{"id":"https://openalex.org/W4385187299","doi":"https://doi.org/10.1109/sp46215.2023.10179294","title":"How IoT Re-using Threatens Your Sensitive Data: Exploring the User-Data Disposal in Used IoT Devices","display_name":"How IoT Re-using Threatens Your Sensitive Data: Exploring the User-Data Disposal in Used IoT Devices","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4385187299","doi":"https://doi.org/10.1109/sp46215.2023.10179294"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10179294","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179294","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100716210","display_name":"Peiyu Liu","orcid":"https://orcid.org/0000-0001-7793-7633"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peiyu Liu","raw_affiliation_strings":["Zhejiang University","NGICS Platform, Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"NGICS Platform, Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058611515","display_name":"Shouling Ji","orcid":"https://orcid.org/0000-0003-4268-372X"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shouling Ji","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020816561","display_name":"Lirong Fu","orcid":"https://orcid.org/0000-0002-0754-9245"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lirong Fu","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043198742","display_name":"Kangjie Lu","orcid":"https://orcid.org/0000-0002-4763-7354"},"institutions":[{"id":"https://openalex.org/I2800403580","display_name":"University of Minnesota System","ror":"https://ror.org/03grvy078","country_code":"US","type":"education","lineage":["https://openalex.org/I2800403580"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kangjie Lu","raw_affiliation_strings":["University of Minnesota"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Minnesota","institution_ids":["https://openalex.org/I2800403580"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101722406","display_name":"Xuhong Zhang","orcid":"https://orcid.org/0000-0002-8571-9780"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuhong Zhang","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101269459","display_name":"Jingchang Qin","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingchang Qin","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062687402","display_name":"Wenhai Wang","orcid":"https://orcid.org/0000-0003-3707-6546"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenhai Wang","raw_affiliation_strings":["Zhejiang University","NGICS Platform, Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"NGICS Platform, Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101562847","display_name":"Wenzhi Chen","orcid":"https://orcid.org/0000-0003-1674-4701"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenzhi Chen","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3365","last_page":"3381"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.8880290389060974},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7057470083236694},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4579862356185913}],"concepts":[{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.8880290389060974},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7057470083236694},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4579862356185913}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46215.2023.10179294","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179294","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W1965999033","https://openalex.org/W2045828556","https://openalex.org/W2408302068","https://openalex.org/W2508433864","https://openalex.org/W2605367183","https://openalex.org/W2613542009","https://openalex.org/W2794306808","https://openalex.org/W2886446678","https://openalex.org/W2888854470","https://openalex.org/W2890356659","https://openalex.org/W2899225656","https://openalex.org/W2908799610","https://openalex.org/W2915707340","https://openalex.org/W2940588539","https://openalex.org/W2980558733","https://openalex.org/W2991448185","https://openalex.org/W3042026930","https://openalex.org/W3091906126","https://openalex.org/W3099910773","https://openalex.org/W4300788801","https://openalex.org/W6721194330","https://openalex.org/W6764964240","https://openalex.org/W6767139982","https://openalex.org/W6786054705","https://openalex.org/W6793725419","https://openalex.org/W6793833220","https://openalex.org/W6793993780","https://openalex.org/W6794583407"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4245926026","https://openalex.org/W4311097251","https://openalex.org/W2586548817","https://openalex.org/W2390279801","https://openalex.org/W2625093826","https://openalex.org/W4391913857","https://openalex.org/W2358668433"],"abstract_inverted_index":{"With":[0],"the":[1,6,52,63,79,86,106,111,126,130,134,149,185,192,215,229,235,243,261,287,297],"rapid":[2],"technology":[3],"evolution":[4],"of":[5,8,54,62,78,88,114,133,154,187,228,238,242,286,289,299],"Internet":[7],"Things":[9],"(IoT)":[10],"and":[11,20,44,129,152,295],"increasing":[12],"user":[13,58,145,150],"needs,":[14],"IoT":[15,30,37,116,139,165,181,198,263,293,304],"device":[16],"re-using":[17],"becomes":[18],"more":[19,21,26,201],"common":[22],"nowadays.":[23],"For":[24],"instance,":[25],"than":[27,204],"300,000":[28],"used":[29,83,115,138],"devices":[31,49,182,199,294],"are":[32],"selling":[33],"on":[34,110,163,179],"Craigslist.":[35],"During":[36],"re-using,":[38,264],"sensitive":[39,80,202,211,230,255,301],"data":[40,81,155,189,203,212,256,258,302],"such":[41,265],"as":[42],"credentials":[43],"biometrics":[45],"residing":[46],"in":[47,82,214,303],"these":[48],"may":[50,250],"face":[51],"risk":[53],"leakage":[55,266],"if":[56],"a":[57,66,99,144,160,175,269],"fails":[59],"properly":[60,76,226],"dispose":[61,77,227],"data.":[64,231],"Thus,":[65],"critical":[67],"security":[68],"concern":[69],"is":[70,92],"raised:":[71],"do":[72,221],"(or":[73],"can)":[74],"users":[75,205,219],"IoT?":[84],"To":[85],"best":[87],"our":[89,275,282],"knowledge,":[90],"it":[91],"still":[93],"an":[94],"unexplored":[95],"problem":[96],"that":[97,197],"desires":[98],"systematic":[100],"study.In":[101],"this":[102],"paper,":[103],"we":[104,142,158,173,195,208],"perform":[105,246],"first":[107],"in-depth":[108],"investigation":[109,119],"user-data":[112,135,170,290],"disposal":[113,190,291],"devices.":[117,140,305],"Our":[118],"integrates":[120],"multiple":[121],"research":[122],"methods":[123],"to":[124,147,168,183,234,253,277],"explore":[125],"status":[127],"quo":[128],"root":[131],"causes":[132],"leakages":[136],"with":[137,292],"First,":[141],"conduct":[143,159,174],"study":[146],"investigate":[148,169,184],"awareness":[151,285],"understanding":[153],"disposal.":[156,259],"Then,":[157],"large-scale":[161,262],"analysis":[162],"4,749":[164],"firmware":[166,245],"images":[167],"collection.":[171],"Finally,":[172],"comprehensive":[176],"empirical":[177],"evaluation":[178],"33":[180],"effectiveness":[186],"existing":[188],"methods.Through":[191],"systematical":[193],"investigation,":[194],"discover":[196],"collect":[200],"expect.":[206],"Specifically,":[207],"detect":[209],"121,984":[210],"collections":[213],"tested":[216],"firmware.":[217],"Moreover,":[218],"usually":[220],"not":[222],"or":[223],"even":[224],"cannot":[225],"Worse,":[232],"due":[233],"inherent":[236],"characteristics":[237],"storage":[239],"chips,":[240],"13.2%":[241],"investigated":[244],"\"shallow\"":[247],"deletion,":[248],"which":[249],"allow":[251],"adversaries":[252],"obtain":[254],"after":[257],"Given":[260],"would":[267],"cause":[268],"broad":[270],"impact.":[271],"We":[272,280],"have":[273],"reported":[274],"findings":[276,283],"world-leading":[278],"companies.":[279],"hope":[281],"raise":[284],"failures":[288],"promote":[296],"protection":[298],"users\u2019":[300]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}