A modular framework for auditing IoT devices and networks

Rizvi, Syed; Zwerling, Tatiana; Thompson, Benjamin; Faiola, Shawn; Campbell, Shakir; Fisanick, Stephen; Hutnick, Codi

doi:10.1016/j.cose.2023.103327

Cited by 30IoT and Edge/Fog ComputingInternet of Things and AIInformation and Cyber Security

A modular framework for auditing IoT devices and networks

Rizvi, Syed, Zwerling, Tatiana, Thompson, Benjamin, Faiola, Shawn, Campbell, Shakir, Fisanick, Stephen, Hutnick, Codi·2023·Computers & Security

DOI 10.1016/j.cose.2023.103327

Open this paper in CoChat — free account

Integrity signals

Registry

Crossref · 10.1016/j.cose.2023.103327

Cites

21 of 21 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

The framework's effectiveness is not empirically validated across a wide range of IoT implementations.
“However, the framework's effectiveness is not empirically validated across a wide range of IoT implementations, and its direct connection to DevSecOps practices is not explicitly established.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [56]
Its direct connection to DevSecOps practices is not explicitly established.
“However, the framework's effectiveness is not empirically validated across a wide range of IoT implementations, and its direct connection to DevSecOps practices is not explicitly established.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [56]

IoT Privacy and Security: Challenges and Solutions
Tawalbeh, L., Muheidat, F., Tawalbeh, M., & Quwaider, M. (2020) · Applied Sciences · doi:10.3390/app10124102 · Cited by 764 · see citing works
Fast Strategies for the Implementation of SIKE Round 3 on ARM Cortex-M4
Anastasova, M., Azarderakhsh, R., & Kermani, M. M. (2021) · IEEE Transactions on Circuits and Systems I Regular Papers · doi:10.1109/tcsi.2021.3096916 · Cited by 165 · see citing works
Cryptographic Accelerators for Digital Signature Based on Ed25519
Bisheh-Niasar, M., Azarderakhsh, R., & Kermani, M. M. (2021) · IEEE Transactions on Very Large Scale Integration (VLSI) Systems · doi:10.1109/tvlsi.2021.3077885 · Cited by 151 · see citing works
Supersingular Isogeny Diffie-Hellman Key Exchange on 64-Bit ARM
Jalali, A., Azarderakhsh, R., Kermani, M. M., & Jao, D. (2017) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2017.2723891 · Cited by 119 · see citing works
A Survey of Security Vulnerability Analysis, Discovery, Detection, and Mitigation on IoT Devices
Yu, M., Zhuge, J., Cao, M., Shi, Z., & Jiang, L. C. (2020) · Future Internet · doi:10.3390/fi12020027 · Cited by 100 · see citing works
IoT Network Security: Threats, Risks, and a Data-Driven Defense Framework
Wheelus, C., & Xingquan Zhu, A. (2020) · IoT · doi:10.3390/iot1020016 · Cited by 100 · see citing works
Identifying the attack surface for IoT network
Rizvi, S. S., Orr, R., Cox, A., Ashokkumar, P., & Rizvi, M. R. (2020) · Internet of Things · doi:10.1016/j.iot.2020.100162 · Cited by 99 · see citing works
Self-citation
Breaking a Fifth-Order Masked Implementation of CRYSTALS-Kyber by Copy-Paste
Dubrova, E., Ngo, K., Gärtner, J., & Wang, R. (2023) · ACM ASIA Public-Key Cryptography Workshop (APKC) · doi:10.1145/3591866.3593072 · Cited by 94 · see citing works
Towards Optimized and Constant-Time CSIDH on Embedded Devices
Jalali, A., Azarderakhsh, R., Kermani, M. M., & Jao, D. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-16350-1_12 · Cited by 49 · see citing works
2016 IEEE International Conference on Electronics, Circuits and Systems (ICECS)
(2016) · doi:10.1109/icecs38046.2016 · Cited by 49 · see citing works
2011 IEEE International Symposium on Defect and Fault Tolerance in VLSI and Nanotechnology Systems
(2011) · doi:10.1109/dft19699.2011 · Cited by 48 · see citing works
Fault Attacks on AES and Their Countermeasures
Ali, S. S., Guo, X., Karri, R., & Mukhopadhyay, D. (2015) · Springer eBooks · doi:10.1007/978-3-319-14971-4_5 · Cited by 44 · see citing works
Fault Detection Structures of the S-boxes and the Inverse S-boxes for the Advanced Encryption Standard
Kermani, M. M., & Reyhani-Masoleh, A. (2009) · Journal of Electronic Testing · doi:10.1007/s10836-009-5108-4 · Cited by 42 · see citing works
Reliable Architecture-Oblivious Error Detection Schemes for Secure Cryptographic GCM Structures
Kermani, M. M., & Azarderakhsh, R. (2018) · IEEE Transactions on Reliability · doi:10.1109/tr.2018.2882484 · Cited by 27 · see citing works
Update now or later? Effects of experience, cost, and risk preference on update decisions
Rajivan, P., Aharonov‐Majar, E., & González, C. (2020) · Journal of Cybersecurity · doi:10.1093/cybsec/tyaa002 · Cited by 27 · see citing works
Fault diagnosis schemes for secure lightweight cryptographic block cipher RECTANGLE benchmarked on FPGA
Aghaie, A., Kermani, M. M., & Azarderakhsh, R. (2016) · IEEE International Conference on Electronics, Circuits and Systems (ICECS) · doi:10.1109/icecs.2016.7841315 · Cited by 25 · see citing works
Low-Resource and Fast Binary Edwards Curves Cryptography
Koziel, B., Azarderakhsh, R., & Kermani, M. M. (2015) · Lecture notes in computer science · doi:10.1007/978-3-319-26617-6_19 · Cited by 21 · see citing works
How Can IoT Services Pose New Security Threats In Operational Cellular Networks?
Xie, T., Tu, G.-H., Li, C.-Y., & Peng, C. (2020) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2020.2984192 · Cited by 19 · see citing works
2022 International Conference on Information Science and Communications Technologies (ICISCT)
(2022) · doi:10.1109/icisct55600.2022 · Cited by 16 · see citing works
FPGA-SIDH: High-Performance Implementation of Supersingular Isogeny Diffie-Hellman Key-Exchange Protocol on FPGAPreprint
Azarderakhsh, R., Koziel, B., Langroudi, S. H. F., & Kermani, M. M. (2016) · IACR Cryptology ePrint Archive · Cited by 11 · see citing works
Why Compliance is needed for Internet of Things?
Rizvi, S. S., Campbell, S., & Alden, K. (2020) · International Conference on Software Security and Assurance (ICSSA) · doi:10.1109/icssa51305.2020.00019 · Cited by 4 · see citing works
Self-citation

