{"title":"Comprehensive Vulnerability Detection and Malware Infection Testing Strategies for IoT Devices","authors":"Bo-Hao Liang;Ren-Hung Hwang;Jia-You Lin;Hsiao-Hwa Chen","doi":"10.1109/JIOT.2025.3543819","DOIUrl":null,"url":null,"abstract":"With the increasing prevalence of Internet of Things (IoT) devices, security vulnerabilities and malware infections have emerged as significant risks. To address these challenges, advanced vulnerability detection tools are essential for enhancing IoT security assessments. In this study, we analyzed common vulnerabilities and evolving attack methodologies to develop improved detection techniques. Our research focuses on two key areas: 1) comprehensive vulnerability detection and 2) malware infection testing strategies. Through on-site testing and detailed analysis, we identified prevalent security flaws in IoT devices and developed a suite of tools tailored for detecting these vulnerabilities. Additionally, we discovered that some devices exhibit inherent immunity to specific malware strains, emphasizing the need for novel malware infection detection strategies. Real-world evaluations uncovered previously unknown vulnerabilities and weaknesses, revealed widespread susceptibility to DoS attacks, and demonstrated that not all devices are vulnerable to malware infections. These findings confirm the effectiveness of our approach in identifying risks and enhancing IoT security.","PeriodicalId":54347,"journal":{"name":"IEEE Internet of Things Journal","volume":"12 12","pages":"20556-20571"},"PeriodicalIF":8.9000,"publicationDate":"2025-02-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Internet of Things Journal","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/10897811/","RegionNum":1,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
引用次数: 0
Abstract
With the increasing prevalence of Internet of Things (IoT) devices, security vulnerabilities and malware infections have emerged as significant risks. To address these challenges, advanced vulnerability detection tools are essential for enhancing IoT security assessments. In this study, we analyzed common vulnerabilities and evolving attack methodologies to develop improved detection techniques. Our research focuses on two key areas: 1) comprehensive vulnerability detection and 2) malware infection testing strategies. Through on-site testing and detailed analysis, we identified prevalent security flaws in IoT devices and developed a suite of tools tailored for detecting these vulnerabilities. Additionally, we discovered that some devices exhibit inherent immunity to specific malware strains, emphasizing the need for novel malware infection detection strategies. Real-world evaluations uncovered previously unknown vulnerabilities and weaknesses, revealed widespread susceptibility to DoS attacks, and demonstrated that not all devices are vulnerable to malware infections. These findings confirm the effectiveness of our approach in identifying risks and enhancing IoT security.
期刊介绍:
The EEE Internet of Things (IoT) Journal publishes articles and review articles covering various aspects of IoT, including IoT system architecture, IoT enabling technologies, IoT communication and networking protocols such as network coding, and IoT services and applications. Topics encompass IoT's impacts on sensor technologies, big data management, and future internet design for applications like smart cities and smart homes. Fields of interest include IoT architecture such as things-centric, data-centric, service-oriented IoT architecture; IoT enabling technologies and systematic integration such as sensor technologies, big sensor data management, and future Internet design for IoT; IoT services, applications, and test-beds such as IoT service middleware, IoT application programming interface (API), IoT application design, and IoT trials/experiments; IoT standardization activities and technology development in different standard development organizations (SDO) such as IEEE, IETF, ITU, 3GPP, ETSI, etc.