{UVSCAN}: Detecting {Third-Party} Component Usage Violations in {IoT} Firmware

B Zhao, S Ji, X Zhang, Y Tian, Q Wang, Y Pu… - 32nd USENIX Security …, 2023 - usenix.org
Nowadays, IoT devices integrate a wealth of third-party components (TPCs) in firmware to
shorten the development cycle. TPCs usually have strict usage specifications, eg, checking …

The SA4P Framework: Sensing and Actuation as a Privilege

P De Vaere, F Stöger, A Perrig, G Tsudik - Proceedings of the 19th ACM …, 2024 - dl.acm.org
Popular consumer Internet of Things (IoT) devices provide increasingly diverse sensing and
actuation capabilities. Despite their benefits, such devices prompt numerous security …

AutoFirm: Automatically Identifying Reused Libraries inside IoT Firmware at Large-Scale

YL Chen, F Ma, Y Zhang, YZ He, H Wang… - arXiv preprint arXiv …, 2024 - arxiv.org
The Internet of Things (IoT) has become indispensable to our daily lives and work.
Unfortunately, developers often reuse software libraries in the IoT firmware, leading to a …

Elevating Software Trust: Unveiling and Quantifying the Risk Landscape

SA Siddiqui, C Thapa, R Holland, W Shao… - arXiv preprint arXiv …, 2024 - arxiv.org
Considering the ever-evolving threat landscape and rapid changes in software
development, we propose a risk assessment framework SRiQT (Software Risk Quantification …

[PDF][PDF] Fine-Grained Access Control For Sensors, Actuators, and Automation Networks

P De Vaere - 2023 - research-collection.ethz.ch
Both industrial-and consumer-oriented automation systems are pervasively deployed.
Although automation is not new, current trends are causing clear security concerns …