"Xiaolei Wang","orcid":"https://orcid.org/0000-0002-5342-4275"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaolei Wang","raw_affiliation_strings":["National University of Defense Technology, P.R. China"],"affiliations":[{"raw_affiliation_string":"National University of Defense Technology, P.R. China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101952501","display_name":"Sencun Zhu","orcid":"https://orcid.org/0000-0002-1047-7967"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sencun Zhu","raw_affiliation_strings":["Pennsylvania State University"],"affiliations":[{"raw_affiliation_string":"Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029714594","display_name":"Nadra Guizani","orcid":"https://orcid.org/0000-0001-5332-2685"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nadra Guizani","raw_affiliation_strings":["Purdue University"],"affiliations":[{"raw_affiliation_string":"Purdue University","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5082144617"],"corresponding_institution_ids":["https://openalex.org/I4510145","https://openalex.org/I66867065"],"apc_list":null,"apc_paid":null,"fwci":1.3692,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.81995308,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"35","issue":"2","first_page":"202","last_page":"207"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.9730772972106934},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.83160400390625},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.665703535079956},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.5552595257759094},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5308440923690796},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.5283302068710327},{"id":"https://openalex.org/keywords/microcode","display_name":"Microcode","score":0.4721493721008301},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4244518280029297},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.41404229402542114},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1460982859134674}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.9730772972106934},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.83160400390625},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.665703535079956},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5552595257759094},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5308440923690796},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.5283302068710327},{"id":"https://openalex.org/C22174128","wikidata":"https://www.wikidata.org/wiki/Q175869","display_name":"Microcode","level":2,"score":0.4721493721008301},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4244518280029297},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.41404229402542114},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1460982859134674}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/mnet.011.2000450","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mnet.011.2000450","pdf_url":null,"source":{"id":"https://openalex.org/S186584794","display_name":"IEEE Network","issn_l":"0890-8044","issn":["0890-8044","1558-156X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Network","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6299999952316284}],"awards":[{"id":"https://openalex.org/G3747699501","display_name":null,"funder_award_id":"U1936120,U1636216","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W2532962075","https://openalex.org/W2576376563","https://openalex.org/W2606775912","https://openalex.org/W2748868501","https://openalex.org/W2749008552","https://openalex.org/W2787662294","https://openalex.org/W2792247670","https://openalex.org/W2882992559","https://openalex.org/W2913603768","https://openalex.org/W2951694401","https://openalex.org/W2963647436","https://openalex.org/W2986938475","https://openalex.org/W3014190271","https://openalex.org/W3015383024","https://openalex.org/W3105926539","https://openalex.org/W4244720976","https://openalex.org/W6743493502","https://openalex.org/W6776331943"],"related_works":["https://openalex.org/W1966431236","https://openalex.org/W608147619","https://openalex.org/W2026551898","https://openalex.org/W1984676852","https://openalex.org/W4252104358","https://openalex.org/W2062160093","https://openalex.org/W2025981307","https://openalex.org/W1998626163","https://openalex.org/W2056006243","https://openalex.org/W2039978824"],"abstract_inverted_index":{"IoT":[0,51,74,90],"devices":[1,26,91],"are":[2],"becoming":[3],"increasingly":[4],"ubiquitous":[5],"because":[6],"they":[7],"have":[8,44,53],"greatly":[9],"simplified":[10],"many":[11],"aspects":[12],"of":[13],"our":[14,18],"daily":[15],"life":[16],"and":[17,39,82,103,113],"work.":[19],"However,":[20],"most":[21],"firmware":[22,52],"in":[23,50,73,105],"these":[24],"embedded":[25],"carry":[27],"various":[28,100],"security":[29,48,101],"vulnerabilities,":[30,112],"such":[31,107],"as":[32,108],"hard-cod-ed":[33],"passwords,":[34],"cryptographic":[35],"keys,":[36],"insecure":[37],"configurations":[38],"backdoors.":[40],"Recent":[41],"large-scale":[42],"attacks":[43],"demonstrated":[45],"that":[46,93],"the":[47,59,94],"vulnerabilities":[49,72],"posed":[54],"a":[55,67],"severe":[56],"threat":[57],"to":[58,70],"Internet":[60],"infrastructure.":[61],"In":[62],"this":[63],"work,":[64],"we":[65],"design":[66],"hybrid":[68],"platform":[69,96],"detect":[71],"firmware,":[75,106],"which":[76],"integrates":[77],"both":[78],"offline":[79],"static":[80],"detection":[81],"online":[83],"dynamic":[84],"detection.":[85],"Our":[86],"evaluation":[87],"on":[88],"real":[89],"shows":[92],"proposed":[95],"can":[97],"effectively":[98],"identify":[99],"weaknesses":[102],"risks":[104],"dangerous":[109],"processes,":[110],"exploitable":[111],"other":[114],"attack":[115],"surfaces.":[116]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":1}],"updated_date":"2026-04-06T07:47:59.780226","created_date":"2025-10-10T00:00:00"}