{"id":"https://openalex.org/W3093880997","doi":"https://doi.org/10.1109/tse.2022.3163969","title":"A Large-Scale Analysis of IoT Firmware Version Distribution in the Wild","display_name":"A Large-Scale Analysis of IoT Firmware Version Distribution in the Wild","publication_year":2022,"publication_date":"2022-03-31","ids":{"openalex":"https://openalex.org/W3093880997","doi":"https://doi.org/10.1109/tse.2022.3163969","mag":"3093880997"},"language":"en","primary_location":{"id":"doi:10.1109/tse.2022.3163969","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tse.2022.3163969","pdf_url":"https://ieeexplore.ieee.org/ielx7/32/10044379/09745815.pdf","source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ieeexplore.ieee.org/ielx7/32/10044379/09745815.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079753477","display_name":"Frank Ebbers","orcid":null},"institutions":[{"id":"https://openalex.org/I4210131336","display_name":"Fraunhofer Institute for Systems and Innovation Research","ror":"https://ror.org/03vyq6t71","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210131336","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Frank Ebbers","raw_affiliation_strings":["Fraunhofer Institute for Systems and Innovation Research ISI, Karlsruhe, Germany"],"raw_orcid":"https://orcid.org/0000-0002-3416-077X","affiliations":[{"raw_affiliation_string":"Fraunhofer Institute for Systems and Innovation Research ISI, Karlsruhe, Germany","institution_ids":["https://openalex.org/I4210131336"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5079753477"],"corresponding_institution_ids":["https://openalex.org/I4210131336"],"apc_list":null,"apc_paid":null,"fwci":1.6223,"has_fulltext":true,"cited_by_count":22,"citation_normalized_percentile":{"value":0.81749191,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"49","issue":"2","first_page":"816","last_page":"830"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.9772999882698059,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9735000133514404,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.9891773462295532},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7874645590782166},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6668163537979126},{"id":"https://openalex.org/keywords/table","display_name":"Table (database)","score":0.5988254547119141},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.44328221678733826},{"id":"https://openalex.org/keywords/raw-data","display_name":"Raw data","score":0.43901723623275757},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.42365527153015137},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3321074843406677},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.30726221203804016},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.2733275294303894},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2437456250190735},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.15794578194618225}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.9891773462295532},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7874645590782166},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6668163537979126},{"id":"https://openalex.org/C45235069","wikidata":"https://www.wikidata.org/wiki/Q278425","display_name":"Table (database)","level":2,"score":0.5988254547119141},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.44328221678733826},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.43901723623275757},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.42365527153015137},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3321074843406677},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.30726221203804016},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2733275294303894},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2437456250190735},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.15794578194618225}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tse.2022.3163969","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tse.2022.3163969","pdf_url":"https://ieeexplore.ieee.org/ielx7/32/10044379/09745815.pdf","source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},{"id":"pmh:oai:publica.fraunhofer.de:publica/435940","is_oa":true,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/435940","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"journal article"}],"best_oa_location":{"id":"doi:10.1109/tse.2022.3163969","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tse.2022.3163969","pdf_url":"https://ieeexplore.ieee.org/ielx7/32/10044379/09745815.pdf","source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.4699999988079071,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320310343","display_name":"Drexel