{"id":"https://openalex.org/W4415594180","doi":"https://doi.org/10.1109/tsc.2025.3625817","title":"A Multi-Dimensional Analysis of IoT Companion Apps: A Look at Privacy, Security and Accessibility","display_name":"A Multi-Dimensional Analysis of IoT Companion Apps: A Look at Privacy, Security and Accessibility","publication_year":2025,"publication_date":"2025-10-27","ids":{"openalex":"https://openalex.org/W4415594180","doi":"https://doi.org/10.1109/tsc.2025.3625817"},"language":null,"primary_location":{"id":"doi:10.1109/tsc.2025.3625817","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2025.3625817","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067250123","display_name":"Faiza Tazi","orcid":"https://orcid.org/0000-0001-9781-2694"},"institutions":[{"id":"https://openalex.org/I131651094","display_name":"University of Denver","ror":"https://ror.org/04w7skc03","country_code":"US","type":"education","lineage":["https://openalex.org/I131651094"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Faiza Tazi","raw_affiliation_strings":["Computer Science Department, University of Denver, Denver, CO, USA"],"raw_orcid":"https://orcid.org/0000-0001-9781-2694","affiliations":[{"raw_affiliation_string":"Computer Science Department, University of Denver, Denver, CO, USA","institution_ids":["https://openalex.org/I131651094"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050235850","display_name":"Suleiman Saka","orcid":"https://orcid.org/0009-0002-0733-3281"},"institutions":[{"id":"https://openalex.org/I131651094","display_name":"University of Denver","ror":"https://ror.org/04w7skc03","country_code":"US","type":"education","lineage":["https://openalex.org/I131651094"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Suleiman Saka","raw_affiliation_strings":["Computer Science Department, University of Denver, Denver, CO, USA"],"raw_orcid":"https://orcid.org/0009-0002-0733-3281","affiliations":[{"raw_affiliation_string":"Computer Science Department, University of Denver, Denver, CO, USA","institution_ids":["https://openalex.org/I131651094"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084328405","display_name":"Shradha Neupane","orcid":"https://orcid.org/0009-0005-7608-3046"},"institutions":[{"id":"https://openalex.org/I107077323","display_name":"Worcester Polytechnic Institute","ror":"https://ror.org/05ejpqr48","country_code":"US","type":"education","lineage":["https://openalex.org/I107077323"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shradha Neupane","raw_affiliation_strings":["Computer Science Department, Worcester Polytechnic Institute, Worcester, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department, Worcester Polytechnic Institute, Worcester, MA, USA","institution_ids":["https://openalex.org/I107077323"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111224546","display_name":"Ethan Myers","orcid":null},"institutions":[{"id":"https://openalex.org/I92446798","display_name":"Colorado State University","ror":"https://ror.org/03k1gpj17","country_code":"US","type":"education","lineage":["https://openalex.org/I92446798"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ethan Myers","raw_affiliation_strings":["Computer Science Department, Colorado State University, Fort Collins, CO, USA"],"raw_orcid":"https://orcid.org/0009-0008-8265-3457","affiliations":[{"raw_affiliation_string":"Computer Science Department, Colorado State University, Fort Collins, CO, USA","institution_ids":["https://openalex.org/I92446798"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079539401","display_name":"Sanchari Das","orcid":null},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sanchari Das","raw_affiliation_strings":["Information Sciences and Technology, George Mason University, Fairfax, VA, USA"],"raw_orcid":"https://orcid.org/0000-0003-1299-7867","affiliations":[{"raw_affiliation_string":"Information Sciences and Technology, George Mason University, Fairfax, VA, USA","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056233859","display_name":"Lorenzo De Carli","orcid":null},"institutions":[{"id":"https://openalex.org/I168635309","display_name":"University of Calgary","ror":"https://ror.org/03yjb2x39","country_code":"CA","type":"education","lineage":["https://openalex.org/I168635309"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Lorenzo De Carli","raw_affiliation_strings":["Electrical and Software Engineering Department, University of Calgary, Calgary, AB, Canada"],"raw_orcid":"https://orcid.org/0000-0003-0432-3686","affiliations":[{"raw_affiliation_string":"Electrical