English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Tools annual

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Presents the access of premium content as premium feature

Premium Content

Global: Zendy Plus annual

Global: Zendy Free Plan

Internet of Things (IoT) is defined as the connection between places andphysical objects (i.e., things) over the internet/network via smart computingdevices. We observed that IoT software developers share solutions toprogramming questions as code examples on three Stack Exchange Q&A sites: StackOverflow (SO), Arduino, and Raspberry Pi. Previous research studies foundvulnerabilities/weaknesses in C/C++ code examples shared in Stack Overflow.However, the studies did not investigate C/C++ code examples related to IoT.The studies investigated SO code examples only. In this paper, we conduct alarge-scale empirical study of all IoT C/C++ code examples shared in the threeStack Exchange sites, i.e., SO, Arduino, and Raspberry Pi. From the 11,329obtained code snippets from the three sites, we identify 29 distinct CWE(Common Weakness Enumeration) types in 609 snippets. These CWE types can becategorized into 8 general weakness categories, and we observe that evaluation,memory, and initialization related weaknesses are the most common to beintroduced by users when posting programming solutions. Furthermore, we findthat 39.58% of the vulnerable code snippets contain instances of CWE types thatcan be mapped to real-world occurrences of those CWE types (i.e. CVEinstances). The most number vulnerable IoT code examples was found in Arduino,followed by SO, and Raspberry Pi. Memory type vulnerabilities are on the risein the sites. For example, from the 3595 mapped CVE instances, we find that28.99% result in Denial of Service (DoS) errors, which is particularly harmfulfor network reliant IoT devices such as smart cars. Our study results can guidevarious IoT stakeholders to be aware of such vulnerable IoT code examples andto inform IoT researchers during their development of tools that can helpprevent developers the sharing of such vulnerable code examples in the sites.[Abridged].

A Large-Scale Study of IoT Security Weaknesses and Vulnerabilities in the Wild