An empirical study of IoT security aspects at sentence-level in developer textual discussions

Mandal, Nibir Chandra; Uddin, Gias

doi:10.1016/j.infsof.2022.106970

Cited by 8 publications

(3 citation statements)

References 68 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The authors analyzed the language used by developers in discussing IoT security issues and identified the most common security concerns. The study highlighted the importance of addressing these concerns and adopting appropriate security measures to mitigate the risks associated with IoT systems [7]. Selimis et al (2020) proposed RESCURE, a security solution for the IoT life cycle.…”

Section: Related Workmentioning

confidence: 99%

Let Us Create Our Desktop IoT Soft-Switchboard Using AWS, ESP32 and C#

Chakraborty,

Aithal

2023

SSRN Journal

View full text Add to dashboard Cite

Section: Related Workmentioning

confidence: 99%

Let Us Create Our Desktop IoT Soft-Switchboard Using AWS, ESP32 and C#

Chakraborty,

Aithal

2023

SSRN Journal

View full text Add to dashboard Cite

“…Studies investigated underlying middleware solutions [9], big data analytics [21], and the design of secure protocols and techniques [2,19,43] and their applications on diverse domains (e.g., eHealth [22]). SO posts have been previously studied for insecure python vulnerabilities [28], topics discussed by IoT developers [20,33,39], big data [4] and chatbot issues [1]. Techniques and safety measures are studied in Soteria [6], IoTGuard [7].…”

Section: Related Workmentioning

confidence: 99%

Does Collaborative Editing Help Mitigate Security Vulnerabilities in Crowd-Shared IoT Code Examples?

Selvaraj

Uddin

2022

Proceedings of the 16th ACM / IEEE International Symposium on Empirical Software Engineering and Measurement

Self Cite

View full text Add to dashboard Cite

Background: With the proliferation of crowd-sourced developer forums, Software developers are increasingly sharing more coding solutions to programming problems with others in forums. The decentralized nature of knowledge sharing on sites has raised the concern of sharing security vulnerable code, which then can be reused into mission critical software systems -making those systems vulnerable in the process. Collaborative editing has been introduced in forums like Stack Overflow to improve the quality of the shared contents. Aim: In this paper, we investigate whether code editing can mitigate shared vulnerable code examples by analyzing IoT code snippets and their revisions in three Stack Exchange sites: Stack Overflow, Arduino, and Raspberry Pi. Method:We analyze the vulnerabilities present in shared IoT C/C++ code snippets, as C/C++ is one of the most widely used languages in mission-critical devices and low-powered IoT devices. We further analyse the revisions made to these code snippets, and their effects. Results: We find several vulnerabilities such as CWE 788 -Access of Memory Location After End of Buffer, in 740 code snippets . However, we find the vast majority of posts are not revised, or revisions are not made to the code snippets themselves (598 out of 740). We also find that revisions are most likely to result in no change to the number of vulnerabilities in a code snippet rather than deteriorating or improving the snippet. Conclusions: We conclude that the current collaborative editing system in the forums may be insufficient to help mitigate vulnerabilities in the shared code. CCS CONCEPTS• Software and its engineering; • Security and privacy → Systems security; • Human Centered Computing → Collaborative and Social Computing;

show abstract

“…O crescente aumento da relevância da Internet das Coisas (do Inglês, Internet of Things, IoT) [1] num número alargado de cenários de aplicação (cidades inteligentes, casas inteligentes, segurança inteligente, transporte inteligente, agricultura inteligente, saúde inteligente, entre outros) [2,3,4], traz consigo a necessidade do desenvolvimento contínuo de protocolos, redes, dispositivos sensores e sistemas.…”

Section: Introductionunclassified

Performance Assessment of a Wireless Mesh Network for Post-harvest Food Quality Traceability of Fruit Products: A Case Study

Caldeira

Soares

Gaspar

2023

RITA

View full text Add to dashboard Cite

This paper presents the performance evaluation of a wireless sensor mesh network, for monitoring temperature and humidity in horticultural products when transported in truck galleys. For this purpose a software solution was proposed using ESP8266 devices powered by batteries. The mesh network was managed by the painlessMesh library. The proposed solution aims to minimize the energy consumption of the sensor nodes. The validation of the solution was performed in an area simulating a galley of a truck, where five sensor nodes and a root node were distributed. The tests were developed considering four different models involving variations in messages delivery confirmation, number of attempts until successful delivery and duty cycle duration of the nodes. The performance evaluation of the solution aimed to determine, connectivity rate, sending rate after connection and delivery rates of the first and second attempts. The results obtained show that the message delivery confirmation does not bring added value to the solution, contributing only to increase energy consumption. The use of synchronous duty cycles also showed worse results than the asynchronous use. These results allow the creation of a knowledge base for the use of this solution in a real context.

show abstract

An empirical study of IoT security aspects at sentence-level in developer textual discussions

Cited by 8 publications

References 68 publications

Let Us Create Our Desktop IoT Soft-Switchboard Using AWS, ESP32 and C#

Let Us Create Our Desktop IoT Soft-Switchboard Using AWS, ESP32 and C#

Does Collaborative Editing Help Mitigate Security Vulnerabilities in Crowd-Shared IoT Code Examples?

Performance Assessment of a Wireless Mesh Network for Post-harvest Food Quality Traceability of Fruit Products: A Case Study

Contact Info

Product

Resources

About