{"id":"https://openalex.org/W4406102731","doi":"https://doi.org/10.3390/fi17010019","title":"IoT Firmware Emulation and Its Security Application in Fuzzing: A Critical Revisit","display_name":"IoT Firmware Emulation and Its Security Application in Fuzzing: A Critical Revisit","publication_year":2025,"publication_date":"2025-01-06","ids":{"openalex":"https://openalex.org/W4406102731","doi":"https://doi.org/10.3390/fi17010019"},"language":"en","primary_location":{"id":"doi:10.3390/fi17010019","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi17010019","pdf_url":"https://www.mdpi.com/1999-5903/17/1/19/pdf?version=1736161631","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1999-5903/17/1/19/pdf?version=1736161631","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001673339","display_name":"Wei Zhou","orcid":"https://orcid.org/0000-0001-7834-0839"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Wei Zhou","raw_affiliation_strings":["School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan 430074, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan 430074, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Shandian Shen","orcid":"https://orcid.org/0009-0004-6483-5485"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shandian Shen","raw_affiliation_strings":["School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan 430074, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan 430074, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100346828","display_name":"Peng Liu","orcid":"https://orcid.org/0000-0002-5091-8464"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Peng Liu","raw_affiliation_strings":["College of Information Sciences and Technology, The Pennsylvania State University, University Park, PA 16802, USA"],"affiliations":[{"raw_affiliation_string":"College of Information Sciences and Technology, The Pennsylvania State University, University Park, PA 16802, USA","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5001673339","https://openalex.org/A5100346828"],"corresponding_institution_ids":["https://openalex.org/I130769515","https://openalex.org/I47720641"],"apc_list":{"value":1400,"currency":"CHF","value_usd":1515},"apc_paid":{"value":1400,"currency":"CHF","value_usd":1515},"fwci":6.8817,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.96150692,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"17","issue":"1","first_page":"19","last_page":"19"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.9687225222587585},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9617486000061035},{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.8982928395271301},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8396296501159668},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5313993692398071},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.40570786595344543},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.39248189330101013},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2901795506477356}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.9687225222587585},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9617486000061035},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.8982928395271301},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8396296501159668},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5313993692398071},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.40570786595344543},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.39248189330101013},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2901795506477356},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.3390/fi17010019","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi17010019","pdf_url":"https://www.mdpi.com/1999-5903/17/1/19/pdf?version=1736161631","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:gam:jftint:v:17:y:2025:i:1:p:19-:d:1561106","is_oa":false,"landing_page_url":"https://www.mdpi.com/1999-5903/17/1/19/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},{"id":"pmh:oai:doaj.org/article:9ed38095d2444faaa63973c536cc9f41","is_oa":true,"landing_page_url":"https://doaj.org/article/9ed38095d2444faaa63973c536cc9f41","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Future Internet, Vol 17, Iss 1, p 19 (2025)","raw_type":"article"},{"id":"pmh:oai:osti.gov:2496727","is_oa":true,"landing_page_url":"https://www.osti.gov/biblio/2496727","pdf_url":null,"source":{"id":"https://openalex.org/S4306402487","display_name":"OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I139351228","host_organization_name":"Office of Scientific and Technical Information","host_organization_lineage":["https://openalex.org/I139351228"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"doi:10.3390/fi17010019","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi17010019","pdf_url":"https://www.mdpi.com/1999-5903/17/1/19/pdf?version=1736161631","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.8100000023841858,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1159674302","display_name":"Renovation and Partial Furnishing of Botanical Sciences  Laboratories;","funder_award_id":"6220218","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G1231421488","display_name":null,"funder_award_id":"under","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1391936209","display_name":"Collaborative Research: SaTC: CORE: Medium: Cyber-threat Detection and Diagnosis in Multistage Manufacturing Systems through Cyber and Physical Data Analytics","funder_award_id":"2019340","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G1449784963","display_name":null,"funder_award_id":"RC-40125b-2023","funder_id":"https://openalex.org/F4320334194","funder_display_name":"Office of Cybersecurity, Energy Security, and Emergency Response"},{"id":"https://openalex.org/G1714338330","display_name":null,"funder_award_id":"RC-40125b-2023","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1966888547","display_name":null,"funder_award_id":"CNS-2019340","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2321525934","display_name":null,"funder_award_id":"ECCS-2140175","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3317480652","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G391238517","display_name":null,"funder_award_id":", and","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3994444534","display_name":"Towards