This is a reading list for those interested in studying IoT Access Control.

IoT Security:

• Security Analysis of Emerging Smart Home Applications, IEEE S&P, 2016

• FlowFence: Practical Data Protection for Emerging IoT Application Frameworks, USENIX Security, 2016

• SmartAuth: User-Centered Authorization for the Internet of Things USENIX Security, 2017

• HoMonit: Monitoring Smart Home Apps from Encrypted Traffic, CCS, 2018

• Do You Feel What I Hear? Enabling Autonomous IoT Device Pairing using Different Sensor Types, IEEE S&P, 2018

• If This Then What? Controlling Flows in IoT Apps, CCS, 2018

Vulnerability Detection:

• IOTFUZZER:Discovering Memory Corruptions in IoT Through App-based Fuzzing, NDSS, 2018

• Fear and Logging in the Internet of Things, NDSS, 2018

• Decentralized Action Integrity for Trigger-Action IoT Platforms, NDDS, 2018

• SoK: Security Evaluation of Home-Based IoT Deployments, IEEE S&P, 2019

Access Control

• ContexIoT: Towards Providing Contextual Integrity to Appified IoT Platforms, NDSS, 2017

• Tyche: Risk-Based Permissions for Smart Home Platforms, IEEE SecDev, 2018

• Situational Access Control in the Internet of Things, CCS, 2018

• On Risk in Access Control Enforcement, SACMAT, 2017

• Situational Awareness based Risk-Adapatable Access Control in Enterprise Networks, SACMAT, 2017

• Rethinking Access Control and Authentication for the Home Internet of Things(IoT), USENIX Security, 2018

• Towards PII-based Multiparty Access Control for Photo Sharing in Online Social Networks, SACMAT , 2017

• AuDroid: Preventing Attacks on Audio Channels in Mobile Devices, ACSAC, 2015

Deep Learning Risk Analysis

• Tiresias: Predicting Security Events Through Deep Learning, CCS, 2018

• RiskTeller: Predicting the Risk of Cyber Incidents, CCS, 2017

• DeepLog: Anomaly Detection and Diagnosis from System Logs through Deep Learning, CCS, 2017

• Predictive Analysis in Network Function Virtualization, IMC, 2017

• IoTRiskAnalyzer: A Probabilistic Model Checking Based Framework for Formal Risk Analytics of the Internet of Things, IEEE Access, 2017

• LEMNA: Explaining Deep Learning based Security Applications, IEEE Access, 2018

Model Checking

• IotSan: Fortifying the Safety of IoT Systems, CoNEXT, 2018

• SOTERIA: Automated IoT Safety and Security Analysis, USENIX ATC, 2018 of the Internet of Things], IEEE Access, 2017

Fuzzing:

https://github.com/cpuu/awesome-fuzzing#papers

Surveys:

• A Survey of Machine and Deep Learning Methods for Internet of Things (IoT), Security arXiv, 2017

• Towards Security and Privacy for Multi-User Augmented Reality: Foundations with End Users, IEEE S&P, 2018