{"id":"https://openalex.org/W7204702972","doi":"https://doi.org/10.21015/vtcs.v14i1.2196","title":"Security Vulnerabilities of Eclipse Application Programming Interfaces: An Empirical Analysis","display_name":"Security Vulnerabilities of Eclipse Application Programming Interfaces: An Empirical Analysis","publication_year":2026,"publication_date":"2026-04-19","ids":{"openalex":"https://openalex.org/W7204702972","doi":"https://doi.org/10.21015/vtcs.v14i1.2196"},"language":"en","primary_location":{"id":"doi:10.21015/vtcs.v14i1.2196","doi":"https://doi.org/10.21015/vtcs.v14i1.2196","is_oa":true,"landing_page_url":"https://doi.org/10.21015/vtcs.v14i1.2196","pdf_url":"https://vfast.org/journals/index.php/VTCS/article/download/2196/1850","source":{"id":"https://openalex.org/S4210220089","display_name":"VAWKUM Transactions on Computer Sciences","issn_l":"2308-8168","issn":["2308-8168","2411-6335"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"VAWKUM Transactions on Computer Sciences","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://vfast.org/journals/index.php/VTCS/article/download/2196/1850","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026835695","display_name":"Simon Kawuma","orcid":"https://orcid.org/0000-0001-6988-6418","observed_orcids":["https://orcid.org/0000-0001-6988-6418"]},"institutions":[{"id":"https://openalex.org/I141930137","display_name":"Mbarara University of Science and Technology","ror":"https://ror.org/01bkn5154","country_code":"UG","type":"education","lineage":["https://openalex.org/I141930137"]}],"countries":["UG"],"is_corresponding":false,"raw_author_name":"Simon Kawuma","raw_affiliation_strings":["Department of Software and Informatics Engineering, Mbarara University of Science and Technology, Ugandan"],"raw_orcid":"https://orcid.org/0000-0001-6988-6418","affiliations":[{"raw_affiliation_string":"Department of Software and Informatics Engineering, Mbarara University of Science and Technology, Ugandan","institution_ids":["https://openalex.org/I141930137"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050440001","display_name":"David Sabiiti Bamutura","orcid":"https://orcid.org/0000-0002-5875-9269","observed_orcids":["https://orcid.org/0000-0002-5875-9269"]},"institutions":[{"id":"https://openalex.org/I141930137","display_name":"Mbarara University of Science and Technology","ror":"https://ror.org/01bkn5154","country_code":"UG","type":"education","lineage":["https://openalex.org/I141930137"]}],"countries":["UG"],"is_corresponding":false,"raw_author_name":"David Sabiiti Bamutura","raw_affiliation_strings":["Department of Computer Science, Mbarara University of Science and Technology, Ugandan"],"raw_orcid":"https://orcid.org/0000-0002-5875-9269","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Mbarara University of Science and Technology, Ugandan","institution_ids":["https://openalex.org/I141930137"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087097387","display_name":"Aggrey Obbo","orcid":"https://orcid.org/0000-0003-3444-5369","observed_orcids":["https://orcid.org/0000-0003-3444-5369"]},"institutions":[{"id":"https://openalex.org/I141930137","display_name":"Mbarara University of Science and Technology","ror":"https://ror.org/01bkn5154","country_code":"UG","type":"education","lineage":["https://openalex.org/I141930137"]}],"countries":["UG"],"is_corresponding":false,"raw_author_name":"Aggrey Obbo","raw_affiliation_strings":["Department of Software and Informatics Engineering, Mbarara University of Science and Technology, Ugandan"],"raw_orcid":"https://orcid.org/0000-0003-3444-5369","affiliations":[{"raw_affiliation_string":"Department of Software and Informatics Engineering, Mbarara University of Science and Technology, Ugandan","institution_ids":["https://openalex.org/I141930137"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119073555","display_name":"Moreen Kabarungi","orcid":"https://orcid.org/0009-0007-3454-9180","observed_orcids":["https://orcid.org/0009-0007-3454-9180"]},"institutions":[{"id":"https://openalex.org/I141930137","display_name":"Mbarara University of Science and Technology","ror":"https://ror.org/01bkn5154","country_code":"UG","type":"education","lineage":["https://openalex.org/I141930137"]}],"countries":["UG"],"is_corresponding":false,"raw_author_name":"Moreen Kabarungi","raw_affiliation_strings":["Department of Software and Informatics Engineering, Mbarara University of Science and Technology, Ugandan"],"raw_orcid":"https://orcid.org/0009-0007-3454-9180","affiliations":[{"raw_affiliation_string":"Department of Software and Informatics Engineering, Mbarara University of Science and Technology, Ugandan","institution_ids":["https://openalex.org/I141930137"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092454512","display_name":"Dickson Kalungi","orcid":"https://orcid.org/0009-0008-0198-1759","observed_orcids":["https://orcid.org/0009-0008-0198-1759"]},"institutions":[{"id":"https://openalex.org/I141930137","display_name":"Mbarara University of Science and Technology","ror":"https://ror.org/01bkn5154","country_code":"UG","type":"education","lineage":["https://openalex.org/I141930137"]}],"countries":["UG"],"is_corresponding":false,"raw_author_name":"Kalungi Dickson","raw_affiliation_strings":["Department of Software