{"id":"https://openalex.org/W4383221475","doi":"https://doi.org/10.1145/3579856.3582834","title":"Security Properties of Virtual Remotes and SPOOKing their violations","display_name":"Security Properties of Virtual Remotes and SPOOKing their violations","publication_year":2023,"publication_date":"2023-07-05","ids":{"openalex":"https://openalex.org/W4383221475","doi":"https://doi.org/10.1145/3579856.3582834"},"language":"en","primary_location":{"id":"doi:10.1145/3579856.3582834","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3579856.3582834","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3579856.3582834","source":null,"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3579856.3582834","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092404309","display_name":"Joshua David Oetting Majors","orcid":"https://orcid.org/0000-0003-3296-3410"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Joshua David Oetting Majors","raw_affiliation_strings":["Purdue University, United States of America"],"raw_orcid":"https://orcid.org/0000-0003-3296-3410","affiliations":[{"raw_affiliation_string":"Purdue University, United States of America","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084943305","display_name":"Edgardo Barsallo Yi","orcid":"https://orcid.org/0000-0002-0194-0163"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Edgardo Barsallo Yi","raw_affiliation_strings":["Purdue University, Panama"],"raw_orcid":"https://orcid.org/0000-0002-0194-0163","affiliations":[{"raw_affiliation_string":"Purdue University, Panama","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007791202","display_name":"Amiya K. Maji","orcid":"https://orcid.org/0000-0002-6242-6184"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Amiya Maji","raw_affiliation_strings":["Purdue University, United States of America"],"raw_orcid":"https://orcid.org/0000-0002-6242-6184","affiliations":[{"raw_affiliation_string":"Purdue University, United States of America","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101871605","display_name":"Darren Wu","orcid":"https://orcid.org/0000-0001-7583-8527"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Darren Wu","raw_affiliation_strings":["Purdue University, United States of America"],"raw_orcid":"https://orcid.org/0000-0001-7583-8527","affiliations":[{"raw_affiliation_string":"Purdue University, United States of America","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047310442","display_name":"Saurabh Bagchi","orcid":"https://orcid.org/0000-0002-4239-5632"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Saurabh Bagchi","raw_affiliation_strings":["Purdue University, United States of America"],"raw_orcid":"https://orcid.org/0000-0002-4239-5632","affiliations":[{"raw_affiliation_string":"Purdue University, United States of America","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071486684","display_name":"Aravind Machiry","orcid":"https://orcid.org/0000-0001-5124-6818"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aravind Machiry","raw_affiliation_strings":["Purdue University, United States of America"],"raw_orcid":"https://orcid.org/0000-0001-5124-6818","affiliations":[{"raw_affiliation_string":"Purdue University, United States of America","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5092404309"],"corresponding_institution_ids":["https://openalex.org/I219193219"],"apc_list":null,"apc_paid":null,"fwci":0.3838,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.54763231,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"841","last_page":"854"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8166083097457886},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7426315546035767},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6893858909606934},{"id":"https://openalex.org/keywords/remote-control","display_name":"Remote control","score":0.6332641243934631},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.5746134519577026},{"id":"https://openalex.org/keywords/smart-device","display_name":"Smart device","score":0.508429229259491},{"id":"https://openalex.org/keywords/security-controls","display_name":"Security controls","score":0.41194969415664673},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2196928858757019},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.186110258102417}],"concepts":[{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8166083097457886},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7426315546035767},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6893858909606934},{"id":"https://openalex.org/C557691694","wikidata":"https://www.wikidata.org/wiki/Q185091","display_name":"Remote control","level":2,"score":0.6332641243934631},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.5746134519577026},{"id":"https://openalex.org/C2776898695","wikidata":"https://www.wikidata.org/wiki/Q11253473","display_name":"Smart