xinjin95 / iotspotter Goto Github PK

Dear authors,

I am a student interested in your paper (Understanding IoT Security from a Market-Scale Perspective), from which I learned a lot.

In particular, I am interested in Section 6 part, Cryptographic API misuse analysis. I would appreciate it if you would share the detailed results of the experiment (detection results files, timeout setting, runs in a single process or multiple processes)? I also noticed that non-Iot apps are not listed in the repo, and it would be great if this could also be listed for further research.

I noticed a mistake made in the paper. In table 4, the rule number mapping puts Rule 2 and 10 together. Same mapping is also public in the repo.

But according to the Cryptoguard source code, Rule 2 in the paper should be mapped to the Rule 3 in the tool. Hope this can help you to avoid misunderstanding.