{"id":"https://openalex.org/W7039640343","doi":null,"title":"Measurement and Development for Automated Secure Coding Solutions","display_name":"Measurement and Development for Automated Secure Coding Solutions","publication_year":2024,"publication_date":"2024-09-09","ids":{"openalex":"https://openalex.org/W7039640343"},"language":"en","primary_location":{"id":"pmh:oai:vtechworks.lib.vt.edu:10919/121100","doi":null,"is_oa":true,"landing_page_url":"https://hdl.handle.net/10919/121100","pdf_url":"https://vtechworks.lib.vt.edu/bitstreams/6ce686ff-99bb-4f25-a55c-26d4fc38df89/download","source":{"id":"https://openalex.org/S4306400248","display_name":"VTechWorks (Virginia Tech)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I859038795","host_organization_name":"Virginia Tech","host_organization_lineage":["https://openalex.org/I859038795"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dissertation"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://vtechworks.lib.vt.edu/bitstreams/6ce686ff-99bb-4f25-a55c-26d4fc38df89/download","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047303372","display_name":"Miles Frantz","orcid":"https://orcid.org/0000-0002-7329-6979","observed_orcids":["https://orcid.org/0000-0002-7329-6979"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Frantz, Miles Eugene","raw_affiliation_strings":["Computer Science , Dr. Taejoong Chung from the Department of Computer Science , Dr"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science , Dr. Taejoong Chung from the Department of Computer Science , Dr","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5047303372"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.41769999265670776,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.41769999265670776,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.27559998631477356,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.15330000221729279,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/static-code-analysis","display_name":"static code analysis","score":0.9710000157356262},{"id":"https://openalex.org/keywords/vulnerability-detection","display_name":"vulnerability detection","score":0.5870000123977661},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.8569999933242798},{"id":"https://openalex.org/keywords/chatgpt","display_name":"ChatGPT","score":0.7559999823570251},{"id":"https://openalex.org/keywords/zero-shot-prompting","display_name":"zero-shot prompting","score":0.6650000214576721},{"id":"https://openalex.org/keywords/common-weakness-enumeration","display_name":"Common Weakness Enumeration","score":0.890999972820282},{"id":"https://openalex.org/keywords/python","display_name":"Python","score":0.6129999756813049},{"id":"https://openalex.org/keywords/cryptographic-codes","display_name":"cryptographic codes","score":0.5320000052452087},{"id":"https://openalex.org/keywords/constant-propagation","display_name":"constant propagation","score":0.8230000138282776},{"id":"https://openalex.org/keywords/data-flow-analysis","display_name":"data flow analysis","score":0.7570000290870667},{"id":"https://openalex.org/keywords/bandits","display_name":"bandits","score":0.6539999842643738},{"id":"https://openalex.org/keywords/semgrep","display_name":"Semgrep","score":0.9929999709129333}],"concepts":[{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.7843000292778015},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7570000290870667},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.7246999740600586},{"id":"https://openalex.org/C519991488","wikidata":"https://www.wikidata.org/wiki/Q28865","display_name":"Python (programming language)","level":2,"score":0.6712999939918518},{"id":"https://openalex.org/C51929080","wikidata":"https://www.wikidata.org/wiki/Q2425187","display_name":"Codebase","level":3,"score":0.5522000193595886},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.535099983215332},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.49459999799728394},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.46799999475479126},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.4194999933242798},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.37450000643730164},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.36890000104904175},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3578000068664551},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3402999937534332},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3319000005722046},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.3312999904155731},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.32899999618530273},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.32839998602867126},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.32510000467300415},{"id":"https://openalex.org/C147494362","wikidata":"https://www.wikidata.org/wiki/Q2078905","display_name":"Troubleshooting","level":2,"score":0.32010000944137573},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.3052000105381012},{"id":"https://openalex.org/C199519371","wikidata":"https://www.wikidata.org/wiki/Q942695","display_name":"Source