device","level":2,"score":0.508429229259491},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.41194969415664673},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2196928858757019},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.186110258102417},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3579856.3582834","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3579856.3582834","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3579856.3582834","source":null,"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:figshare.com:article/25620642","is_oa":true,"landing_page_url":"https://figshare.com/articles/thesis/Security_Properties_of_Virtual_Remotes_and_Spooking_their_Violations/25620642","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},{"id":"doi:10.25394/pgs.25620642.v1","is_oa":true,"landing_page_url":"https://doi.org/10.25394/pgs.25620642.v1","pdf_url":null,"source":{"id":"https://openalex.org/S7407051384","display_name":"Purdue","issn_l":null,"issn":[],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"thesis"}],"best_oa_location":{"id":"doi:10.1145/3579856.3582834","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3579856.3582834","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3579856.3582834","source":null,"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4383221475.pdf","grobid_xml":"https://content.openalex.org/works/W4383221475.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W1985323577","https://openalex.org/W2028870095","https://openalex.org/W2042419493","https://openalex.org/W2065076683","https://openalex.org/W2118961967","https://openalex.org/W2149226464","https://openalex.org/W2407313496","https://openalex.org/W2504947579","https://openalex.org/W2913096406","https://openalex.org/W2941569939","https://openalex.org/W2986967943","https://openalex.org/W3016246341","https://openalex.org/W3150583396","https://openalex.org/W3216225102","https://openalex.org/W4303649397","https://openalex.org/W4380551698"],"related_works":["https://openalex.org/W3034529322","https://openalex.org/W2027118119","https://openalex.org/W2061924559","https://openalex.org/W3175610199","https://openalex.org/W2400481481","https://openalex.org/W4288063277","https://openalex.org/W4254378244","https://openalex.org/W2011442434","https://openalex.org/W2492123689","https://openalex.org/W2197150417"],"abstract_inverted_index":{"As":[0],"Smart":[1,31,57,111],"TV":[2,32,112,181,222],"devices":[3,33],"become":[4],"more":[5,133],"prevalent":[6],"in":[7,72,103,258],"our":[8,195,206],"lives,":[9],"it":[10,213],"becomes":[11],"increasingly":[12],"important":[13],"to":[14,23,54,163,172,200,219,224],"evaluate":[15],"the":[16,56,80,89,97,135,141,153,179,184,192,201,220,227,246,259,269,274,282],"security":[17,66,81,91,101,137,210,248,275],"of":[18,82,100,108,134,143,152,157,191,284],"these":[19,128,144,232],"devices.":[20],"In":[21,75],"addition":[22],"a":[24,35,41,47,52,158,169,209,214,235,254],"smart":[25],"and":[26,45,120,216,252,277],"connected":[27],"ecosystem":[28,261],"through":[29,183],"apps,":[30],"expose":[34],"WiFi":[36,48,60,83,160,241,255],"remote":[37,43,61,84,161,171,189,242,256,286],"protocol,":[38],"that":[39,68,94,126,231,240,268,279],"provides":[40],"virtual":[42,285],"capability":[44],"allows":[46],"enabled":[49],"device":[50,182,185],"(e.g.,":[51],"Smartphone)":[53],"control":[55,190],"TV.":[58,175],"The":[59],"protocol":[62,162,243,257],"might":[63],"pose":[64],"certain":[65],"risks":[67],"are":[69],"not":[70],"present":[71],"traditional":[73,104],"TVs.":[74,105],"this":[76],"paper,":[77],"we":[78,95,146,177,280],"assess":[79],"protocols":[85],"by":[86],"first":[87],"identifying":[88],"desired":[90,247],"properties":[92,156,276],"so":[93],"achieve":[96],"same":[98],"level":[99],"as":[102,168,208],"Our":[106,265],"analysis":[107],"four":[109],"popular":[110],"platforms,":[113],"Android":[114,166,174,180,221,260],"TV,":[115],"Amazon":[116],"FireOS,":[117],"Roku":[118],"OS,":[119],"WebOS":[121],"(for":[122],"LG":[123],"TVs),":[124],"revealed":[125],"all":[127,245,273],"platforms":[129],"violate":[130],"one":[131,151],"or":[132],"identified":[136],"properties.":[138,249],"To":[139],"demonstrate":[140],"impact":[142],"flaws,":[145],"develop":[147],"Spook,":[148],"which":[149],"uses":[150],"commonly":[154],"violated":[155],"secure":[159],"pair":[164],"an":[165,173],"mobile":[167],"software":[170],"Subsequently,":[176],"hijack":[178],"debugger,":[186],"enabling":[187],"complete":[188],"device.":[193],"All":[194],"findings":[196,207],"have":[197,281],"been":[198],"communicated":[199],"corresponding":[202],"vendors.":[203],"Google":[204],"acknowledged":[205],"vulnerability,":[211],"assigned":[212],"CVE,":[215],"released":[217],"patches":[218,233],"OS":[223],"partially":[225],"mitigate":[226],"attack.":[228],"We":[229,250],"argue":[230],"provide":[234],"stopgap":[236],"solution":[237],"without":[238,287],"ensuring":[239],"has":[244],"design":[251],"implement":[253],"using":[262],"ARM":[263],"TrustZone.":[264],"evaluation":[266],"shows":[267],"proposed":[270],"defense":[271],"satisfies":[272],"ensures":[278],"flexibility":[283],"compromising":[288],"security.":[289]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}