{"id":"https://openalex.org/W4387609078","doi":"https://doi.org/10.1109/tdsc.2023.3323713","title":"Leakage of Authorization-Data in IoT Device Sharing: New Attacks and Countermeasure","display_name":"Leakage of Authorization-Data in IoT Device Sharing: New Attacks and Countermeasure","publication_year":2023,"publication_date":"2023-10-13","ids":{"openalex":"https://openalex.org/W4387609078","doi":"https://doi.org/10.1109/tdsc.2023.3323713"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3323713","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3323713","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10285391.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10285391.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076311357","display_name":"Bin Yuan","orcid":"https://orcid.org/0000-0002-5365-904X"},"institutions":[{"id":"https://openalex.org/I4210114608","display_name":"Songshan Lake Materials Laboratory","ror":"https://ror.org/020vtf184","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366","https://openalex.org/I19820366","https://openalex.org/I4210114608","https://openalex.org/I4210137180","https://openalex.org/I4210159876"]},{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Yuan","raw_affiliation_strings":["School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China","Songshan Laboratory, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-5365-904X","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"Songshan Laboratory, Zhengzhou, China","institution_ids":["https://openalex.org/I4210114608"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032879874","display_name":"Maogen Yang","orcid":"https://orcid.org/0009-0007-6844-9735"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Maogen Yang","raw_affiliation_strings":["School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0007-6844-9735","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109305234","display_name":"Zhen Xu","orcid":"https://orcid.org/0009-0008-1127-4097"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhen Xu","raw_affiliation_strings":["School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0008-1127-4097","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113174607","display_name":"Qunjinming Chen","orcid":"https://orcid.org/0009-0003-8057-2833"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qunjinming Chen","raw_affiliation_strings":["School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0003-8057-2833","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085592450","display_name":"Zhanxiang Song","orcid":"https://orcid.org/0009-0003-8747-3694"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhanxiang Song","raw_affiliation_strings":["School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0003-8747-3694","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100332568","display_name":"Zhen Li","orcid":"https://orcid.org/0000-0002-0001-2998"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhen Li","raw_affiliation_strings":["School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-0001-2998","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074676946","display_name":"Deqing Zou","orcid":"https://orcid.org/0000-0001-8534-5048"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Deqing Zou","raw_affiliation_strings":["School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0001-8534-5048","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022262922","display_name":"Hai Jin","orcid":"https://orcid.org/0000-0002-3934-7605"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hai Jin","raw_affiliation_strings":["School of Computer Science and Technology, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-3934-7605","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.5657,"has_fulltext":true,"cited_by_count":9,"citation_normalized_percentile":{"value":0.84390871,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"21","issue":"4","first_page":"3196","last_page":"3210"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8020192384719849},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6538559198379517},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.6071692109107971},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.603615403175354},{"id":"https://openalex.org/keywords/data-sharing","display_name":"Data sharing","score":0.5736361742019653},{"id":"https://openalex.org/keywords/authorization","display_name":"Authorization","score":0.5595424771308899},{"id":"https://openalex.org/keywords/delegation","display_name":"Delegation","score":0.4729865789413452},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.4375078082084656},{"id":"https://openalex.org/keywords/data-access","display_name":"Data access","score":0.4134230315685272},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.39911389350891113},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.3003755211830139},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.11903312802314758}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8020192384719849},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6538559198379517},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.6071692109107971},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.603615403175354},{"id":"https://openalex.org/C2779965156","wikidata":"https://www.wikidata.org/wiki/Q5227350","display_name":"Data sharing","level":3,"score":0.5736361742019653},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.5595424771308899},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.4729865789413452},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4375078082084656},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.4134230315685272},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.39911389350891113},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3003755211830139},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.11903312802314758},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3323713","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3323713","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10285391.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tdsc.2023.3323713","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3323713","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10285391.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1434328829","display_name":null,"funder_award_id":"62372191","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4387609078.pdf","grobid_xml":"https://content.openalex.org/works/W4387609078.grobid-xml"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W1936977117","https://openalex.org/W2030093169","https://openalex.org/W2508433864","https://openalex.org/W2604699954","https://openalex.org/W2613352518","https://openalex.org/W2791710451","https://openalex.org/W2792078641","https://openalex.org/W2889851986","https://openalex.org/W2890188242","https://openalex.org/W2890559797","https://openalex.org/W2901665206","https://openalex.org/W2914770479","https://openalex.org/W2933426098","https://openalex.org/W2947175569","https://openalex.org/W2969759835","https://openalex.org/W2983277367","https://openalex.org/W3015797940","https://openalex.org/W3096559598","https://openalex.org/W3153620288","https://openalex.org/W3213973488","https://openalex.org/W4221001515","https://openalex.org/W4254691308","https://openalex.org/W4283454851","https://openalex.org/W6721194330","https://openalex.org/W6744196339","https://openalex.org/W6748246993","https://openalex.org/W6764964240","https://openalex.org/W6766870636","https://openalex.org/W6782007757"],"related_works":["https://openalex.org/W4388335561","https://openalex.org/W2970530566","https://openalex.org/W1817057985","https://openalex.org/W2290364824","https://openalex.org/W2414507368","https://openalex.org/W2166798126","https://openalex.org/W4389950265","https://openalex.org/W2421443948","https://openalex.org/W2050921398","https://openalex.org/W4226034287"],"abstract_inverted_index":{"Device":[0],"sharing":[1,14,111],"among":[2],"users":[3],"is":[4],"a":[5],"common":[6],"functionality":[7],"in":[8,62,74],"today's":[9,75],"IoT":[10,22,31,63,76,123,132],"clouds.":[11,124,133],"Supporting":[12],"device":[13,37,64,110],"are":[15,27,60],"the":[16,52,58,71,94,97,100,105,109,121,137],"delegation":[17],"methods":[18],"proposed":[19],"by":[20],"different":[21],"clouds,":[23],"which":[24],"we":[25,50,88],"find":[26],"heterogeneous":[28],"and":[29,41,140],"ad-hoc":[30],"clouds":[32],"use":[33],"various":[34],"data":[35],"(e.g.,":[36],"ID,":[38,40],"product":[39],"access":[42,104],"token)":[43],"as":[44],"authorization":[45],"certificates.":[46],"In":[47],"this":[48],"paper,":[49],"report":[51],"first":[53],"systematic":[54],"study":[55,67],"on":[56],"how":[57],"authorization-data":[59,77,81,95],"managed":[61],"sharing.":[65],"Our":[66],"brought":[68],"to":[69,92,103,119,128],"light":[70],"security":[72],"risks":[73],"management,":[78],"identifying":[79],"6":[80],"leakage":[82],"flaws.":[83],"To":[84],"mitigate":[85],"such":[86],"flaws,":[87],"propose":[89,114],"an":[90,116],"approach":[91],"hide":[93],"from":[96],"delegatee":[98],"(a.k.a.,":[99],"user":[101],"authorized":[102],"devices)":[106],"without":[107],"disrupting":[108],"services.":[112],"We":[113,125,144],"SecHARE,":[115],"automated":[117],"tool":[118],"patch":[120],"vulnerable":[122],"applied":[126],"SecHARE":[127,147],"3":[129],"popular":[130],"open-source":[131],"Results":[134],"have":[135,145],"shown":[136],"compatibility,":[138],"effectiveness,":[139],"efficiency":[141],"of":[142],"SecHARE.":[143],"made":[146],"publicly":[148],"available":[149]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":3}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}