and Software Engineering Department, University of Calgary, Calgary, AB, Canada","institution_ids":["https://openalex.org/I168635309"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5008904412","display_name":"Indrakshi Ray","orcid":"https://orcid.org/0000-0002-0714-7676"},"institutions":[{"id":"https://openalex.org/I92446798","display_name":"Colorado State University","ror":"https://ror.org/03k1gpj17","country_code":"US","type":"education","lineage":["https://openalex.org/I92446798"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Indrakshi Ray","raw_affiliation_strings":["Computer Science Department, Colorado State University, Fort Collins, CO, USA"],"raw_orcid":"https://orcid.org/0000-0002-0714-7676","affiliations":[{"raw_affiliation_string":"Computer Science Department, Colorado State University, Fort Collins, CO, USA","institution_ids":["https://openalex.org/I92446798"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5067250123"],"corresponding_institution_ids":["https://openalex.org/I131651094"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.42276734,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"18","issue":"6","first_page":"3392","last_page":"3405"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11479","display_name":"Smart Cities and Technologies","score":0.3549000024795532,"subfield":{"id":"https://openalex.org/subfields/2214","display_name":"Media Technology"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11479","display_name":"Smart Cities and Technologies","score":0.3549000024795532,"subfield":{"id":"https://openalex.org/subfields/2214","display_name":"Media Technology"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11977","display_name":"Technology Use by Older Adults","score":0.3456000089645386,"subfield":{"id":"https://openalex.org/subfields/3317","display_name":"Demography"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.3221000134944916,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.6675999760627747},{"id":"https://openalex.org/keywords/interface","display_name":"Interface (matter)","score":0.5267000198364258},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.5019000172615051},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.46650001406669617},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.45329999923706055},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.4235000014305115},{"id":"https://openalex.org/keywords/uncorrelated","display_name":"Uncorrelated","score":0.41769999265670776},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.40880000591278076}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7957000136375427},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.6675999760627747},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5612999796867371},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.5267000198364258},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.5019000172615051},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4715999960899353},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.46650001406669617},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.45329999923706055},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.4235000014305115},{"id":"https://openalex.org/C169345407","wikidata":"https://www.wikidata.org/wiki/Q8216221","display_name":"Uncorrelated","level":2,"score":0.41769999265670776},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.40880000591278076},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.38659998774528503},{"id":"https://openalex.org/C89505385","wikidata":"https://www.wikidata.org/wiki/Q47146","display_name":"User interface","level":2,"score":0.38510000705718994},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.3840999901294708},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.367900013923645},{"id":"https://openalex.org/C2988145974","wikidata":"https://www.wikidata.org/wiki/Q620615","display_name":"Mobile apps","level":2,"score":0.364300012588501},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.3605000078678131},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3416000008583069},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.30820000171661377},{"id":"https://openalex.org/C2778535757","wikidata":"https://www.wikidata.org/wiki/Q1328864","display_name":"Screen reader","level":3,"score":0.3025999963283539},{"id":"https://openalex.org/C3017619522","wikidata":"https://www.wikidata.org/wiki/Q620615","display_name":"Smartphone