The DOI matches its Crossref record; 13 of the 13 references it cites were found in a registry or an index.
Update at Your Own Risk: Analysis and Recommendations for Update-Related Vulnerabilities
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“Enterprise IT teams managing thousands of devices face a complex challenge balancing two competing risks: the risk of deploying a faulty update that could crash multiple systems simultaneously, versus the risk of delaying critical security patches that leave the organization vulnerable to cyberattacks. This creates a fundamental trade-off in system resilience (Usman & Asplund, 2025).”
From Our Interconnected, Resilient, Modern World ... Is Still Painfully and Remarkably Brittle: A Case Study of the Risks of Technology Failures (2026) · cites this paper as Usman & Asplund, 2025
Citations
Cites
Towards Automated Dynamic Analysis for Linux-based Embedded Firmware
Chen, D. D., Egele, M., Woo, M., & Brumley, D. (2016) · Proceedings 2016 Network and Distributed System Security Symposium · doi:10.14722/ndss.2016.23415 · Cited by 366
The Effectiveness of Automated Static Analysis Tools for Fault Detection and Refactoring Prediction
Wedyan, F. I., Alrmuny, D., & Bieman, J. M. (2009) · IEEE International Conference on Software Testing, Verification and Validation (ICST) · doi:10.1109/icst.2009.21 · Cited by 52
Enhancing malware analysis sandboxes with emulated user behavior
Liu, S., Feng, P., Wang, S., Sun, K., & Cao, J. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102613 · Cited by 42
AoT - Attack on Things: A security analysis of IoT firmware updates
Ibrahim, M., Continella, A., & Bianchi, A. (2023) · European Symposium on Security and Privacy · doi:10.1109/eurosp57164.2023.00065 · Cited by 28
Protecting Your Software Updates
Coppens, B., Sutter, B. D., & Bosschere, K. D. (2012) · IEEE Security & Privacy · doi:10.1109/msp.2012.113 · Cited by 24
Secure and Lightweight ECU Attestations for Resilient Over-the-Air Updates in Connected Vehicles
Plappert, C., & Fuchs, A. (2023) · Annual Computer Security Applications Conference · doi:10.1145/3627106.3627202 · Cited by 15
Towards Characterizing IoT Software Update Practices
Bradley, C., & Barrera, D. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-30122-3_25 · Cited by 12
Security vulnerability assessment for software version upgrade
Treetippayaruk, S., & Senivongse, T. (2017) · IEEE/ACIS International Conference on Software Engineering, Artificial Intelligence, Networking and Parallel/Distributed Computing (SNPD) · doi:10.1109/snpd.2017.8022734 · Cited by 11
A Comprehensive, Automated Security Analysis of the Uptane Automotive Over-the-Air Update Framework
Lorch, R., Larraz, D., Tinelli, C., & Chowdhury, O. (2024) · International Symposium on Research in Attacks, Intrusions and Defenses (RAID) · doi:10.1145/3678890.3678927 · Cited by 10
Remote Attestation Assurance Arguments for Trusted Execution Environments
Usman, A. B., Cole, N., Asplund, M., Boeira, F., & Vestlund, C. (2023) · ACM Workshop on Secure and Trustworthy Cyber-Physical Systems (SaT-CPS) · doi:10.1145/3579988.3585056 · Cited by 9
Self-citation
Research works printed but not linked: 2
- Bellissimo, A., Burgess, J., Fu, K.: Secure software updates: disappointments and new challenges. In: First USENIX Workshop on Hot Topics in Security (HotSec 06). USENIX Association (2006)
- Wu, Y., et al.: Your firmware has arrived: a study of firmware update vulnerabilities. In: 33rd USENIX Security Symposium (USENIX Security 24). USENIX Association (2024)
Cited by
Witman, P., & Prior, J. (2026) · Information Systems Education Journal · doi:10.62273/psas2989
Metadata
- Authors
- Usman, A. B., & Asplund, M.
- Affiliations
- Linköping University (SE)
- Corresponding author
- Usman, Ahmad B.
- Venue
- IFIP Advances in Information and Communication Technology
- Publisher
- Springer Nature Switzerland
- Published
- 2025
- Pages
- 97-110
- ISSN
- 1868-422X (ISSN-L)
- 1868-4238
- OpenAlex
- W4410415730
- Cited by
- 3
- References
- 13
- Citations by year
- 2026: 2 · 2025: 1
- FWCI
- 3.43
- Type
- conference paper
- Language
- en
- Open access
- closed
- Licence
- www.springernature.com/gp/researchers/text-and-data-mining (tdm)
- www.springernature.com/gp/researchers/text-and-data-mining (vor)
- Locations
- IFIP advances in information and communication technology (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Web Application Security Vulnerabilities
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Keywords
- security recommendations, attack vectors, certificate validation, input validation, confidentiality, integrity and availability, vulnerability severity, risk assessment, security vulnerabilities
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Update at Your Own Risk: Analysis and Recommendations for Update-Related Vulnerabilities. https://app.cochat.ai/papers/10.1007/978-3-031-92886-4_7
- The paper
- Usman, A. B., & Asplund, M. (2025). Update at Your Own Risk: Analysis and Recommendations for Update-Related Vulnerabilities. IFIP Advances in Information and Communication Technology. https://doi.org/10.1007/978-3-031-92886-4_7
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