Provable Security of Real-world Servers: Where Online Learning Meets Server Retrofitting","funder_award_id":"2140175","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4521288315","display_name":null,"funder_award_id":"ECCS-2140175","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5536843497","display_name":null,"funder_award_id":"6220218","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G554735968","display_name":null,"funder_award_id":"62202188","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5921281487","display_name":null,"funder_award_id":"number","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5994120800","display_name":null,"funder_award_id":"Natural","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6017835628","display_name":null,"funder_award_id":"CNS-2019340","funder_id":"https://openalex.org/F4320334194","funder_display_name":"Office of Cybersecurity, Energy Security, and Emergency Response"},{"id":"https://openalex.org/G7734959260","display_name":null,"funder_award_id":"62202188","funder_id":"https://openalex.org/F4320334194","funder_display_name":"Office of Cybersecurity, Energy Security, and Emergency Response"},{"id":"https://openalex.org/G8334011003","display_name":null,"funder_award_id":"CNS-2019340","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G848032724","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G976364682","display_name":null,"funder_award_id":"ECCS-2140175","funder_id":"https://openalex.org/F4320334194","funder_display_name":"Office of Cybersecurity, Energy Security, and Emergency Response"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334194","display_name":"Office of Cybersecurity, Energy Security, and Emergency Response","ror":null},{"id":"https://openalex.org/F4320337392","display_name":"Division of Electrical, Communications and Cyber Systems","ror":"https://ror.org/01krpsy48"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4406102731.pdf"},"referenced_works_count":44,"referenced_works":["https://openalex.org/W2043118292","https://openalex.org/W2120635877","https://openalex.org/W2576376563","https://openalex.org/W2766540688","https://openalex.org/W2782780792","https://openalex.org/W2884769489","https://openalex.org/W2885332751","https://openalex.org/W2888875512","https://openalex.org/W2969920946","https://openalex.org/W2972481639","https://openalex.org/W2977770803","https://openalex.org/W3001307185","https://openalex.org/W3018354080","https://openalex.org/W3048197573","https://openalex.org/W3048512654","https://openalex.org/W3108723500","https://openalex.org/W3111743984","https://openalex.org/W3113108440","https://openalex.org/W3118666763","https://openalex.org/W3154093559","https://openalex.org/W3157039655","https://openalex.org/W3158006664","https://openalex.org/W3164551084","https://openalex.org/W3169850996","https://openalex.org/W3170245351","https://openalex.org/W4226344376","https://openalex.org/W4240590466","https://openalex.org/W4288057749","https://openalex.org/W4294811443","https://openalex.org/W4306406243","https://openalex.org/W4308409817","https://openalex.org/W4308411344","https://openalex.org/W4308462374","https://openalex.org/W4308632293","https://openalex.org/W4360969818","https://openalex.org/W4377695283","https://openalex.org/W4383221439","https://openalex.org/W4385890307","https://openalex.org/W4389331493","https://openalex.org/W6631155369","https://openalex.org/W6810421805","https://openalex.org/W6921300763","https://openalex.org/W6921398516","https://openalex.org/W7000681503"],"related_works":["https://openalex.org/W3111743984","https://openalex.org/W4391761545","https://openalex.org/W4312439535","https://openalex.org/W4378976979","https://openalex.org/W3118666763","https://openalex.org/W3037057426","https://openalex.org/W4362015489","https://openalex.org/W4378373752","https://openalex.org/W1526521547","https://openalex.org/W4385624297"],"abstract_inverted_index":{"As":[0],"IoT":[1,41],"devices":[2,47],"with":[3,69],"microcontroller":[4],"(MCU)-based":[5],"firmware":[6,18,61,67,95,121,192],"become":[7],"more":[8,74],"common":[9],"in":[10,16,93,100,168,191],"our":[11],"lives,":[12],"memory":[13],"corruption":[14],"vulnerabilities":[15],"their":[17,109,162,175],"are":[19,72],"increasingly":[20],"targeted":[21],"by":[22,120],"adversaries.":[23],"Fuzzing":[24],"is":[25,48,145],"a":[26],"powerful":[27],"method":[28],"for":[29,59,79],"detecting":[30],"these":[31,46],"vulnerabilities,":[32],"but":[33],"it":[34],"poses":[35],"unique":[36],"challenges":[37,78,118,136],"when":[38],"applied":[39],"to":[40,133,159,173],"devices.":[42],"Direct":[43],"fuzzing":[44],"on":[45,108],"inefficient,":[49],"and":[50,84,97,111,123,139,152,164,184,194],"recent":[51,128],"efforts":[52],"have":[53],"shifted":[54],"towards":[55],"creating":[56],"emulation":[57,83,96,122,150,193],"environments":[58],"dynamic":[60],"testing.":[62],"However,":[63],"unlike":[64],"traditional":[65],"software,":[66],"interactions":[68],"peripherals":[70],"that":[71],"significantly":[73],"diverse":[75],"presents":[76],"new":[77],"achieving":[80],"scalable":[81],"full-system":[82],"effective":[85],"fuzzing.":[86,101,124,195],"This":[87],"paper":[88],"reviews":[89],"27":[90],"state-of-the-art":[91],"works":[92],"MCU-based":[94],"its":[98],"applications":[99],"Instead":[102],"of":[103,156],"classifying":[104],"existing":[105],"techniques":[106,158],"based":[107],"capabilities":[110,155],"features,":[112],"we":[113,178],"first":[114],"identify":[115],"the":[116,134,149,180],"fundamental":[117],"faced":[119],"We":[125,147],"then":[126],"revisit":[127],"studies,":[129],"organizing":[130],"them":[131],"according":[132],"specific":[135,143],"they":[137],"address,":[138],"discussing":[140],"how":[141],"each":[142],"challenge":[144],"addressed.":[146],"compare":[148],"fidelity":[151],"bug":[153],"detection":[154],"various":[157],"clearly":[160],"demonstrate":[161],"strengths":[163],"weaknesses,":[165],"aiding":[166],"users":[167],"selecting":[169],"or":[170],"combining":[171],"tools":[172],"meet":[174],"needs.":[176],"Finally,":[177],"highlight":[179],"remaining":[181],"technical":[182],"gaps":[183],"point":[185],"out":[186],"important":[187],"future":[188],"research":[189],"directions":[190]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3}],"updated_date":"2026-04-16T08:26:57.006410","created_date":"2025-10-10T00:00:00"}