{"id":"https://openalex.org/W4281396629","doi":"https://doi.org/10.1145/3488932.3524054","title":"PacJam","display_name":"PacJam","publication_year":2022,"publication_date":"2022-05-24","ids":{"openalex":"https://openalex.org/W4281396629","doi":"https://doi.org/10.1145/3488932.3524054"},"language":"en","primary_location":{"id":"doi:10.1145/3488932.3524054","doi":"https://doi.org/10.1145/3488932.3524054","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3488932.3524054","pdf_url":null,"source":{"id":"https://openalex.org/S4363609011","display_name":"ACM Asia Conference on Computer and Communications Security (ASIA CCS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015559484","display_name":"Pardis Pashakhanloo","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I79576946","display_name":"University of Pennsylvania","ror":"https://ror.org/00b30xv10","country_code":"US","type":"education","lineage":["https://openalex.org/I79576946"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Pardis Pashakhanloo","raw_affiliation_strings":["University of Pennsylvania, Philadelphia, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pennsylvania, Philadelphia, PA, USA","institution_ids":["https://openalex.org/I79576946"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071486684","display_name":"Aravind Machiry","orcid":"https://orcid.org/0000-0001-5124-6818","observed_orcids":["https://orcid.org/0000-0001-5124-6818"]},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aravind Machiry","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038165093","display_name":"Hyon\u2010Young Choi","orcid":"https://orcid.org/0000-0002-8818-0784","observed_orcids":["https://orcid.org/0000-0002-8818-0784"]},"institutions":[{"id":"https://openalex.org/I79576946","display_name":"University of Pennsylvania","ror":"https://ror.org/00b30xv10","country_code":"US","type":"education","lineage":["https://openalex.org/I79576946"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hyonyoung Choi","raw_affiliation_strings":["University of Pennsylvania, Philadelphia, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pennsylvania, Philadelphia, PA, USA","institution_ids":["https://openalex.org/I79576946"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020034136","display_name":"Anthony Canino","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I79576946","display_name":"University of Pennsylvania","ror":"https://ror.org/00b30xv10","country_code":"US","type":"education","lineage":["https://openalex.org/I79576946"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anthony Canino","raw_affiliation_strings":["University of Pennsylvania, Philadelphia, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pennsylvania, Philadelphia, PA, USA","institution_ids":["https://openalex.org/I79576946"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071661688","display_name":"Kihong Heo","orcid":"https://orcid.org/0000-0003-2671-0142","observed_orcids":["https://orcid.org/0000-0003-2671-0142"]},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Kihong Heo","raw_affiliation_strings":["KAIST, Daejeon, South Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KAIST, Daejeon, South Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030456600","display_name":"Insup Lee","orcid":"https://orcid.org/0000-0003-2672-1132","observed_orcids":["https://orcid.org/0000-0003-2672-1132","https://orcid.org/0000-0002-9822-9860"]},"institutions":[{"id":"https://openalex.org/I79576946","display_name":"University of Pennsylvania","ror":"https://ror.org/00b30xv10","country_code":"US","type":"education","lineage":["https://openalex.org/I79576946"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Insup Lee","raw_affiliation_strings":["University of Pennsylvania, Philadelphia, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pennsylvania, Philadelphia, PA, USA","institution_ids":["https://openalex.org/I79576946"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075879790","display_name":"Mayur Naik","orcid":"https://orcid.org/0000-0003-1348-8618","observed_orcids":["https://orcid.org/0000-0003-1348-8618"]},"institutions":[{"id":"https://openalex.org/I79576946","display_name":"University of Pennsylvania","ror":"https://ror.org/00b30xv10","country_code":"US","type":"education","lineage":["https://openalex.org/I79576946"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mayur Naik","raw_affiliation_strings":["University of Pennsylvania, Philadelphia, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pennsylvania, Philadelphia, PA, USA","institution_ids":["https://openalex.org/I79576946"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9108,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.76505283,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"903","last_page":"916"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/package-managers","display_name":"package managers","score":0.6169999837875366},{"id":"https://openalex.org/keywords/dependency-management","display_name":"dependency management","score":0.7419999837875366},{"id":"https://openalex.org/keywords/software-bloat","display_name":"software bloat","score":0.6320000290870667},{"id":"https://openalex.org/keywords/vulnerability-reduction","display_name":"vulnerability reduction","score":0.6179999709129333},{"id":"https://openalex.org/keywords/fallback-mechanisms","display_name":"fallback mechanisms","score":0.5799999833106995},{"id":"https://openalex.org/keywords/attack-surface-reduction","display_name":"attack