app","level":2,"score":0.290800005197525},{"id":"https://openalex.org/C144543869","wikidata":"https://www.wikidata.org/wiki/Q2738570","display_name":"Mobile computing","level":2,"score":0.2815000116825104}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tsc.2025.3625817","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2025.3625817","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W2032195173","https://openalex.org/W2033811191","https://openalex.org/W2058180826","https://openalex.org/W2110970969","https://openalex.org/W2117141700","https://openalex.org/W2143852731","https://openalex.org/W2165232124","https://openalex.org/W2166743230","https://openalex.org/W2296191932","https://openalex.org/W2321522602","https://openalex.org/W2508433864","https://openalex.org/W2517394750","https://openalex.org/W2529062675","https://openalex.org/W2546996569","https://openalex.org/W2563102142","https://openalex.org/W2610305199","https://openalex.org/W2614505876","https://openalex.org/W2619713395","https://openalex.org/W2728910784","https://openalex.org/W2729053277","https://openalex.org/W2761245316","https://openalex.org/W2765275233","https://openalex.org/W2765874585","https://openalex.org/W2801062299","https://openalex.org/W2807649099","https://openalex.org/W2811320115","https://openalex.org/W2890188242","https://openalex.org/W2896625930","https://openalex.org/W2898068943","https://openalex.org/W2973801691","https://openalex.org/W2974058390","https://openalex.org/W2985320478","https://openalex.org/W3006036785","https://openalex.org/W3039516369","https://openalex.org/W3048844707","https://openalex.org/W3111292493","https://openalex.org/W3120210976","https://openalex.org/W3124976365","https://openalex.org/W3160863695","https://openalex.org/W3182723950","https://openalex.org/W3192487131","https://openalex.org/W3195968964","https://openalex.org/W3216489385","https://openalex.org/W4206462734","https://openalex.org/W4213279169","https://openalex.org/W4244727573","https://openalex.org/W4254194321","https://openalex.org/W4285048570","https://openalex.org/W4297099930","https://openalex.org/W4308408710","https://openalex.org/W4366586816","https://openalex.org/W4387329457","https://openalex.org/W4387628502","https://openalex.org/W4401373317","https://openalex.org/W4407404767"],"related_works":[],"abstract_inverted_index":{"Internet":[0],"of":[1,81,139,162],"Things":[2],"(IoT)":[3],"devices":[4,29],"provide":[5],"convenience":[6],"to":[7,38,64,98,148,155,170],"users":[8],"by":[9],"simplifying":[10],"household":[11],"tasks.":[12],"Most":[13],"IoTs":[14],"can":[15],"be":[16],"remotely":[17],"controlled":[18],"via":[19],"mobile":[20],"companion":[21,84,182],"apps,":[22],"which":[23,61,151],"constitute":[24,47],"the":[25,43,52,118,160,171],"main":[26,157],"interface":[27],"between":[28,112],"themselves":[30],"and":[31,41,45,86,91,105,127,144],"their":[32,88,103,156],"users.":[33],"Such":[34],"apps":[35,85,123,140,146],"are":[36,152],"used":[37],"configure,":[39],"update,":[40],"control":[42],"device(s)":[44],"thus":[46],"a":[48,74,79,110,136],"critical":[49],"component":[50],"in":[51,131],"IoT":[53,83],"ecosystem.":[54],"However,":[55],"they":[56],"have":[57,124],"historically":[58],"been":[59],"understudied":[60],"prompts":[62],"us":[63],"look":[65],"into":[66],"them.":[67,113],"In":[68],"this":[69],"paper,":[70],"we":[71,77],"report":[72],"on":[73],"study":[75],"where":[76],"evaluated":[78],"sample":[80],"455":[82],"analyze":[87],"privacy,":[89],"security,":[90],"accessibility":[92,128],"aspects.":[93,175],"Our":[94,114],"research":[95],"aim":[96],"is":[97,109,168],"understand":[99],"these":[100],"metrics,":[101],"gauge":[102],"state":[104],"evaluate":[106],"whether":[107],"there":[108,134],"correlation":[111],"primary":[115],"findings":[116],"from":[117],"analysis":[119],"are:":[120],"(i)":[121],"most":[122],"reasonable":[125],"security":[126],"posture,":[129],"but":[130],"several":[132],"dimensions":[133],"exists":[135],"long":[137],"tail":[138],"with":[141,178],"significant":[142],"problems":[143],"(ii)":[145],"tend":[147],"over-request":[149],"permissions":[150],"not":[153],"related":[154],"goal.":[158],"Moreover,":[159],"quality":[161],"an":[163],"app":[164,183],"along":[165,173],"one":[166],"aspect":[167],"uncorrelated":[169],"same":[172],"other":[174],"We":[176],"conclude":[177],"actionable":[179],"recommendations":[180],"for":[181],"developers.":[184]},"counts_by_year":[],"updated_date":"2025-12-13T23:11:00.310470","created_date":"2025-10-28T00:00:00"}