and Informatics Engineering, Mbarara University of Science and Technology, Ugandan"],"raw_orcid":"https://orcid.org/0009-0008-0198-1759","affiliations":[{"raw_affiliation_string":"Department of Software and Informatics Engineering, Mbarara University of Science and Technology, Ugandan","institution_ids":["https://openalex.org/I141930137"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018350099","display_name":"Mabirizi Vicent","orcid":"https://orcid.org/0000-0001-8990-4003","observed_orcids":["https://orcid.org/0000-0001-8990-4003"]},"institutions":[{"id":"https://openalex.org/I3129482412","display_name":"Kabale University","ror":"https://ror.org/01dn27978","country_code":"UG","type":"education","lineage":["https://openalex.org/I3129482412"]}],"countries":["UG"],"is_corresponding":false,"raw_author_name":"Vicent Mabirizi","raw_affiliation_strings":["Department of Computer Science, Kabale University, Ugandan"],"raw_orcid":"https://orcid.org/0000-0001-8990-4003","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Kabale University, Ugandan","institution_ids":["https://openalex.org/I3129482412"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":"1","first_page":"96","last_page":"109"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.51419997215271,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.51419997215271,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.4246000051498413,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.02290000021457672,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/eclipse-framework","display_name":"Eclipse framework","score":0.9639999866485596},{"id":"https://openalex.org/keywords/application-programming-interfaces","display_name":"application programming interfaces","score":0.7850000262260437},{"id":"https://openalex.org/keywords/security-vulnerabilities","display_name":"security vulnerabilities","score":0.921999990940094},{"id":"https://openalex.org/keywords/public-apis","display_name":"public APIs","score":0.7429999709129333},{"id":"https://openalex.org/keywords/api-security","display_name":"API security","score":0.38199999928474426},{"id":"https://openalex.org/keywords/vulnerability-dataset","display_name":"vulnerability dataset","score":0.42500001192092896}],"concepts":[{"id":"https://openalex.org/C2778505590","wikidata":"https://www.wikidata.org/wiki/Q141022","display_name":"Eclipse","level":2,"score":0.720300018787384},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6765000224113464},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6389999985694885},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.6237000226974487},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.585099995136261},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.49140000343322754},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.444599986076355},{"id":"https://openalex.org/C2776654903","wikidata":"https://www.wikidata.org/wiki/Q2601463","display_name":"SAFER","level":2,"score":0.4259999990463257},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.4115999937057495},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.39730000495910645},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.38929998874664307},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.3725999891757965},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.3684000074863434},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.36169999837875366},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.33709999918937683},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.335999995470047},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.32440000772476196},{"id":"https://openalex.org/C99613125","wikidata":"https://www.wikidata.org/wiki/Q165194","display_name":"Application programming interface","level":2,"score":0.3147999942302704},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.3131999969482422},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.3059999942779541},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.289000004529953},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.2653999924659729},{"id":"https://openalex.org/C13159133","wikidata":"https://www.wikidata.org/wiki/Q365674","display_name":"Security engineering","level":5,"score":0.2581000030040741},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.25769999623298645},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.257099986076355}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.21015/vtcs.v14i1.2196","doi":"https://doi.org/10.21015/vtcs.v14i1.2196","is_oa":true,"landing_page_url":"https://doi.org/10.21015/vtcs.v14i1.2196","pdf_url":"https://vfast.org/journals/index.php/VTCS/article/download/2196/1850","source":{"id":"https://openalex.org/S4210220089","display_name":"VAWKUM Transactions on Computer Sciences","issn_l":"2308-8168","issn":["2308-8168","2411-6335"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"VAWKUM Transactions on Computer Sciences","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.21015/vtcs.v14i1.2196","doi":"https://doi.org/10.21015/vtcs.v14i1.2196","is_oa":true,"landing_page_url":"https://doi.org/10.21015/vtcs.v14i1.2196","pdf_url":"https://vfast.org/journals/index.php/VTCS/article/download/2196/1850","source":{"id":"https://openalex.org/S4210220089","display_name":"VAWKUM