Flagged first, then by citations

2 of the 23 references couldn’t be matched to a known paper.

Sorted by citations

Dynamic network security leveraging efficient CoviNet with granger causality-inspired graph neural networks for data compression in cloud IoT Devices
Begum, M. B., Yogeshwaran, A., Nagarajan, M., & Rajalakshmi, P. (2024) · Knowledge-Based Systems · doi:10.1016/j.knosys.2024.112859 · Cited by 35 · see citing works
Digitalisation and Cybersecurity: Towards an Operational Framework
Metin, B., Özhan, F. G., & Wynn, M. G. (2024) · Electronics · doi:10.3390/electronics13214226 · Cited by 32 · see citing works
Securing the IoT Landscape: A Comprehensive Review of Secure Systems in the Digital Era
Siraparapu, S. R., & Azad, S. M. A. K. (2024) · e-Prime - Advances in Electrical Engineering Electronics and Energy · doi:10.1016/j.prime.2024.100798 · Cited by 24 · see citing works
Exploring security and privacy enhancement technologies in the Internet of Things: A comprehensive review
Ataullah, M., & Chauhan, N. (2024) · Security and Privacy · doi:10.1002/spy2.448 · Cited by 23 · see citing works
Securing Edge Devices in IoT and 6G: A Trust-Based Approach for Resource-Constrained Environments
Mahmood, S., Gohar, M., Khashan, O. A., Alzahrani, N., Ghani, A., & Al-Turjman, F. M. (2025) · IEEE Open Journal of the Communications Society · doi:10.1109/ojcoms.2025.3597556 · Cited by 19 · see citing works
Quality-Focused Internet of Things Data Management: A Survey, Perspectives, Open Issues, and Challenges
Abdalzaher, M. S., Krichen, M., Shaaban, M. F., & Fouda, M. M. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3613669 · Cited by 10 · see citing works
“Second, regular security audits and monitoring can contribute to managing proactive vulnerability, continuous improvement, early detection of security gaps, and compliance assurance [315], [316], [317], [318].”
Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review
Mohammed, K., Shanmugam, B., & El-Den, J. (2025) · Technologies · doi:10.3390/technologies13120548 · Cited by 8 · see citing works
IoT device security audit tools: a comprehensive analysis and a layered architecture approach for addressing expanded security requirements
Kumar, A., Kavisankar, L., Venkatesan, S., Kumar, M., Yadav, S., Shukla, S. K., & Khondoker, R. (2024) · International Journal of Information Security · doi:10.1007/s10207-024-00930-z · Cited by 8 · see citing works
Designing a Water Temperature control and Monitoring System for Vaname Shrimp cultivation based on the Internet of Things ( IoT )
Hermawan, S., Rahmawati, S., Aditia, Q., Wibowo, B., & Yuswanto, A. (2023) · Jurnal Komputer dan Elektro Sains · doi:10.58291/komets.v1i1.96 · Cited by 6 · see citing works
Privacy and security issues in smart grids: A survey
Okeyo, O. J. (2023) · World Journal of Advanced Engineering Technology and Sciences · doi:10.30574/wjaets.2023.10.2.0306 · Cited by 6 · see citing works
Organized Optimization Integration Validation Model for Internet of Things (IoT)-Based Real-Time Applications
Alghuried, A., Alghuson, M. K., Alahmari, T. S., & Abuhasel, K. A. (2024) · Mathematics · doi:10.3390/math12152385 · Cited by 5 · see citing works
Enhancing Home Security with IoT Devices: A Vulnerability Analysis Using the IoT Security Test
Misailov, A. Y., Mishra, N., Lakhanpal, S., Prakash, A., & Sharma, N. (2024) · BIO Web of Conferences · doi:10.1051/bioconf/20248601084 · Cited by 5 · see citing works
Securing the Supply Chain
Sindiramutty, S. R., Tan, C. E., Goh, W. W., Balakrishnan, S., Hamzah, N., & Akbar, R. (2024) · Advances in information security, privacy, and ethics book series · doi:10.4018/979-8-3693-3816-2.ch011 · Cited by 5 · see citing works
Smart Medical Rescue via Efficient Vehicle Road Cooperation: AIoT Framework
