{"id":"https://openalex.org/W4406622180","doi":"https://doi.org/10.1007/s10664-024-10606-w","title":"Come for syntax, stay for speed, write secure code: an empirical study of security weaknesses in Julia programs","display_name":"Come for syntax, stay for speed, write secure code: an empirical study of security weaknesses in Julia programs","publication_year":2025,"publication_date":"2025-01-20","ids":{"openalex":"https://openalex.org/W4406622180","doi":"https://doi.org/10.1007/s10664-024-10606-w"},"language":"en","primary_location":{"id":"doi:10.1007/s10664-024-10606-w","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10664-024-10606-w","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10664-024-10606-w.pdf","source":{"id":"https://openalex.org/S109852484","display_name":"Empirical Software Engineering","issn_l":"1382-3256","issn":["1382-3256","1573-7616"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Empirical Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10664-024-10606-w.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045570166","display_name":"Yue Zhang","orcid":"https://orcid.org/0000-0001-7421-7833"},"institutions":[{"id":"https://openalex.org/I82497590","display_name":"Auburn University","ror":"https://ror.org/02v80fc35","country_code":"US","type":"education","lineage":["https://openalex.org/I82497590"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Yue Zhang","raw_affiliation_strings":["Auburn University, Auburn, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Auburn University, Auburn, USA","institution_ids":["https://openalex.org/I82497590"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004404018","display_name":"Justin Murphy","orcid":"https://orcid.org/0000-0002-8220-4845"},"institutions":[{"id":"https://openalex.org/I4210115925","display_name":"Cookeville Regional Medical Center","ror":"https://ror.org/02bgf5h46","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I4210115925"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Justin Murphy","raw_affiliation_strings":["Cookeville, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cookeville, USA","institution_ids":["https://openalex.org/I4210115925"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069063267","display_name":"Akond Rahman","orcid":"https://orcid.org/0000-0002-5056-757X"},"institutions":[{"id":"https://openalex.org/I82497590","display_name":"Auburn University","ror":"https://ror.org/02v80fc35","country_code":"US","type":"education","lineage":["https://openalex.org/I82497590"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Akond Rahman","raw_affiliation_strings":["Auburn University, Auburn, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Auburn University, Auburn, USA","institution_ids":["https://openalex.org/I82497590"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5004404018","https://openalex.org/A5045570166","https://openalex.org/A5069063267"],"corresponding_institution_ids":["https://openalex.org/I4210115925","https://openalex.org/I82497590"],"apc_list":{"value":2890,"currency":"USD","value_usd":2890},"apc_paid":{"value":2890,"currency":"USD","value_usd":2890},"fwci":2.5144,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.87485876,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":"30","issue":"2","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.755324125289917},{"id":"https://openalex.org/keywords/syntax","display_name":"Syntax","score":0.67010498046875},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.5552906394004822},{"id":"https://openalex.org/keywords/strengths-and-weaknesses","display_name":"Strengths and weaknesses","score":0.5029529929161072},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.47134846448898315},{"id":"https://openalex.org/keywords/speedup","display_name":"Speedup","score":0.42561712861061096},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.24537432193756104},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.15626978874206543},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14957138895988464}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.755324125289917},{"id":"https://openalex.org/C60048249","wikidata":"https://www.wikidata.org/wiki/Q37437","display_name":"Syntax","level":2,"score":0.67010498046875},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5552906394004822},{"id":"https://openalex.org/C63882131","wikidata":"https://www.wikidata.org/wiki/Q17122954","display_name":"Strengths and weaknesses","level":2,"score":0.5029529929161072},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.47134846448898315},{"id":"https://openalex.org/C68339613","wikidata":"https://www.wikidata.org/wiki/Q1549489","display_name":"Speedup","level":2,"score":0.42561712861061096},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.24537432193756104},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.15626978874206543},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14957138895988464},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10664-024-10606-w","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10664-024-10606-w","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10664-024-10606-w.pdf","source":{"id":"https://openalex.org/S109852484","display_name":"Empirical Software Engineering","issn_l":"1382-3256","issn":["1382-3256","1573-7616"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Empirical Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10664-024-10606-w","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10664-024-10606-w","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10664-024-10606-w.pdf","source":{"id":"https://openalex.org/S109852484","display_name":"Empirical Software Engineering","issn_l":"1382-3256","issn":["1382-3256","1573-7616"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Empirical Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2240699992","display_name":null,"funder_award_id":"H98230-21-1-0175","funder_id":"https://openalex.org/F4320311089","funder_display_name":"National Security