University","ror":"https://ror.org/04bdffz58"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3093880997.pdf","grobid_xml":"https://content.openalex.org/works/W3093880997.grobid-xml"},"referenced_works_count":68,"referenced_works":["https://openalex.org/W33680940","https://openalex.org/W138108058","https://openalex.org/W1490011260","https://openalex.org/W1990562690","https://openalex.org/W2013627669","https://openalex.org/W2033943395","https://openalex.org/W2120197657","https://openalex.org/W2164561047","https://openalex.org/W2293605433","https://openalex.org/W2338846068","https://openalex.org/W2342078981","https://openalex.org/W2406734572","https://openalex.org/W2411354024","https://openalex.org/W2494462418","https://openalex.org/W2557786603","https://openalex.org/W2586871135","https://openalex.org/W2604890914","https://openalex.org/W2610762919","https://openalex.org/W2621148797","https://openalex.org/W2733765803","https://openalex.org/W2748868501","https://openalex.org/W2766832122","https://openalex.org/W2770273620","https://openalex.org/W2785985062","https://openalex.org/W2884826434","https://openalex.org/W2886654865","https://openalex.org/W2888505697","https://openalex.org/W2893347435","https://openalex.org/W2897514040","https://openalex.org/W2910203822","https://openalex.org/W2914748650","https://openalex.org/W2924631572","https://openalex.org/W2928689123","https://openalex.org/W2940875447","https://openalex.org/W2947506247","https://openalex.org/W2967455007","https://openalex.org/W2967495102","https://openalex.org/W2968383486","https://openalex.org/W2968915622","https://openalex.org/W2969468102","https://openalex.org/W2972103753","https://openalex.org/W2972295060","https://openalex.org/W3000785788","https://openalex.org/W3015900024","https://openalex.org/W3015969036","https://openalex.org/W3046256519","https://openalex.org/W3085712007","https://openalex.org/W3089505028","https://openalex.org/W3096391524","https://openalex.org/W3097868972","https://openalex.org/W3097992808","https://openalex.org/W3110131984","https://openalex.org/W3121878275","https://openalex.org/W3147019266","https://openalex.org/W3156207907","https://openalex.org/W3189803056","https://openalex.org/W3214913126","https://openalex.org/W4205826159","https://openalex.org/W4210759690","https://openalex.org/W4288080331","https://openalex.org/W6713987737","https://openalex.org/W6714965741","https://openalex.org/W6738719954","https://openalex.org/W6755216701","https://openalex.org/W6767051220","https://openalex.org/W6767139982","https://openalex.org/W6767211095","https://openalex.org/W6894248204"],"related_works":["https://openalex.org/W4389238932","https://openalex.org/W2582981600","https://openalex.org/W4387467152","https://openalex.org/W3010413952","https://openalex.org/W4212885212","https://openalex.org/W4253989935","https://openalex.org/W4379115910","https://openalex.org/W4287635472","https://openalex.org/W2810560948","https://openalex.org/W2070793896"],"abstract_inverted_index":{"This":[0,74,130,153],"paper":[1,154],"examines":[2],"the":[3,28,44,50,53,69,98,111,115,118,135,162,177,182,186],"up-to-dateness":[4,178],"of":[5,9,11,31,39,100,110,167,179],"installed":[6],"firmware":[7,88],"versions":[8,25,123],"Internet":[10],"Things":[12],"devices":[13,41,103,113,151],"accessible":[14],"via":[15],"public":[16],"Internet.":[17],"It":[18,35,170],"takes":[19],"a":[20,84,91],"novel":[21],"approach":[22,64,75],"to":[23,148],"identify":[24],"based":[26],"on":[27,77,128],"source":[29],"code":[30],"their":[32],"web":[33],"interfaces.":[34],"analyzes":[36],"data":[37,71,79,82],"sets":[38],"1.06m":[40],"collected":[42],"using":[43],"IoT":[45,102,112,150,168],"search":[46,93],"engineCensysand":[47],"then":[48],"maps":[49],"results":[51,96],"against":[52],"latest":[54,119],"version":[55],"each":[56],"manufacturer":[57,172],"offers.":[58],"A":[59],"fully":[60],"scalable":[61],"and":[62,90,104,138,156,160,164,173],"adaptive":[63],"is":[65,188,190],"developed":[66],"by":[67,141],"applying":[68],"SEMMA":[70],"mining":[72],"process.":[73],"relies":[76],"three":[78],"artifacts:":[80],"raw":[81],"fromCensys,":[83],"mapping":[85],"table":[86],"with":[87],"versions,":[89],"keyword":[92],"list.":[94],"The":[95],"confirm":[97],"heterogeneity":[99],"connected":[101],"show":[105],"that":[106,134],"only":[107],"2.45":[108],"percent":[109],"\u201cin":[114],"wild\u201d":[116],"run":[117],"available":[120],"firmware.":[121],"Installed":[122],"are":[124,145],"19.2":[125],"months":[126],"old":[127],"average.":[129],"real-world":[131],"evidence":[132],"suggests":[133],"updating":[136],"processes":[137],"methods":[139],"used":[140],"engineers":[142],"so":[143],"far":[144],"not":[146],"sufficient":[147],"keep":[149],"up-to-date.":[152],"identifies":[155],"quantifies":[157],"influencing":[158],"factors":[159],"captures":[161],"global":[163],"diverse":[165],"distribution":[166],"devices.":[169],"finds":[171],"device":[174,187],"type":[175],"influence":[176],"firmware,":[180],"whereas":[181],"country":[183],"in":[184],"which":[185],"deployed":[189],"less":[191],"significant.":[192]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":4},{"year":2021,"cited_by_count":1}],"updated_date":"2026-08-12T21:12:35.861297","created_date":"2025-10-10T00:00:00"}