{"id":"https://openalex.org/W3133372228","doi":"https://doi.org/10.1109/icse43902.2021.00054","title":"Why Don\u2019t Developers Detect Improper Input Validation? '; DROP TABLE Papers; --","display_name":"Why Don\u2019t Developers Detect Improper Input Validation? '; DROP TABLE Papers; --","publication_year":2021,"publication_date":"2021-05-01","ids":{"openalex":"https://openalex.org/W3133372228","doi":"https://doi.org/10.1109/icse43902.2021.00054","mag":"3133372228"},"language":"en","primary_location":{"id":"doi:10.1109/icse43902.2021.00054","doi":"https://doi.org/10.1109/icse43902.2021.00054","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icse43902.2021.00054","pdf_url":null,"source":{"id":"https://openalex.org/S4210203175","display_name":"ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion)","issn_l":"0270-5257","issn":["0270-5257","1558-1225"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE/ACM 43rd International Conference on Software Engineering (ICSE)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2102.06251","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109501726","display_name":"Larissa Braz","orcid":"https://orcid.org/0000-0003-2104-788X","observed_orcids":["https://orcid.org/0000-0003-2104-788X"]},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Larissa Braz","raw_affiliation_strings":["University of Zurich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Zurich","institution_ids":["https://openalex.org/I202697423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010304086","display_name":"Enrico Fregnan","orcid":"https://orcid.org/0000-0002-6897-7665","observed_orcids":["https://orcid.org/0000-0002-6897-7665"]},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Enrico Fregnan","raw_affiliation_strings":["University of Zurich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Zurich","institution_ids":["https://openalex.org/I202697423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074378564","display_name":"G\u00fcl \u00c7al\u0131kl\u0131","orcid":"https://orcid.org/0000-0003-4578-1747","observed_orcids":["https://orcid.org/0000-0003-4578-1747"]},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Gul Calikli","raw_affiliation_strings":["University of Zurich, Zurich, Switzerland","University of zurich;"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I202697423"]},{"raw_affiliation_string":"University of zurich;","institution_ids":["https://openalex.org/I202697423"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082720005","display_name":"Alberto Bacchelli","orcid":"https://orcid.org/0000-0003-0193-6823","observed_orcids":["https://orcid.org/0000-0003-0193-6823"]},"institutions":[{"id":"https://openalex.org/I202697423","display_name":"University of Zurich","ror":"https://ror.org/02crff812","country_code":"CH","type":"education","lineage":["https://openalex.org/I202697423"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Alberto Bacchelli","raw_affiliation_strings":["University of Zurich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Zurich","institution_ids":["https://openalex.org/I202697423"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I202697423"],"apc_list":null,"apc_paid":null,"fwci":0.1683,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.30051946,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":93},"biblio":{"volume":null,"issue":null,"first_page":"499","last_page":"511"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9833999872207642,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9833999872207642,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.0066999997943639755,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.002899999963119626,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability-detection","display_name":"vulnerability detection","score":0.8669999837875366},{"id":"https://openalex.org/keywords/code-review","display_name":"code review","score":0.7850000262260437},{"id":"https://openalex.org/keywords/secure-software-development","display_name":"secure software development","score":0.7770000100135803},{"id":"https://openalex.org/keywords/online-experiments","display_name":"online experiments","score":0.5410000085830688},{"id":"https://openalex.org/keywords/sql-injection","display_name":"SQL injection","score":0.49900001287460327}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7970778346061707},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.6614941954612732},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6478732824325562},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6438807845115662},{"id":"https://openalex.org/C45235069","wikidata":"https://www.wikidata.org/wiki/Q278425","display_name":"Table (database)","level":2,"score":0.6285058259963989},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.49642497301101685},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.33322855830192566},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2116313874721527},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1779840886592865},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.11072182655334473},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1109/icse43902.2021.00054","doi":"https://doi.org/10.1109/icse43902.2021.00054","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icse43902.2021.00054","pdf_url":null,"source":{"id":"https://openalex.org/S4210203175","display_name":"ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion)","issn_l":"0270-5257","issn":["0270-5257","1558-1225"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE/ACM 43rd International Conference on Software Engineering (ICSE)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2102.06251","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2102.06251","pdf_url":"https://arxiv.org/pdf/2102.06251","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:3133372228","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2102.06251.