surface reduction","score":0.8460000157356262},{"id":"https://openalex.org/keywords/linux-applications","display_name":"Linux applications","score":0.753000020980835},{"id":"https://openalex.org/keywords/cve","display_name":"CVE","score":0.4350000023841858},{"id":"https://openalex.org/keywords/gadgets","display_name":"gadgets","score":0.5529999732971191}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7987444400787354},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5825181603431702},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.545758843421936},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.5443964600563049},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4854474663734436},{"id":"https://openalex.org/C146778888","wikidata":"https://www.wikidata.org/wiki/Q836862","display_name":"Installation","level":2,"score":0.4769138991832733},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4523594379425049},{"id":"https://openalex.org/C2779041774","wikidata":"https://www.wikidata.org/wiki/Q650550","display_name":"Loader","level":2,"score":0.44603872299194336},{"id":"https://openalex.org/C2778514511","wikidata":"https://www.wikidata.org/wiki/Q1374194","display_name":"Programmer","level":2,"score":0.4356152415275574},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4336015284061432},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4216906726360321},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4086422324180603},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.22667378187179565},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3488932.3524054","doi":"https://doi.org/10.1145/3488932.3524054","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3488932.3524054","pdf_url":null,"source":{"id":"https://openalex.org/S4363609011","display_name":"ACM Asia Conference on Computer and Communications Security (ASIA CCS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W40327287","https://openalex.org/W1999753800","https://openalex.org/W2073460062","https://openalex.org/W2088628452","https://openalex.org/W2133406853","https://openalex.org/W2297774820","https://openalex.org/W2515891506","https://openalex.org/W2516285678","https://openalex.org/W2734941459","https://openalex.org/W2741175893","https://openalex.org/W2752929869","https://openalex.org/W2766411424","https://openalex.org/W2888445849","https://openalex.org/W2889665541","https://openalex.org/W2891688103","https://openalex.org/W2914982603","https://openalex.org/W2921892740","https://openalex.org/W2948273719","https://openalex.org/W2956875759","https://openalex.org/W2985879431","https://openalex.org/W2991611768","https://openalex.org/W3015291177","https://openalex.org/W3016199683","https://openalex.org/W3106588244","https://openalex.org/W4239813889"],"related_works":["https://openalex.org/W4205677814","https://openalex.org/W4412837230","https://openalex.org/W2785532112","https://openalex.org/W4413680130","https://openalex.org/W2915473299","https://openalex.org/W3217674359","https://openalex.org/W3004911431","https://openalex.org/W7026921655","https://openalex.org/W7097469076","https://openalex.org/W2999970562"],"abstract_inverted_index":{"Real-world":[0],"software":[1,9,30],"is":[2],"usually":[3],"built":[4],"on":[5,114,121,147],"top":[6],"of":[7,64,142,156,162],"other":[8],"provided":[10],"as":[11],"packages":[12,144],"that":[13],"are":[14],"managed":[15],"by":[16,32,75,153],"package":[17],"managers.":[18],"Package":[19],"managers":[20],"facilitate":[21],"code":[22],"reusability":[23],"and":[24,44,61,96,124,158,169],"programmer":[25],"productivity":[26],"but":[27],"incur":[28],"significant":[29],"bloat":[31],"installing":[33],"excessive":[34],"dependent":[35,67],"packages.":[36,68],"This":[37],"dependency":[38],"hell":[39],"increases":[40],"potential":[41],"security":[42],"issues":[43],"hampers":[45],"rapid":[46],"response":[47],"to":[48,89,105,133,173],"newly":[49,108],"discovered":[50,109],"vulnerabilities.":[51],"We":[52,118],"propose":[53],"a":[54,77,134,175],"package-oriented":[55],"debloating":[56,73],"framework,":[57],"PacJam,":[58],"for":[59],"adaptive":[60],"security-aware":[62],"management":[63],"an":[65],"application's":[66,93,116],"PacJam":[69,103,120,139],"improves":[70],"upon":[71],"existing":[72],"techniques":[74],"providing":[76],"configurable":[78],"fallback":[79],"mechanism":[80],"via":[81],"post-deployment":[82],"policies.":[83],"It":[84],"also":[85],"elides":[86],"the":[87,92,115,143,150,171],"need":[88,172],"completely":[90],"specify":[91],"usage":[94],"scenarios":[95],"does":[97],"not":[98],"require":[99],"runtime":[100,167],"support.":[101],"Moreover,":[102],"enables":[104],"rapidly":[106],"mitigate":[107],"vulnerabilities":[110],"with":[111,164],"minimal":[112],"impact":[113],"functionality.":[117],"evaluate":[119],"10":[122],"popular":[123],"diverse":[125],"Linux":[126],"applications":[127],"comprising":[128],"575K-39M":[129],"SLOC":[130],"each.":[131],"Compared":[132],"state-of-the-art":[135],"approach,":[136],"piecewise":[137],"debloating,":[138],"debloats":[140],"66%":[141],"per":[145],"application":[146],"average,":[148],"reducing":[149],"attack":[151],"surface":[152],"removing":[154],"46%":[155],"CVEs":[157],"69%":[159],"(versus":[160],"66%)":[161],"gadgets,":[163],"significantly":[165],"less":[166],"overhead":[168],"without":[170],"install":[174],"custom":[176],"loader.":[177]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2022-05-25T00:00:00"}