{"id":"https://openalex.org/W2107593769","doi":null,"title":"AUTOMATIC VULNERABILITY DETECTION USING STATIC SOURCE CODE ANALYSIS","display_name":"AUTOMATIC VULNERABILITY DETECTION USING STATIC SOURCE CODE ANALYSIS","publication_year":2005,"publication_date":"2005-01-01","ids":{"openalex":"https://openalex.org/W2107593769","mag":"2107593769"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.60.9646","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.60.9646","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://gcc.vulncheck.org/sotirov05automatic.pdf","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084693948","display_name":"Alexander Ivanov Sotirov","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Alexander Ivanov Sotirov","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5084693948"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8739,"has_fulltext":false,"cited_by_count":40,"citation_normalized_percentile":{"value":0.80149319,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7621999979019165,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7621999979019165,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.20970000326633453,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.009499999694526196,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability-detection","display_name":"vulnerability detection","score":0.8980000019073486},{"id":"https://openalex.org/keywords/static-source-code-analysis","display_name":"static source code analysis","score":0.9259999990463257},{"id":"https://openalex.org/keywords/c-programs","display_name":"C programs","score":0.8769999742507935},{"id":"https://openalex.org/keywords/taint-analysis","display_name":"taint analysis","score":0.9990000128746033},{"id":"https://openalex.org/keywords/input-validation","display_name":"input validation","score":0.9399999976158142},{"id":"https://openalex.org/keywords/vulnerability-classification","display_name":"vulnerability classification","score":0.8119999766349792},{"id":"https://openalex.org/keywords/gnu-c-compiler","display_name":"GNU C compiler","score":0.9340000152587891}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6089569926261902},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.46242183446884155},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.45980775356292725},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4475008547306061},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3550857901573181},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.20645952224731445},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.18721410632133484}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.60.9646","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.60.9646","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://gcc.vulncheck.org/sotirov05automatic.pdf","raw_type":"text"},{"id":"mag:2107593769","doi":null,"is_oa":false,"landing_page_url":"https://www.ida.liu.se/%7ETDDC90/literature/papers/sotirov.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W107748845","https://openalex.org/W111098712","https://openalex.org/W1565113942","https://openalex.org/W1579850852","https://openalex.org/W1978223246","https://openalex.org/W1982205631","https://openalex.org/W2006471246","https://openalex.org/W2010452422","https://openalex.org/W2047764386","https://openalex.org/W2055084740","https://openalex.org/W2066859698","https://openalex.org/W2102890180","https://openalex.org/W2119736157","https://openalex.org/W2126160338","https://openalex.org/W2137952932","https://openalex.org/W2144552646","https://openalex.org/W2281932119","https://openalex.org/W2338274756"],"related_works":["https://openalex.org/W2972987610","https://openalex.org/W2075496846","https://openalex.org/W3033053557","https://openalex.org/W7099520309","https://openalex.org/W2394062615","https://openalex.org/W1761184020","https://openalex.org/W2364129231","https://openalex.org/W6958475348","https://openalex.org/W2317635668","https://openalex.org/W7163172569"],"abstract_inverted_index":{"We":[0,40,58,97,120,136],"present":[1,63,121,151],"a":[2,18,23,33,42,49,89,94,99,142,147,155],"static":[3,100],"source":[4,55,101],"analysis":[5,102],"technique":[6,34],"for":[7,37],"vulnerability":[8,26,50,143],"detection":[9,27,144],"in":[10,64,88,146],"C":[11,134],"programs.":[12],"Our":[13],"approach":[14,127],"is":[15,70,79,86,104],"based":[16,52],"on":[17,53],"combination":[19],"of":[20,45,125,140,158,160],"taint":[21],"analysis,":[22],"well":[24],"known":[25],"method,":[28],"and":[29,47,82,114],"value":[30],"range":[31],"propagation,":[32],"previously":[35],"used":[36,87],"compiler":[38],"optimizations.":[39],"examine":[41],"sample":[43],"set":[44],"vulnerabilities":[46],"develop":[48,98],"classification":[51],"common":[54,61],"code":[56],"patterns.":[57],"identify":[59,107],"three":[60,112],"characteristics":[62,113],"most":[65],"software":[66],"vulnerabilities:":[67],"one,":[68],"data":[69,78,85],"read":[71],"from":[72],"an":[73,122,129],"untrusted":[74,77,84],"source,":[75],"two,":[76],"insufficiently":[80],"validated,":[81],"three,":[83],"potentially":[90],"vulnerable":[91],"function":[92],"or":[93],"language":[95],"construct.":[96],"that":[103],"able":[105],"to":[106,131],"execution":[108],"paths":[109],"with":[110],"these":[111],"report":[115],"them":[116],"as":[117,128],"potential":[118],"vulnerabilities.":[119],"efficient":[123],"implementation":[124],"our":[126,161],"extension":[130],"the":[132,138],"GNU":[133],"Compiler.":[135],"discuss":[137],"benefits":[139],"integrating":[141],"system":[145],"compiler.":[148],"Finally,":[149],"we":[150],"experimental":[152],"results":[153],"indicating":[154],"high":[156],"level":[157],"accuracy":[159],"technique.":[162]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":9},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":4},{"year":2012,"cited_by_count":4}],"updated_date":"2026-11-03T10:50:19.383937","created_date":"2016-06-24T00:00:00"}