Agency"},{"id":"https://openalex.org/G2397431852","display_name":"Collaborative Research: SaTC: TTP: Small: eSLIC: Enhanced Security Static Analysis for Detecting Insecure Configuration Scripts","funder_award_id":"2247141","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3594984352","display_name":"Authentic Learning Modules for DevOps Security Education","funder_award_id":"2310179","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7845798442","display_name":null,"funder_award_id":"H98230","funder_id":"https://openalex.org/F4320311089","funder_display_name":"National Security Agency"},{"id":"https://openalex.org/G8031784425","display_name":"SHF: Small: Resilient Operations for Deployment Units Used in Container Orchestration","funder_award_id":"2312321","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320309904","display_name":"Auburn University","ror":"https://ror.org/02v80fc35"},{"id":"https://openalex.org/F4320311089","display_name":"National Security Agency","ror":"https://ror.org/0047bvr32"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4406622180.pdf","grobid_xml":"https://content.openalex.org/works/W4406622180.grobid-xml"},"referenced_works_count":45,"referenced_works":["https://openalex.org/W1500946169","https://openalex.org/W1525829637","https://openalex.org/W2010761133","https://openalex.org/W2053154970","https://openalex.org/W2120575449","https://openalex.org/W2147149038","https://openalex.org/W2156396922","https://openalex.org/W2164777277","https://openalex.org/W2415219339","https://openalex.org/W2559885217","https://openalex.org/W2564265768","https://openalex.org/W2617928660","https://openalex.org/W2893611774","https://openalex.org/W2898321943","https://openalex.org/W2955552127","https://openalex.org/W2955656327","https://openalex.org/W2966778788","https://openalex.org/W2992842184","https://openalex.org/W2993331254","https://openalex.org/W3035157585","https://openalex.org/W3080120717","https://openalex.org/W3081078736","https://openalex.org/W3085545669","https://openalex.org/W3090643686","https://openalex.org/W3094094693","https://openalex.org/W3123074563","https://openalex.org/W3133304533","https://openalex.org/W3151142258","https://openalex.org/W3166095789","https://openalex.org/W3187000578","https://openalex.org/W3196228261","https://openalex.org/W3208407575","https://openalex.org/W4206998227","https://openalex.org/W4246853214","https://openalex.org/W4295846662","https://openalex.org/W4312436517","https://openalex.org/W4312578982","https://openalex.org/W4312969325","https://openalex.org/W4313534936","https://openalex.org/W4313563645","https://openalex.org/W4313563702","https://openalex.org/W4315480688","https://openalex.org/W4383989302","https://openalex.org/W4386959728","https://openalex.org/W4387503912"],"related_works":["https://openalex.org/W2058965144","https://openalex.org/W2164382479","https://openalex.org/W2146343568","https://openalex.org/W98480971","https://openalex.org/W2150291671","https://openalex.org/W2013643406","https://openalex.org/W2027972911","https://openalex.org/W2157978810","https://openalex.org/W4391547476","https://openalex.org/W2597809628"],"abstract_inverted_index":{"Abstract":[0],"Context":[1],"Practitioners":[2],"prefer":[3],"to":[4,20,38,64,107,141,174,224],"achieve":[5],"performance":[6],"without":[7,25],"sacrificing":[8,26],"productivity":[9,27],"when":[10],"developing":[11],"scientific":[12,52,81],"software.":[13,82],"The":[14,101],"Julia":[15,40,58,69,94,112,124,133,139,169,182,187,220,266],"programming":[16,41],"language":[17,42],"is":[18,33,106],"designed":[19],"develop":[21,111],"performant":[22],"computer":[23],"programs":[24,66,113,134,267],"by":[28,114],"providing":[29],"a":[30,149],"syntax":[31],"that":[32,97,163,262],"scripting":[34],"in":[35,68,123,136,168,179,265],"nature.":[36],"According":[37],"the":[39,44,77,198,230],"website,":[43],"common":[45],"projects":[46,140,183],"are":[47],"data":[48],"science,":[49],"machine":[50],"learning,":[51],"domains,":[53],"and":[54,203,254],"parallel":[55],"computing.":[56],"While":[57],"has":[59],"yielded":[60],"benefits":[61],"with":[62],"respect":[63],"productivity,":[65],"written":[67],"can":[70,75,89,268],"include":[71,197,225],"security":[72,78,87,120,143,166,177,193,213,232,257,263],"weaknesses,":[73],"which":[74,196],"hamper":[76],"of":[79,86,93,103,119,185,200,229,256],"Julia-based":[80],"A":[83,158],"systematic":[84],"derivation":[85],"weaknesses":[88,121,167,178,264],"facilitate":[90],"secure":[91],"development":[92,253],"programs\u2014an":[95],"area":[96],"remains":[98],"under-explored.":[99],"Objective":[100],"goal":[102],"this":[104],"paper":[105],"help":[108],"practitioners":[109],"securely":[110],"conducting":[115],"an":[116],"empirical":[117,208],"study":[118,209],"found":[122],"programs.":[125,170,188],"Method":[126],"We":[127,171,190,249],"apply":[128,172],"qualitative":[129],"analysis":[130,151,259],"on":[131,237],"4,592":[132],"used":[135],"126":[137],"open-source":[138,181],"identify":[142,176,191,211],"weakness":[144,194,233],"categories.":[145,234],"Next,":[146],"we":[147,210,217,241],"construct":[148],"static":[150,258],"tool":[152],"called":[153],"J":[154],"ulia":[155],"S":[156],"tatic":[157],"nalysis":[159],"T":[160],"ool":[161],"(JSAT)":[162],"automatically":[164,175],"identifies":[165],"JSAT":[173],"558":[180],"consisting":[184],"25,008":[186],"Results":[189],"7":[192,231],"categories,":[195],"usage":[199],"hard-coded":[201],"password":[202],"unsafe":[204],"invocation.":[205],"From":[206],"our":[207,238],"23,839":[212],"weaknesses.":[214],"On":[215],"average,":[216],"observe":[218],"24.9%":[219],"source":[221],"code":[222,247],"files":[223],"at":[226],"least":[227],"one":[228],"Conclusion":[235],"Based":[236],"research":[239],"findings,":[240],"recommend":[242,251],"rigorous":[243],"inspection":[244],"efforts":[245],"during":[246],"reviews.":[248],"also":[250],"further":[252],"application":[255],"tools":[260],"so":[261],"be":[269],"detected":[270],"before":[271],"execution.":[272]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}