一句话：系统分析 22 起 IoT 故障，总结跨领域且长期持续的故障主题，并提出故障感知开发生命周期研究议程。
随着 IoT 系统获得更多责任与自主性，其收益与风险同步上升，如何在市场压力下安全可靠地开发高风险软件密集型系统成为挑战。作者系统分析了近期 IoT 故障，收集并分析 22 篇新闻报道，考察故障来源、影响与修复策略。结果显示，故障趋势既存在于不同应用领域内部，也跨越应用领域，且故障主题随时间持续存在。为缓解这些趋势，论文提出面向 IoT 的故障感知软件开发生命周期研究议程，包括故障百科、系统事后复盘的实证基础，以及配套自动化工具。
As IoT systems are given more responsibility and autonomy, they offer greater benefits, but also carry greater risks. We believe this trend invigorates an old challenge of software engineering: how to develop high-risk software-intensive systems safely and securely under market pressures? As a first step, we conducted a systematic analysis of recent IoT failures to identify engineering challenges. We collected and analyzed 22 news reports and studied the sources, impacts, and repair strategies of failures in IoT systems. We observed failure trends both within and across application domains. We also observed that failure themes have persisted over time. To alleviate these trends, we outline a research agenda toward a Failure-Aware Software Development Life Cycle for IoT development. We propose an encyclopedia of failures and an empirical basis for system postmortems, complemented by appropriate automated tools.