A large-scale empirical analysis of the vulnerabilities introduced by third-party components in IoT firmware-Reference-Cited by-同舟云学术

A large-scale empirical analysis of the vulnerabilities introduced by third-party components in IoT firmware

Published:2022-07-18 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis
language:
Short-container-title:

Author:

Zhao Binbin¹,Ji Shouling²,Xu Jiacheng²,Tian Yuan³,Wei Qiuyang²,Wang Qinying²,Lyu Chenyang²,Zhang Xuhong²,Lin Changting²,Wu Jingzheng⁴,Beyah Raheem⁵

Affiliation:

1. Zhejiang University, China / Georgia Institute of Technology, USA

2. Zhejiang University, China

3. University of Virginia, USA

4. Institute of Software at Chinese Academy of Sciences, China

5. Georgia Institute of Technology, USA

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3533767.3534366

Reference60 articles.

1. 2015. Sasquatch. https://github.com/devttys0/sasquatch/ 2015. Sasquatch. https://github.com/devttys0/sasquatch/

2. 2016. yaffshiv. https://github.com/devttys0/yaffshiv 2016. yaffshiv. https://github.com/devttys0/yaffshiv

3. 2022. Binary Analysis Next Generation (BANG). https://github.com/armijnhemel/binaryanalysis-ng 2022. Binary Analysis Next Generation (BANG). https://github.com/armijnhemel/binaryanalysis-ng

4. 2022. BusyBox. https://busybox.net/ 2022. BusyBox. https://busybox.net/

5. 2022. Common Vulnerabilities and Exposures (CVE). https://cve.mitre.org/ 2022. Common Vulnerabilities and Exposures (CVE). https://cve.mitre.org/

Cited by 7 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. LibvDiff: Library Version Difference Guided OSS Version Identification in Binaries;Proceedings of the 46th IEEE/ACM International Conference on Software Engineering;2024-02-06

2. LibAM: An Area Matching Framework for Detecting Third-Party Libraries in Binaries;ACM Transactions on Software Engineering and Methodology;2023-12-23

3. LibDI: A Direction Identification Framework for Detecting Complex Reuse Relationships in Binaries;MILCOM 2023 - 2023 IEEE Military Communications Conference (MILCOM);2023-10-30

4. Dissecting the Industrial Control Systems Software Supply Chain;IEEE Security & Privacy;2023-07

5. A comprehensive survey of vulnerability detection method towards Linux-based IoT devices;Proceedings of the 2023 2nd International Conference on Networks, Communications and Information Technology;2023-06-16