Transactions on Computer Sciences","issn_l":"2308-8168","issn":["2308-8168","2411-6335"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"VAWKUM Transactions on Computer Sciences","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320326107","display_name":"Mbarara University of Science and Technology","ror":"https://ror.org/01bkn5154"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204702972.pdf","grobid_xml":"https://content.openalex.org/works/W7204702972.grobid-xml"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W1835550919","https://openalex.org/W1988491145","https://openalex.org/W1993969709","https://openalex.org/W2021893621","https://openalex.org/W2037797835","https://openalex.org/W2132547020","https://openalex.org/W2461864882","https://openalex.org/W2546774877","https://openalex.org/W2733373979","https://openalex.org/W2895056111","https://openalex.org/W2921091142","https://openalex.org/W2924980499","https://openalex.org/W2954469728","https://openalex.org/W2990685757","https://openalex.org/W2995304420","https://openalex.org/W2995340752","https://openalex.org/W3082780329","https://openalex.org/W3110645317","https://openalex.org/W3121596715","https://openalex.org/W4360948905","https://openalex.org/W4384026546","https://openalex.org/W4388502419","https://openalex.org/W4388538015","https://openalex.org/W4398201223","https://openalex.org/W4403318507","https://openalex.org/W4403798883","https://openalex.org/W4407574978","https://openalex.org/W4409052689","https://openalex.org/W4409186792","https://openalex.org/W4411271686","https://openalex.org/W4411336772","https://openalex.org/W4412655970","https://openalex.org/W4415819768","https://openalex.org/W7125703306"],"related_works":["https://openalex.org/W4412655970","https://openalex.org/W7200970083","https://openalex.org/W7125703306","https://openalex.org/W4221140074","https://openalex.org/W4415183080","https://openalex.org/W7024603152","https://openalex.org/W2461864882","https://openalex.org/W4402259192","https://openalex.org/W1008898928","https://openalex.org/W2921091142"],"abstract_inverted_index":{"The":[0,148,160,185],"Eclipse":[1,109,146],"framework":[2,110],"distinguishes":[3],"between":[4],"stable":[5,10],"public":[6,169,194],"APIs":[7,46,86,170,174,195,200],"and":[8,49,67,75,118,155,171,196,233,240],"less":[9],"internal":[11,173,199],"APIs;":[12],"however,":[13],"there":[14],"is":[15,63],"no":[16],"formal":[17],"assurance":[18],"that":[19,33,42,111,175],"these":[20,93],"interfaces":[21,106,239,257],"have":[22],"been":[23,259],"comprehensively":[24],"evaluated":[25],"for":[26,122,229],"security":[27,44,116,183,208,250],"vulnerabilities.":[28,40,209],"Furthermore,":[29,210],"previous":[30],"studies":[31],"revealed":[32],"many":[34],"developers":[35,81],"are":[36,50,57,87,112],"unaware":[37],"of":[38,157,181,193,198,244,255,269],"most":[39],"Applications":[41],"use":[43],"vulnerable":[45],"risk":[47],"failing":[48],"prone":[51],"to":[52,73,91,97,104,119,178,215,248,265],"malicious":[53],"attacks":[54],"if":[55],"vulnerabilities":[56,94,117,218],"not":[58,206],"fixed.":[59],"Security":[60],"vulnerability":[61],"discovery":[62],"a":[64,79,164],"difficult":[65],"process":[66],"takes":[68],"at":[69,221],"least":[70],"3":[71],"years":[72],"discover":[74],"fix":[76],"them.":[77],"As":[78],"result,":[80],"who":[82],"depend":[83],"on":[84,151,189],"affected":[85],"frequently":[88],"compelled":[89],"either":[90],"address":[92],"independently":[95],"or":[96],"discontinue":[98],"their":[99],"use.":[100],"This":[101],"study":[102,161],"aims":[103],"identify":[105],"within":[107],"the":[108,138,153,202,211,245,253,267],"free":[113,180],"from":[114],"known":[115],"recommend":[120],"them":[121],"safer":[123],"adoption":[124],"by":[125,235],"application":[126],"developers.":[127],"To":[128],"achieve":[129],"this":[130],"objective,":[131],"an":[132,242],"empirical":[133],"investigation":[134],"was":[135,219],"conducted":[136],"using":[137],"SonarQube":[139],"static":[140],"analysis":[141,149],"tool":[142],"across":[143,201],"28":[144],"major":[145],"releases.":[147],"focused":[150],"determining":[152],"presence":[154],"distribution":[156],"vulnerability-free":[158,256],"interfaces.":[159],"resulted":[162],"in":[163],"dataset":[165,254],"comprising":[166],"approximately":[167],"222K":[168],"292K":[172],"were":[176],"found":[177],"be":[179],"detected":[182],"issues.":[184,251],"findings":[186],"reveal":[187],"that,":[188],"average,":[190],"about":[191],"91.4%":[192],"85.3%":[197],"analyzed":[203],"releases":[204],"do":[205],"exhibit":[207],"average":[212],"time":[213],"required":[214,247],"remediate":[216],"identified":[217],"estimated":[220],"1,425":[222],"days.":[223],"These":[224],"results":[225],"offer":[226],"valuable":[227],"guidance":[228],"both":[230],"API":[231],"providers":[232],"users":[234],"identifying":[236],"more":[237,270],"reliable":[238],"providing":[241],"indication":[243],"effort":[246],"resolve":[249],"Additionally,":[252],"has":[258],"made":[260],"publicly":[261],"accessible":[262],"via":[263],"GitHub":[264],"support":[266],"development":[268],"secure":[271],"software":[272],"systems.":[273]},"counts_by_year":[],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2026-08-31T00:00:00"}