{"id":"https://openalex.org/W2505676064","doi":"https://doi.org/10.1093/comjnl/bxw047","title":"Rethinking Software Component Security: Software Component Level Integrity and Cross Verification","display_name":"Rethinking Software Component Security: Software Component Level Integrity and Cross Verification","publication_year":2016,"publication_date":"2016-08-10","ids":{"openalex":"https://openalex.org/W2505676064","doi":"https://doi.org/10.1093/comjnl/bxw047","mag":"2505676064"},"language":"en","primary_location":{"id":"doi:10.1093/comjnl/bxw047","is_oa":false,"landing_page_url":"https://doi.org/10.1093/comjnl/bxw047","pdf_url":null,"source":{"id":"https://openalex.org/S44643521","display_name":"The Computer Journal","issn_l":"0010-4620","issn":["0010-4620","1460-2067"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Computer Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050660729","display_name":"Byungho Min","orcid":null},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Byungho Min","raw_affiliation_strings":["Advanced Cyber Security Research Centre ,Department of Computing, Macquarie University, Sydney, Australia#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Advanced Cyber Security Research Centre ,Department of Computing, Macquarie University, Sydney, Australia#TAB#","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029458848","display_name":"Vijay Varadharajan","orcid":"https://orcid.org/0000-0002-3621-9114"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Vijay Varadharajan","raw_affiliation_strings":["Advanced Cyber Security Research Centre ,Department of Computing, Macquarie University, Sydney, Australia#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Advanced Cyber Security Research Centre ,Department of Computing, Macquarie University, Sydney, Australia#TAB#","institution_ids":["https://openalex.org/I99043593"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5029458848"],"corresponding_institution_ids":["https://openalex.org/I99043593"],"apc_list":{"value":2877,"currency":"GBP","value_usd":3794},"apc_paid":null,"fwci":0.5551,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.84036497,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":"59","issue":"11","first_page":"1735","last_page":"1748"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.795261025428772},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.6438223719596863},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6219746470451355},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6183997392654419},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5325201153755188},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.507033109664917},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4677334725856781},{"id":"https://openalex.org/keywords/component-based-software-engineering","display_name":"Component-based software engineering","score":0.45081788301467896},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.4316957890987396},{"id":"https://openalex.org/keywords/plug-in","display_name":"Plug-in","score":0.42760980129241943},{"id":"https://openalex.org/keywords/security-bug","display_name":"Security bug","score":0.42603611946105957},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.42350831627845764},{"id":"https://openalex.org/keywords/protection-mechanism","display_name":"Protection mechanism","score":0.41072607040405273},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.34777289628982544},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.1697988510131836},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.1601170301437378}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.795261025428772},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.6438223719596863},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6219746470451355},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6183997392654419},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5325201153755188},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.507033109664917},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4677334725856781},{"id":"https://openalex.org/C174683762","wikidata":"https://www.wikidata.org/wiki/Q609588","display_name":"Component-based software engineering","level":4,"score":0.45081788301467896},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.4316957890987396},{"id":"https://openalex.org/C4924752","wikidata":"https://www.wikidata.org/wiki/Q184148","display_name":"Plug-in","level":2,"score":0.42760980129241943},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.42603611946105957},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.42350831627845764},{"id":"https://openalex.org/C2778717966","wikidata":"https://www.wikidata.org/wiki/Q4189076","display_name":"Protection