lines of code","level":3,"score":0.30079999566078186},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.26989999413490295},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2628999948501587},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2540000081062317},{"id":"https://openalex.org/C63000827","wikidata":"https://www.wikidata.org/wiki/Q3080428","display_name":"Software portability","level":2,"score":0.24779999256134033},{"id":"https://openalex.org/C174183944","wikidata":"https://www.wikidata.org/wiki/Q334661","display_name":"MIT License","level":3,"score":0.24120000004768372},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.24060000479221344},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.2386000007390976},{"id":"https://openalex.org/C63406617","wikidata":"https://www.wikidata.org/wiki/Q5266714","display_name":"Development testing","level":5,"score":0.23669999837875366},{"id":"https://openalex.org/C37789001","wikidata":"https://www.wikidata.org/wiki/Q782543","display_name":"Graphical user interface","level":2,"score":0.23639999330043793},{"id":"https://openalex.org/C154446701","wikidata":"https://www.wikidata.org/wiki/Q4209964","display_name":"Fagan inspection","level":2,"score":0.2362000048160553},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.23080000281333923},{"id":"https://openalex.org/C150292731","wikidata":"https://www.wikidata.org/wiki/Q1342704","display_name":"Code review","level":5,"score":0.2094999998807907},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.2092999964952469},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.20900000631809235},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.2071000039577484},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2012999951839447},{"id":"https://openalex.org/C99613125","wikidata":"https://www.wikidata.org/wiki/Q165194","display_name":"Application programming interface","level":2,"score":0.20090000331401825},{"id":"https://openalex.org/C20574231","wikidata":"https://www.wikidata.org/wiki/Q844605","display_name":"Backward compatibility","level":2,"score":0.2003999948501587},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.20010000467300415}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:vtechworks.lib.vt.edu:10919/121100","doi":null,"is_oa":true,"landing_page_url":"https://hdl.handle.net/10919/121100","pdf_url":"https://vtechworks.lib.vt.edu/bitstreams/6ce686ff-99bb-4f25-a55c-26d4fc38df89/download","source":{"id":"https://openalex.org/S4306400248","display_name":"VTechWorks (Virginia Tech)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I859038795","host_organization_name":"Virginia Tech","host_organization_lineage":["https://openalex.org/I859038795"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dissertation"}],"best_oa_location":{"id":"pmh:oai:vtechworks.lib.vt.edu:10919/121100","doi":null,"is_oa":true,"landing_page_url":"https://hdl.handle.net/10919/121100","pdf_url":"https://vtechworks.lib.vt.edu/bitstreams/6ce686ff-99bb-4f25-a55c-26d4fc38df89/download","source":{"id":"https://openalex.org/S4306400248","display_name":"VTechWorks (Virginia Tech)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I859038795","host_organization_name":"Virginia Tech","host_organization_lineage":["https://openalex.org/I859038795"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dissertation"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G2787094328","display_name":"SaTC: TTP: Medium: Collaborative: Deployment-quality and Accessible Solutions for Cryptography Code Development","funder_award_id":"1929701","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7039640343.pdf","grobid_xml":"https://content.openalex.org/works/W7039640343.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W1978947015","https://openalex.org/W1991796520","https://openalex.org/W1994698959","https://openalex.org/W2004633100","https://openalex.org/W2081773912","https://openalex.org/W2093721629","https://openalex.org/W2129065328","https://openalex.org/W2154122606","https://openalex.org/W2624094989","https://openalex.org/W2759023773","https://openalex.org/W2920909080","https://openalex.org/W2942625968","https://openalex.org/W2954685021","https://openalex.org/W2985320478","https://openalex.org/W2986475552","https://openalex.org/W3025600953","https://openalex.org/W3030163527","https://openalex.org/W3037099619","https://openalex.org/W3086100325","https://openalex.org/W3135096732","https://openalex.org/W3153702491","https://openalex.org/W3198867963","https://openalex.org/W4200634422","https://openalex.org/W4233410239","https://openalex.org/W4285490437","https://openalex.org/W4394769548"],"related_works":["https://openalex.org/W7154981388","https://openalex.org/W7127934189","https://openalex.org/W4412373972","https://openalex.org/W7213306442","https://openalex.org/W4401307063","https://openalex.org/W4403411676","https://openalex.org/W7163756312","https://openalex.org/W6979235152","https://openalex.org/W7168173661","https://openalex.org/W7117122399"],"abstract_inverted_