{"id":"https://openalex.org/W4405181837","doi":"https://doi.org/10.1145/3658644.3690307","title":"OctopusTaint: Advanced Data Flow Analysis for Detecting Taint-Based Vulnerabilities in IoT/IIoT Firmware","display_name":"OctopusTaint: Advanced Data Flow Analysis for Detecting Taint-Based Vulnerabilities in IoT/IIoT Firmware","publication_year":2024,"publication_date":"2024-12-02","ids":{"openalex":"https://openalex.org/W4405181837","doi":"https://doi.org/10.1145/3658644.3690307"},"language":"en","primary_location":{"id":"doi:10.1145/3658644.3690307","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690307","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690307","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690307","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079598483","display_name":"Abdullah Qasem","orcid":"https://orcid.org/0000-0001-8284-4458"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Abdullah Qasem","raw_affiliation_strings":["Security Research Centre, Concordia University, Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0001-8284-4458","affiliations":[{"raw_affiliation_string":"Security Research Centre, Concordia University, Montreal, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028605138","display_name":"Mourad Debbabi","orcid":"https://orcid.org/0000-0003-3015-3043"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mourad Debbabi","raw_affiliation_strings":["Security Research Centre, Concordia University, Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0003-3015-3043","affiliations":[{"raw_affiliation_string":"Security Research Centre, Concordia University, Montreal, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075237029","display_name":"Andrei Soeanu","orcid":"https://orcid.org/0000-0002-7315-6490"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Andrei Soeanu","raw_affiliation_strings":["Security Research Centre, Concordia University, Montreal, Canada"],"raw_orcid":"https://orcid.org/0000-0002-7315-6490","affiliations":[{"raw_affiliation_string":"Security Research Centre, Concordia University, Montreal, Canada","institution_ids":["https://openalex.org/I60158472"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I60158472"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2355","last_page":"2369"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8673055171966553},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.72823166847229},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.6979501843452454},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.537972629070282},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.49522820115089417},{"id":"https://openalex.org/keywords/false-positives-and-false-negatives","display_name":"False positives and false negatives","score":0.4312145709991455},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.42700910568237305},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.2223963737487793},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.16620570421218872},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.11713549494743347}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8673055171966553},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.72823166847229},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.6979501843452454},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.537972629070282},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.49522820115089417},{"id":"https://openalex.org/C112789634","wikidata":"https://www.wikidata.org/wiki/Q18207010","display_name":"False positives and false negatives","level":3,"score":0.4312145709991455},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.42700910568237305},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2223963737487793},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.16620570421218872},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.11713549494743347}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3658644.3690307","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690307","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690307","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3658644.3690307","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690307","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690307","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4405181837.pdf"},"referenced_works_count":13,"referenced_works":["https://openalex.org/W2350778671","https://openalex.org/W2514974017","https://openalex.org/W2989119476","https://openalex.org/W3015383024","https://openalex.org/W3177280097","https://openalex.org/W3183881215","https://openalex.org/W3195220207","https