mechanism","level":3,"score":0.41072607040405273},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.34777289628982544},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.1697988510131836},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.1601170301437378},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1093/comjnl/bxw047","is_oa":false,"landing_page_url":"https://doi.org/10.1093/comjnl/bxw047","pdf_url":null,"source":{"id":"https://openalex.org/S44643521","display_name":"The Computer Journal","issn_l":"0010-4620","issn":["0010-4620","1460-2067"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Computer Journal","raw_type":"journal-article"},{"id":"pmh:uon:31628","is_oa":false,"landing_page_url":"http://hdl.handle.net/1959.13/1356178","pdf_url":null,"source":{"id":"https://openalex.org/S4377196471","display_name":"NOVA (University of Newcastle Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I78757542","host_organization_name":"University of Newcastle Australia","host_organization_lineage":["https://openalex.org/I78757542"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"","raw_type":"journal article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5299999713897705,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W24839522","https://openalex.org/W54585183","https://openalex.org/W1497229971","https://openalex.org/W1543171621","https://openalex.org/W1548319007","https://openalex.org/W1705596515","https://openalex.org/W1908596871","https://openalex.org/W1959818661","https://openalex.org/W2039433230","https://openalex.org/W2051498836","https://openalex.org/W2073106194","https://openalex.org/W2082180526","https://openalex.org/W2107576540","https://openalex.org/W2117479921","https://openalex.org/W2159079348","https://openalex.org/W2186233209","https://openalex.org/W2213391909","https://openalex.org/W2395232863","https://openalex.org/W4285719527","https://openalex.org/W6632516361","https://openalex.org/W6686600822"],"related_works":["https://openalex.org/W2560421591","https://openalex.org/W2392503306","https://openalex.org/W2141388993","https://openalex.org/W2406043920","https://openalex.org/W2186797211","https://openalex.org/W2430357810","https://openalex.org/W4206646452","https://openalex.org/W4285101288","https://openalex.org/W2143311288","https://openalex.org/W4379932658"],"abstract_inverted_index":{"Modern":[0],"computing":[1],"platforms":[2],"have":[3,173],"progressed":[4],"to":[5,79,157,169],"deploying":[6],"more":[7],"secure":[8],"software":[9,62,109,132,153,199,210],"with":[10,165],"various":[11],"defensive":[12],"techniques":[13,32],"such":[14,91,120],"as":[15,92,121,201,203],"code":[16,71],"signing":[17,72],"and":[18,70,95,98,152,177,196],"application":[19],"whitelisting.":[20],"However,":[21],"the":[22,25,51,66,100,115,131,184,205],"adversary,":[23],"on":[24],"other":[26],"hand,":[27],"has":[28],"been":[29],"developing":[30],"offensive":[31],"including":[33],"using":[34],"legitimate":[35],"digital":[36],"certificates":[37],"in":[38,50,190],"their":[39],"attacks.":[40],"In":[41],"this":[42],"paper":[43,48],"(extended":[44],"version":[45],"of":[46,89,102,117,186,207],"a":[47,57,86,146,161,175,180],"published":[49],"conference":[52],"DSN":[53],"2015),":[54],"we":[55],"propose":[56],"new":[58],"security":[59,75,129],"mechanism":[60,69,76,189],"for":[61,209],"systems":[63],"that":[64,104,136],"extends":[65],"Windows":[67],"integrity":[68,163],"technique.":[73],"Our":[74],"gives":[77],"rise":[78],"three":[80],"major":[81],"benefits.":[82],"First,":[83],"it":[84,126,144],"prevents":[85,114],"wide":[87],"range":[88],"attacks":[90,195],"DLL":[93,96],"hijacking":[94],"injection,":[97],"mitigates":[99],"impact":[101],"shellcode":[103],"is":[105],"executed":[106],"by":[107,141],"successful":[108],"vulnerability":[110],"exploitation.":[111],"It":[112],"also":[113],"use":[116,200],"untrusted":[118,150],"plugins":[119],"web":[122],"browser":[123],"add-ons.":[124],"Second,":[125],"achieves":[127],"developer-enforced":[128],"at":[130,160],"component":[133],"level":[134,164],"so":[135],"components":[137,154],"cannot":[138],"be":[139,158],"abused":[140],"malware.":[142],"Third,":[143],"ensures":[145],"flexible":[147],"environment":[148],"where":[149],"applications":[151],"are":[155],"allowed":[156],"loaded/executed":[159],"low":[162],"restricted":[166],"access":[167],"permissions":[168],"system":[170],"resources.":[171],"We":[172],"implemented":[174],"prototype":[176],"carried":[178],"out":[179],"thorough":[181],"evaluation,":[182],"showing":[183],"advantages":[185],"our":[187],"proposed":[188],"mitigating":[191],"real":[192],"world":[193],"malware":[194],"preventing":[197],"unauthorised":[198],"well":[202],"demonstrating":[204],"ease":[206],"adoption":[208],"developers.":[211]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2018,"cited_by_count":1}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-10-10T00:00:00"}