index":{"With":[0,176],"the":[1,27,30,36,61,70,85,88,122,126,152,162,174,231,271,276,298,309,316,367,370,391,432,439],"rise":[2,11,123],"of":[3,29,128,194,288,311],"development":[4],"efforts,":[5],"there":[6,157],"has":[7,282,362],"also":[8],"been":[9,20,120],"a":[10,143,148,159,237,247,286,363,420],"in":[12,60,161,250],"source":[13,54,101,164,253,280],"code":[14,55,102,165,281],"vulnerabilities.":[15],"Advanced":[16],"security":[17],"tools":[18,80,95,290,302,386],"have":[19,119,390],"created":[21,147,315],"to":[22,56,67,81,154,186,204,227,241,246,267,292,389,403,424],"identify":[23,57,82],"these":[24],"vulnerabilities":[25,37,59,71,83],"throughout":[26],"lifetime":[28],"developer's":[31],"ecosystem":[32],"and":[33,76,139,166,190,214,285,305,324,340,351,395,419,452,456],"afterward,":[34],"before":[35],"are":[38,108,413],"exposed.":[39],"One":[40],"such":[41,410],"popular":[42],"method":[43],"is":[44,158,210],"Static":[45],"Code":[46],"Analysis":[47],"(Code":[48],"Analysis)":[49],"(SCA),":[50],"which":[51,319],"scans":[52],"developers'":[53],"potential":[58],"code.":[62,89,254],"My":[63],"Ph.D.":[64],"work":[65],"aims":[66],"help":[68],"reduce":[69],"exposed":[72],"by":[73,103],"YIELD,":[74],"ENHANCE,":[75],"EVALUATE":[77],"(EYE)":[78],"SCA":[79,239,260,289,301,382,435],"while":[84],"developer":[86,401],"writes":[87],"We":[90,294],"first":[91],"look":[92,379],"into":[93,270],"evaluating":[94],"that":[96,224],"support":[97],"developers":[98],"with":[99,109,125,297,342,369,374,438],"their":[100,405],"determining":[104],"how":[105,206,229],"accurate":[106],"they":[107],"identifying":[110],"vulnerability":[111,160,212],"information.":[112],"Large":[113],"Language":[114],"Machine":[115],"Learning":[116],"Model":[117],"(LLM)s":[118],"on":[121,338,366],"recently":[124],"introduction":[127],"Chat":[129],"Generative":[130],"Pre-trained":[131],"Transformer":[132],"(ChatGPT)":[133],"3.5,":[134],"ChatGPT":[135,195],"4.1,":[136],"Google":[137],"Gemini,":[138],"many":[140],"more.":[141],"Using":[142],"common":[144],"framework,":[145],"we":[146,182,235,244,314,331,346,378,398,430],"zero-shot":[149],"prompt":[150],"instructing":[151],"LLM":[153,209],"identify;":[155],"whether":[156],"provided":[163],"what":[167,243],"Common":[168],"Weakness":[169],"Enumeration":[170],"(CWE)":[171],"value":[172],"represents":[173],"vulnerability.":[175],"our":[177,256,312],"Python":[178,259,279,336,356],"cryptographic":[179],"benchmark":[180,317],"PyCryptoBench,":[181,318],"sent":[183],"vulnerable":[184],"samples":[185,201],"four":[187],"different":[188,192,327],"LLMs":[189],"two":[191],"versions":[193],"Application":[196],"Program":[197],"Interface":[198,448],"(API)s.":[199],"The":[200,216,358,384],"allow":[202],"us":[203,226],"measure":[205,228],"reliable":[207],"each":[208,341,343],"at":[211,380],"identification":[213],"defining.":[215],"Chat-":[217],"GPT":[218],"APIs":[219],"include":[220],"multiple":[221],"reproducible":[222,230],"fields":[223],"allowed":[225],"responses":[232],"are.":[233],"Next,":[234,330],"yield":[236],"new":[238],"tool":[240,261,436],"apply":[242],"learned":[245],"current":[248],"gap":[249],"increasingly":[251],"complex":[252],"Cryptolation,":[255],"state-of-the-art":[257],"(SOA)":[258],"uses":[262],"constant":[263],"propagation-supported":[264],"variable":[265],"inference":[266],"obtain":[268],"insight":[269],"data":[272],"flow":[273],"state":[274],"through":[275],"program's":[277],"execution.":[278],"ever-increasing":[283],"complexities":[284],"lack":[287],"compared":[291],"Java.":[293],"compare":[295],"Cryptolation":[296,361],"other":[299],"SOA":[300,385,433],"Bandit,":[303],"Semgrep,":[304],"Dlint.":[306],"To":[307,427],"verify":[308],"Precision":[310,365,373],"tool,":[313],"contains":[320],"1,836":[321],"test":[322],"cases":[323],"encompasses":[325],"five":[326],"language":[328],"features.":[329],"crawled":[332],"over":[333,353],"1,000":[334],"cryptographic-related":[335,355,375],"projects":[337],"GitHub":[339],"tool.":[344],"Finally,":[345,377],"reviewed":[347],"all":[348],"PyCryptoBench":[349],"results":[350,359],"sampled":[352],"10,000":[354],"projects.":[357,376],"reveal":[360],"100%":[364],"benchmark,":[368],"second":[371],"highest":[372,392],"enhancing":[381],"tools.":[383,411],"already":[387],"compete":[388],"Precision,":[393],"Recall,":[394],"Accuracy.":[396],"However,":[397],"examine":[399],"several":[400],"surveys":[402],"determine":[404],"reasons":[406],"for":[407],"not":[408],"adopting":[409],"These":[412],"generally":[414],"better":[415],"aesthetics,":[416],"usability,":[417],"customization,":[418],"low":[421],"effort":[422],"cost":[423],"use":[425],"consistently.":[426],"achieve":[428],"this,":[429],"enhance":[431],"Java":[434],"CryptoGuard":[437],"following:":[440],"integrated":[441],"build":[442],"tools,":[443],"modern":[444],"terminal":[445],"Command":[446],"Line":[447],"(CLI)":[449],"usage,":[450],"customizable":[451],"vendor-specific":[453],"output":[454],"formats,":[455],"no-install":[457],"demos.":[458]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2025-10-10T00:00:00"}