://openalex.org/W4312198982","https://openalex.org/W4313651639","https://openalex.org/W4384155508","https://openalex.org/W6600007113","https://openalex.org/W6600292188","https://openalex.org/W6635215278"],"related_works":["https://openalex.org/W1557094818","https://openalex.org/W2183246718","https://openalex.org/W3084814329","https://openalex.org/W1973412793","https://openalex.org/W2099261052","https://openalex.org/W4292605373","https://openalex.org/W2951146195","https://openalex.org/W4226316650","https://openalex.org/W3123215897","https://openalex.org/W2540423276"],"abstract_inverted_index":{"The":[0],"widespread":[1],"integration":[2,159],"of":[3,5,55,71,112,115,124,160,184,247,313],"Internet":[4],"Things":[6],"(IoT)":[7],"and":[8,16,22,31,93,165,212,229,306],"Industrial":[9],"IoT":[10],"(IIoT)":[11],"devices":[12,57],"in":[13,130,191,237,260,308],"respectively":[14],"home":[15],"business":[17],"environments":[18],"offers":[19],"both":[20],"benefits":[21],"perils.":[23],"While":[24],"these":[25,56,79,101,134],"devices,":[26],"such":[27],"as":[28,266,273],"IP":[29],"cameras":[30],"network":[32],"routers":[33],"improve":[34],"operational":[35],"efficiency":[36],"with":[37,65,151,209],"their":[38],"user-friendly":[39],"web":[40],"interfaces,":[41],"they":[42],"also":[43,189],"broaden":[44],"the":[45,53,181,206,223],"potential":[46,314],"for":[47,77,95,291],"cybersecurity":[48],"vulnerabilities.":[49],"Recent":[50],"studies":[51],"highlight":[52],"vulnerability":[54],"to":[58,121,174,310],"taint-based":[59],"attacks,":[60],"demonstrating":[61],"that":[62,127,145],"even":[63],"attackers":[64],"limited":[66],"permissions":[67],"can":[68],"gain":[69],"control":[70],"a":[72,109,161],"device.":[73],"Current":[74],"state-of-the-art":[75,225],"solutions":[76],"mitigating":[78],"risks":[80],"primarily":[81],"utilize":[82],"Dynamic":[83],"Symbolic":[84],"Execution":[85],"(DSE).":[86],"Although":[87],"effective,":[88],"DSE":[89],"is":[90,155],"computationally":[91],"costly":[92],"challenging":[94],"large-scale":[96],"analysis.":[97],"Besides,":[98],"during":[99],"inspection,":[100],"approaches":[102],"typically":[103],"exhibit":[104],"over-taint":[105],"behavior":[106],"by":[107,157,276,284,304],"producing":[108],"large":[110],"number":[111],"alerts,":[113],"many":[114],"which":[116,270],"are":[117,171],"false":[118,176],"positives":[119,177],"due":[120],"ineffective":[122],"handling":[123],"sanitization":[125,162,261],"measures":[126],"might":[128],"be":[129],"place.":[131],"To":[132],"overcome":[133],"limitations,":[135],"we":[136],"introduce":[137],"OctopusTaint,":[138],"an":[139],"innovative":[140],"static-based":[141],"taint":[142,201,293],"analysis":[143,150],"approach":[144],"integrates":[146],"advanced":[147,258],"data":[148],"flow":[149],"backtracking":[152],"techniques.":[153],"OctopusTaint":[154,188,218,244,279,295],"distinguished":[156],"its":[158,257,287],"inspection":[163],"module":[164],"sophisticated":[166],"post-processing":[167],"filters.":[168],"These":[169],"features":[170],"specifically":[172],"designed":[173],"minimize":[175],"effectively":[178],"while":[179,204,255],"ensuring":[180],"accurate":[182],"identification":[183],"genuine":[185,233,274],"security":[186],"threats.":[187],"excels":[190],"tracking":[192],"transformed":[193],"tainted":[194,235,248],"inputs":[195],"across":[196],"NVRAM,":[197],"identifying":[198],"new":[199,292],"user-defined":[200],"source":[202],"functions":[203],"addressing":[205],"challenges":[207],"associated":[208],"indirect":[210],"calls":[211],"aliasing.":[213],"Through":[214],"comparative":[215],"performance":[216,221],"evaluations,":[217],"demonstrates":[219],"superior":[220],"over":[222],"current":[224],"solutions,":[226],"SaTC,":[227],"EmTaint,":[228,285,307],"MangoDFA.":[230],"It":[231,263],"reports":[232],"extra":[234],"sinks":[236,249],"considerable":[238],"less":[239],"time":[240],"(24%":[241],"faster).":[242],"Furthermore,":[243,278],"identifies":[245,297],"82%":[246],"within":[250],"EmTaint":[251],"'s":[252],"labeled":[253],"dataset":[254],"exhibiting":[256],"capability":[259],"inspection.":[262],"correctly":[264],"flags":[265],"sanitized":[267],"320":[268],"sinks,":[269],"were":[271],"misidentified":[272],"alerts":[275],"EmTaint.":[277],"uncovers":[280],"additional":[281],"candidates":[282],"overlooked":[283],"leveraging":[286],"enhanced":[288],"detection":[289],"mechanisms":[290],"sources.":[294],"successfully":[296],"142":[298],"n":[299],"-day":[300],"vulnerabilities":[301],"previously":[302],"reported":[303],"SaTC":[305],"addition":[309],"discovering":[311],"dozens":[312],"0-day":[315],"candidates.":[316]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}