Lyu, X., Rani, S., Manimurugan, S., & Feng, Y. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3479244 · Cited by 4 · see citing works
Detecting Mobile Payment Fraud: Leveraging Machine Learning for Rapid Analysis
Muqattash, R. S., & Kharbat, F. F. (2023) · International Conference on Social Networks Analysis, Management and Security (SNAMS) · doi:10.1109/snams60348.2023.10375448 · Cited by 4 · see citing works
Zero trust architecture for internet of things devices and next-generation networks: tools, trends, and challenges
Barbosa, G. N. N., Lopez, M. A., Nguyen, T. M. T., & Mattos, D. M. F. (2026) · Annals of Telecommunications · doi:10.1007/s12243-026-01197-2 · Cited by 3 · see citing works
Application Level Trust Authority (APPLETA) for Resource-Constrained Edge Devices in IoT and 6G
Mahmood, S., Gohar, M., Koh, S., Tariq, M. U., & Ghani, A. (2025) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2025.3571817 · Cited by 3 · see citing works
Beyond the automation gap: A survey of continuous audit for IoT security
Briliyant, O. C., Javed, A., & Cherdantseva, Y. (2026) · Computers & Security · doi:10.1016/j.cose.2026.104953 · Cited by 2 · see citing works
Securing the Future: The Role of Knowledge Discovery Frameworks
Jansevskis, M., & Osis, K. (2024) · Springer eBooks · doi:10.1007/978-3-031-57452-8_5 · Cited by 1 · see citing works
IoT in Home Automation: A Data-Driven User Behaviour Analysis and User Adoption Test
Elena, V., Bisht, D., Chhabra, S., Kumar, K., Sharma, M., & Yellanki, V. S. (2024) · BIO Web of Conferences · doi:10.1051/bioconf/20248601085 · Cited by 1 · see citing works
Impact of Overcoming Digitalization Implementation Barriers on Building Projects Development Success: A Hybrid Structural Equation Modeling and Deep Neural Network ApproachesPreprint
Kineber, A. F., Ali, A. H., Elshaboury, N., Massoud, M., Rady, M., Al-Mhdawi, M. K. S., & Rahimian, F. P. (2023) · SSRN Electronic Journal · doi:10.2139/ssrn.4645783
Exploring IoT Based on Graph Neural Networks
Wang, J. (2025) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-031-90084-6_23
The impact of artificial intelligence on accounting audits: applications of neural networks and deep learning
-, M. A. B. G., & Abaoub, E. (2025) · International Journal For Multidisciplinary Research · doi:10.36948/ijfmr.2025.v07i03.35911
Multievolutionary Feature Learning for Intelligence of Social Things Networks: Enhancing Environmental Awareness Through Link Prediction
Zhao, Y., Kim, S.-K., & Wang, X. (2025) · IEEE Transactions on Computational Social Systems · doi:10.1109/tcss.2025.3583322
Network Packet Security Analysis Chatbot using SQL-RAG Approach and Cybersecurity-Tuned LLM
Briliyant, O. C., Javed, A., & Cherdantseva, Y. (2025) · International Conference on Electrical, Communication, and Computer Engineering (ICECCE) · doi:10.1109/icecce67514.2025.11258026
Innovaciones tecnológicas en auditoría: revisión sistemática y análisis bibliométrico en el marco de la calidad 4.0
la Barrera, J. H. D., Cáceres, A. M., Vega, M. A. M., & Anaya, V. D. (2025) · Teknos revista científica · doi:10.25044/25392190.1111
Towards Privacy-Aware IoT Audit Framework: A Grounded Theory Approach
Diansyah, H. F., Nugraha, Y., & Aminanto, M. E. (2025) · IEEE International Conference on Cryptography, Informatics, and Cybersecurity (ICoCICs) · doi:10.1109/icocics68032.2025.11384082
A scientometric exploration of threats to IoT security landscape
Charul, K. M., & Bhatia, M. (2026) · Cluster Computing · doi:10.1007/s10586-026-06137-2
Systematization of human-centered continuous audit for IoT security compliance
Briliyant, O. C., Javed, A., & Cherdantseva, Y. (2026) · Journal of Cybersecurity · doi:10.1093/cybsec/tyag021
The Influence of Digital Audit Capability on Tax Compliance in Tanzania
Chalu, H. Z., & Deokari, D. (2026) · Business Management Review · doi:10.65085/2546-213x.1333