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"pmh:oai:eprints.gla.ac.uk:258205","doi":null,"is_oa":true,"landing_page_url":"https://eprints.gla.ac.uk/258205/","pdf_url":null,"source":{"id":"https://openalex.org/S4210235606","display_name":"ENLIGHTEN (Jurnal Bimbingan dan Konseling Islam)","issn_l":"2622-8912","issn":["2622-8912","2622-8920"],"is_oa":true,"is_in_doaj":true,"is_core":false,"listed_in":["doaj"],"host_organization":"https://openalex.org/I4405259220","host_organization_name":"Institut Agama Islam Negeri Langsa","host_organization_lineage":["https://openalex.org/I4405259220"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference Proceedings"},{"id":"doi:10.48550/arxiv.2102.06251","doi":"https://doi.org/10.48550/arxiv.2102.06251","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2102.06251","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2102.06251","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2102.06251","pdf_url":"https://arxiv.org/pdf/2102.06251","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G5035863935","display_name":"Data-driven Contemporary Code Review","funder_award_id":"170529","funder_id":"https://openalex.org/F4320320924","funder_display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung"},{"id":"https://openalex.org/G5690535955","display_name":"Test Code Quality: A New Dimension of Test Code Effectiveness","funder_award_id":"186090","funder_id":"https://openalex.org/F4320320924","funder_display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320320924","display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung","ror":"https://ror.org/00yjd3n13"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3133372228.pdf","grobid_xml":"https://content.openalex.org/works/W3133372228.grobid-xml"},"referenced_works_count":48,"referenced_works":["https://openalex.org/W211648214","https://openalex.org/W1628063087","https://openalex.org/W1967446222","https://openalex.org/W1968335087","https://openalex.org/W1982044027","https://openalex.org/W1985408088","https://openalex.org/W1986222079","https://openalex.org/W1993139624","https://openalex.org/W2019257047","https://openalex.org/W2041174350","https://openalex.org/W2042100734","https://openalex.org/W2043837581","https://openalex.org/W2049736950","https://openalex.org/W2087484885","https://openalex.org/W2091990486","https://openalex.org/W2099183630","https://openalex.org/W2103269690","https://openalex.org/W2104858895","https://openalex.org/W2119970901","https://openalex.org/W2144220405","https://openalex.org/W2144969491","https://openalex.org/W2148854374","https://openalex.org/W2151020819","https://openalex.org/W2163049969","https://openalex.org/W2169232226","https://openalex.org/W2221206962","https://openalex.org/W2231327593","https://openalex.org/W2563377808","https://openalex.org/W2622958941","https://openalex.org/W2755688988","https://openalex.org/W2763622888","https://openalex.org/W2808429234","https://openalex.org/W2809528855","https://openalex.org/W2889126501","https://openalex.org/W2898188678","https://openalex.org/W2907904533","https://openalex.org/W2940466285","https://openalex.org/W2954272926","https://openalex.org/W2955656327","https://openalex.org/W3009108981","https://openalex.org/W3027501551","https://openalex.org/W3105794999","https://openalex.org/W3161683655","https://openalex.org/W4213332272","https://openalex.org/W4235786747","https://openalex.org/W4299818415","https://openalex.org/W4393875368","https://openalex.org/W6967372055"],"related_works":["https://openalex.org/W3162923072","https://openalex.org/W3161683655","https://openalex.org/W2030874012","https://openalex.org/W2779307146","https://openalex.org/W1948712562","https://openalex.org/W3142211478","https://openalex.org/W7100741081","https://openalex.org/W2907108173","https://openalex.org/W7099288613","https://openalex.org/W2330967414"],"abstract_inverted_index":{"Improper":[0],"Input":[1],"Validation":[2],"(IIV)":[3],"is":[4,22,52],"a":[5,11,94,106,127],"software":[6,64,84],"vulnerability":[7,116,136],"that":[8,90,105],"occurs":[9],"when":[10,121],"system":[12],"does":[13],"not":[14,113,133],"safely":[15],"handle":[16],"input":[17],"data.":[18],"Even":[19],"though":[20],"IIV":[21,45,102],"easy":[23],"to":[24,39,54,58],"detect":[25,44,134],"and":[26,46,104,162],"fix,":[27],"it":[28,120],"still":[29],"commonly":[30],"happens":[31],"in":[32,61],"practice.":[33],"In":[34],"this":[35],"paper,":[36],"we":[37],"study":[38],"what":[40],"extent":[41],"developers":[42,60,110],"can":[43],"investigate":[47],"underlying":[48],"reasons.":[49],"This":[50],"knowledge":[51],"essential":[53],"better":[55],"understand":[56],"how":[57],"support":[59],"creating":[62],"secure":[63],"systems.":[65],"We":[66],"conduct":[67],"an":[68],"online":[69],"experiment":[70],"with":[71,147],"146":[72],"participants,":[73],"of":[74,82,93,101,109,129,157],"which":[75,148],"105":[76],"report":[77],"at":[78],"least":[79],"three":[80],"years":[81],"professional":[83],"development":[85],"experience.":[86],"Our":[87],"results":[88],"show":[89],"the":[91,99,115,135,139,145,149,155],"existence":[92],"visible":[95],"attack":[96],"scenario":[97],"facilitates":[98],"detection":[100,156],"vulnerabilities":[103],"significant":[107],"portion":[108],"who":[111],"did":[112],"find":[114],"initially":[117],"could":[118,132],"identify":[119],"warned":[122],"about":[123],"its":[124],"existence.":[125],"Yet,":[126],"total":[128],"60":[130],"participants":[131,150],"even":[137],"after":[138],"warning.":[140],"Other":[141],"factors,":[142],"such":[143],"as":[144],"frequency":[146],"perform":[151],"code":[152],"reviews,":[153],"influence":[154],"IIV.":[158],"Preprint:":[159],"https://arxiv.org/abs/2102.06251.":[160],"Data":[161],"materials:":[163],"https://doi.org/10.5281/zenodo.3996696.":[164]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2021-03-01T00:00:00"}