{"id":"https://openalex.org/W2944303438","doi":"https://doi.org/10.1145/3310353","title":"Design-Level and Code-Level Security Analysis of IoT Devices","display_name":"Design-Level and Code-Level Security Analysis of IoT Devices","publication_year":2019,"publication_date":"2019-05-07","ids":{"openalex":"https://openalex.org/W2944303438","doi":"https://doi.org/10.1145/3310353","mag":"2944303438"},"language":"en","primary_location":{"id":"doi:10.1145/3310353","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3310353","pdf_url":null,"source":{"id":"https://openalex.org/S136160450","display_name":"ACM Transactions on Embedded Computing Systems","issn_l":"1539-9087","issn":["1539-9087","1558-3465"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Embedded Computing Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035850510","display_name":"Farid Molazem Tabrizi","orcid":null},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Farid Molazem Tabrizi","raw_affiliation_strings":["University of British Columbia, Vancouver, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, Canada","institution_ids":["https://openalex.org/I141945490"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073641368","display_name":"Karthik Pattabiraman","orcid":"https://orcid.org/0000-0003-2380-3415"},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Karthik Pattabiraman","raw_affiliation_strings":["University of British Columbia, Vancouver, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, Canada","institution_ids":["https://openalex.org/I141945490"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I141945490"],"apc_list":null,"apc_paid":null,"fwci":1.9632,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":{"value":0.86790085,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"18","issue":"3","first_page":"1","last_page":"25"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.895894467830658},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6398767232894897},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.6206445097923279},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.557574987411499},{"id":"https://openalex.org/keywords/security-analysis","display_name":"Security analysis","score":0.5370321273803711},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5348424315452576},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5234807729721069},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.46992695331573486},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4299395680427551},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3269948959350586}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.895894467830658},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6398767232894897},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.6206445097923279},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.557574987411499},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.5370321273803711},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5348424315452576},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5234807729721069},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.46992695331573486},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4299395680427551},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3269948959350586},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3310353","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3310353","pdf_url":null,"source":{"id":"https://openalex.org/S136160450","display_name":"ACM Transactions on Embedded Computing Systems","issn_l":"1539-9087","issn":["1539-9087","1558-3465"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Embedded Computing Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6800000071525574}],"awards":[],"funders":[{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W1494679152","https://openalex.org/W1504007491","https://openalex.org/W1504280683","https://openalex.org/W1550953152","https://openalex.org/W1668251188","https://openalex.org/W1694077306","https://openalex.org/W1710734607","https://openalex.org/W1721673008","https://openalex.org/W1973309971","https://openalex.org/W1979798014","https://openalex.org/W1980256734","https://openalex.org/W2002934700","https://openalex.org/W2012352984","https://openalex.org/W2012784266","https://openalex.org/W2021503621","https://openalex.org/W2032479470","https://openalex.org/W2033663641","https://openalex.org/W2036070481","https://openalex.org/W2051054517","https://openalex.org/W2082525023","https://openalex.org/W2088492349","https://openalex.org/W2105455406","https://openalex.org/W2109219878","https://openalex.org/W2116520617","https://openalex.org/W2121805588","https://openalex.org/W2134654117","https://openalex.org/W2146006129","https://openalex.org/W2146024157","https://openalex.org/W2147543351","https://openalex.org/W2150142104","https://openalex.org/W2155448819","https://openalex.org/W2157554212","https://openalex.org/W2168264487","https://openalex.org/W2350778671","https://openalex.org/W2559919425","https://openalex.org/W2598865842","https://openalex.org/W3022711125","https://openalex.org/W4214641928","https://openalex.org/W4238393750","https://openalex.org/W4247374428","https://openalex.org/W6828860148"],"related_works":["https://openalex.org/W2521930763","https://openalex.org/W2380031640","https://openalex.org/W2295858576","https://openalex.org/W2058305829","https://openalex.org/W2392272505","https://openalex.org/W2941677765","https://openalex.org/W2057373006","https://openalex.org/W4313547574","https://openalex.org/W2106371080","https://openalex.org/W4200618920"],"abstract_inverted_index":{"The":[0,30,163],"Internet":[1],"of":[2,13,34,86,95,156],"Things":[3],"(IoT)":[4],"is":[5,200],"playing":[6],"an":[7,39,69,188],"important":[8],"role":[9],"in":[10,212],"different":[11],"aspects":[12],"our":[14,185,196],"lives.":[15],"Smart":[16],"grids,":[17],"smart":[18,191],"cars,":[19],"and":[20,32,147,159,208],"medical":[21],"devices":[22,26,36,88],"all":[23],"incorporate":[24],"IoT":[25,60,87,113,157],"as":[27],"key":[28],"components.":[29],"ubiquity":[31],"criticality":[33],"these":[35],"make":[37],"them":[38,74],"attractive":[40],"target":[41],"for":[42,83,133],"attackers.":[43],"Therefore,":[44],"we":[45,54,139],"need":[46],"techniques":[47,82,117,186],"to":[48,125,153,175,202,217],"analyze":[49,154],"their":[50,57,161],"security":[51,85,155],"so":[52],"that":[53,195],"can":[55],"address":[56],"potential":[58],"vulnerabilities.":[59],"devices,":[61,158],"unlike":[62],"remote":[63],"servers,":[64],"are":[65],"user-facing":[66],"and,":[67,97],"therefore,":[68,98],"attacker":[70],"may":[71,118],"interact":[72],"with":[73,222],"more":[75,206],"extensively,":[76],"e.g.,":[77],"via":[78],"physical":[79],"access.":[80],"Existing":[81],"analyzing":[84],"either":[89],"rely":[90],"on":[91,179,187],"a":[92],"pre-defined":[93],"set":[94],"attacks":[96,177,207],"have":[99,111],"limited":[100],"effect":[101],"or":[102,129],"do":[103],"not":[104],"consider":[105],"the":[106,109,121,131,145,148,151,170,180,210,214,218],"specific":[107],"capabilities":[108],"attackers":[110],"against":[112],"devices.":[114],"Security":[115],"analysis":[116,198,211,220],"operate":[119],"at":[120,130,144,150],"design-level,":[122,146],"leveraging":[123],"abstraction":[124],"avoid":[126],"state-space":[127],"explosion,":[128],"code-level":[132,197],"ensuring":[134],"accuracy.":[135],"In":[136],"this":[137],"article,":[138],"introduce":[140],"two":[141],"techniques,":[142],"one":[143],"other":[149],"code-level,":[152],"compare":[160],"effectiveness.":[162],"former":[164],"technique":[165,199],"uses":[166,172],"model":[167],"checking,":[168],"while":[169],"latter":[171],"symbolic":[173],"execution,":[174],"find":[176,194,203],"based":[178],"attacker\u2019s":[181],"capabilities.":[182],"We":[183,193],"evaluate":[184],"open":[189],"source":[190],"meter.":[192],"able":[201],"three":[204],"times":[205],"complete":[209],"half":[213],"time,":[215],"compared":[216],"design-level":[219],"technique,":[221],"no":[223],"false":[224],"positives.":[225]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":3}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}