A Gradational Approach for Auditing IoT Security Vulnerability
Rajagopal, M., & Ramkumar, S. (2024) · Auerbach Publications eBooks · doi:10.1201/9781003474838-6
Strategic Security Audit Protocol: Safeguarding Smart Home IoT Devices against Vulnerabilities
Dar, A. A., Reegu, F. A., Ahmed, S., & Hussain, G. (2024) · International Conference on Computing for Sustainable Global Development · doi:10.23919/indiacom61295.2024.10498906 · Cited by 7 · see citing works
An Auditing Framework for Vulnerability Analysis of IoT System
Nadir, I., Ahmad, Z., Mahmood, H., Shah, G. A., Shahzad, F., Umair, M., Khan, H., & Gulzar, U. (2019) · IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) · doi:10.1109/eurospw.2019.00011 · Cited by 28 · see citing works
Framework for Risk-Based IoT Cybersecurity Audit EngagementsPreprint
Hanson, D., & Straub, J. (2026) · arXiv (Cornell University) · doi:10.48550/arxiv.2603.22191
IoT as Audit Evidence: A Reasonable Assurance Framework
Alzamil, Z. S., Appelbaum, D. A., & Nehmer, R. A. (2024) · Journal of Emerging Technologies in Accounting · doi:10.2308/jeta-2023-002 · Cited by 3 · see citing works

Authors: Rizvi, S., Zwerling, T., Thompson, B., Faiola, S., Campbell, S., Fisanick, S., & Hutnick, C.
Affiliations: Pennsylvania State University (US)
Corresponding author: Rizvi, Syed
ORCID: Rizvi, Syed
Venue: Computers & Security
Publisher: Elsevier BV
Published: 2023-09
Volume: 132
Pages: 103327
ISSN: 0167-4048 (ISSN-L)
DOI: 10.1016/j.cose.2023.103327
OpenAlex: W4380489146
Cited by: 29
References: 23
Citations by year: 2026: 4 · 2025: 10 · 2024: 11 · 2023: 4
FWCI: 3.23
Type: journal article
Language: en
Open access: closed
Licence: www.elsevier.com/tdm/userlicense/1.0/ (tdm)
www.elsevier.com/legal/tdmrep-license (tdm)
doi.org/10.15223/policy-017 (stm-asf)
doi.org/10.15223/policy-037 (stm-asf)
doi.org/10.15223/policy-012 (stm-asf)
doi.org/10.15223/policy-029 (stm-asf)
doi.org/10.15223/policy-004 (stm-asf)
Locations: Computers & Security (publishedVersion)
Topics: Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
Keywords: Internet of Things security, enterprise networks, regulatory compliance, firmware security, data privacy, secure communication, hardware security

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

A modular framework for auditing IoT devices and networks

Integrity signals

Claims the paper makes

Claims other papers make about this one

Cites

Cited by

Related

Record

About these checks