{"id":"https://openalex.org/W2170346187","doi":null,"title":"Automated Analysis of Security APIs","display_name":"Automated Analysis of Security APIs","publication_year":2005,"publication_date":"2005-01-01","ids":{"openalex":"https://openalex.org/W2170346187","mag":"2170346187"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.131.7559","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.131.7559","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://dspace.mit.edu/bitstream/1721.1/33295/1/62278941.pdf","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5081041199","display_name":"Amerson H. Lin","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Amerson Lin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5081041199"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.3751,"has_fulltext":true,"cited_by_count":36,"citation_normalized_percentile":{"value":0.92884041,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.0024999999441206455,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.001500000013038516,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-apis","display_name":"security APIs","score":0.8349999785423279},{"id":"https://openalex.org/keywords/trusted-platform-module","display_name":"Trusted Platform Module","score":0.8889999985694885},{"id":"https://openalex.org/keywords/hardware-security-modules","display_name":"hardware security modules","score":0.7239999771118164},{"id":"https://openalex.org/keywords/theorem-proving","display_name":"theorem proving","score":0.6800000071525574},{"id":"https://openalex.org/keywords/model-finding","display_name":"model finding","score":0.6880000233650208},{"id":"https://openalex.org/keywords/alloys","display_name":"alloys","score":0.6600000262260437},{"id":"https://openalex.org/keywords/otter","display_name":"otter","score":0.9409999847412109}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6756699085235596},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.574341356754303},{"id":"https://openalex.org/C2779110517","wikidata":"https://www.wikidata.org/wiki/Q1240788","display_name":"Supervisor","level":2,"score":0.46309375762939453},{"id":"https://openalex.org/C206880738","wikidata":"https://www.wikidata.org/wiki/Q431667","display_name":"Automated theorem proving","level":2,"score":0.44766709208488464},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.4458523392677307},{"id":"https://openalex.org/C99613125","wikidata":"https://www.wikidata.org/wiki/Q165194","display_name":"Application programming interface","level":2,"score":0.4321167469024658},{"id":"https://openalex.org/C2781140086","wikidata":"https://www.wikidata.org/wiki/Q557945","display_name":"Confusion","level":2,"score":0.42771488428115845},{"id":"https://openalex.org/C2776831232","wikidata":"https://www.wikidata.org/wiki/Q966812","display_name":"Trusted Computing","level":2,"score":0.42673027515411377},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2120985984802246},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C11171543","wikidata":"https://www.wikidata.org/wiki/Q41630","display_name":"Psychoanalysis","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.131.7559","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.131.7559","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://dspace.mit.edu/bitstream/1721.1/33295/1/62278941.pdf","raw_type":"text"},{"id":"mag:2170346187","doi":null,"is_oa":false,"landing_page_url":"https://dspace.mit.edu/handle/1721.1/33295","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W100521642","https://openalex.org/W1483231516","https://openalex.org/W1518401470","https://openalex.org/W1552695147","https://openalex.org/W1555053410","https://openalex.org/W1597184376","https://openalex.org/W1602698166","https://openalex.org/W1983629106","https://openalex.org/W1991374982","https://openalex.org/W2010939995","https://openalex.org/W2012170877","https://openalex.org/W2029693536","https://openalex.org/W2081136524","https://openalex.org/W2100738443","https://openalex.org/W2105060599","https://openalex.org/W2109266092","https://openalex.org/W2169908972","https://openalex.org/W2176300081"],"related_works":["https://openalex.org/W7096396659","https://openalex.org/W7097944716","https://openalex.org/W1554009167","https://openalex.org/W1518401470","https://openalex.org/W6929316071","https://openalex.org/W48585141","https://openalex.org/W7100223630","https://openalex.org/W2783610348","https://openalex.org/W1563490251","https://openalex.org/W2237653119"],"abstract_inverted_index":{"Attacks":[0],"on":[1,41],"security":[2,11,43],"systems":[3],"within":[4],"the":[5,60,65,84,90,151],"past":[6],"decade":[7],"have":[8],"revealed":[9],"that":[10,127,147],"Application":[12],"Programming":[13],"Interfaces":[14],"(APIs)":[15],"expose":[16],"a":[17,27,102,106,133,139],"large":[18,47],"and":[19,38,72,97,104,113,143],"real":[20,142],"attack":[21],"surface":[22],"but":[23,129],"remain":[24],"to":[25,77,88,108,114,124],"be":[26],"relatively":[28],"unexplored":[29],"problem.":[30],"In":[31,80],"2000,":[32],"Bond":[33],"et":[34],"al.":[35],"discovered":[36,149],"APIchaining":[37,111],"type-confusion":[39],"attacks":[40,53,112,126],"hardware":[42],"modules":[44],"used":[45,87,100],"in":[46],"banking":[48],"systems.":[49],"While":[50],"these":[51,69],"first":[52],"were":[54,148],"found":[55],"through":[56],"human":[57],"inspection":[58],"of":[59,67,141],"API":[61,96,116],"specifications,":[62],"we":[63,82,86,99,120,137],"take":[64],"approach":[66],"modeling":[68],"APIs":[70],"formally":[71],"using":[73],"an":[74],"automated-reasoning":[75],"tool":[76],"discover":[78],"attacks.":[79],"particular,":[81],"discuss":[83],"techniques":[85,123],"model":[89],"Trusted":[91],"Platform":[92],"Module":[93],"(TPM)":[94],"vl.2":[95],"how":[98],"OTTER,":[101],"theorem-prover,":[103],"ALLOY,":[105,119],"model-finder,":[107],"find":[109],"both":[110],"manage":[115],"complexity.":[117],"Using":[118],"also":[121],"developed":[122],"capture":[125],"weaken,":[128],"not":[130],"fully":[131],"compromise,":[132],"system's":[134],"security.":[135],"Finally,":[136],"demonstrate":[138],"number":[140],"\"near-miss":[144],"\"":[145],"vulnerabilities":[146],"against":[150],"TPM.":[152]},"counts_by_year":[{"year":2018,"cited_by_count":2},{"year":2016,"cited_by_count":1},{"year":2014,"cited_by_count":4},{"year":2013,"cited_by_count":7},{"year":2012,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2016-06-24T00:00:00"}