{"id":"https://openalex.org/W2941753076","doi":"https://doi.org/10.1109/access.2019.2911592","title":"Inferring Patterns for Taint-Style Vulnerabilities With Security Patches","display_name":"Inferring Patterns for Taint-Style Vulnerabilities With Security Patches","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2941753076","doi":"https://doi.org/10.1109/access.2019.2911592","mag":"2941753076"},"language":"en","primary_location":{"id":"doi:10.1109/access.2019.2911592","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2911592","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08697101.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08697101.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035392529","display_name":"Tingyu Song","orcid":"https://orcid.org/0000-0002-6473-1959"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tingyu Song","raw_affiliation_strings":["Tianjin Key Laboratory of Advanced Networking (TANK), College of Intelligence and Computing, Tianjin University, Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0002-6473-1959","affiliations":[{"raw_affiliation_string":"Tianjin Key Laboratory of Advanced Networking (TANK), College of Intelligence and Computing, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100451509","display_name":"Xiaohong Li","orcid":"https://orcid.org/0000-0002-0752-6764"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaohong Li","raw_affiliation_strings":["Tianjin Key Laboratory of Advanced Networking (TANK), College of Intelligence and Computing, Tianjin University, Tianjin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tianjin Key Laboratory of Advanced Networking (TANK), College of Intelligence and Computing, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100736532","display_name":"Zhiyong Feng","orcid":"https://orcid.org/0000-0001-8158-7453"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiyong Feng","raw_affiliation_strings":["Tianjin Key Laboratory of Cognitive Computing and Application, College of Intelligence and Computing, Tianjin University, Tianjin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tianjin Key Laboratory of Cognitive Computing and Application, College of Intelligence and Computing, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5112869781","display_name":"Guangquan Xu","orcid":"https://orcid.org/0000-0003-2079-0989"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guangquan Xu","raw_affiliation_strings":["Tianjin Key Laboratory of Advanced Networking (TANK), College of Intelligence and Computing, Tianjin University, Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0003-2079-0989","affiliations":[{"raw_affiliation_string":"Tianjin Key Laboratory of Advanced Networking (TANK), College of Intelligence and Computing, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I162868743"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.3272,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.52802008,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"7","issue":null,"first_page":"52339","last_page":"52349"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7052736282348633},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.44560280442237854},{"id":"https://openalex.org/keywords/tuple","display_name":"Tuple","score":0.43850621581077576},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.4147898256778717},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.351470410823822},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.33183175325393677},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.1729467511177063},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.09807494282722473}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7052736282348633},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.44560280442237854},{"id":"https://openalex.org/C118930307","wikidata":"https://www.wikidata.org/wiki/Q600590","display_name":"Tuple","level":2,"score":0.43850621581077576},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.4147898256778717},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.351470410823822},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33183175325393677},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.1729467511177063},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09807494282722473},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2019.2911592","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2911592","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08697101.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:cd88d286761f46ab93dca5753df743d8","is_oa":true,"landing_page_url":"https://doaj.org/article/cd88d286761f46ab93dca5753df743d8","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 7, Pp 52339-52349 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2019.2911592","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2911592","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08697101.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2928400874","display_name":"\u5faa\u73af\u548c\u9012\u5f52\u7684\u5206\u6790\u65b9\u6cd5\u7814\u7a76","funder_award_id":"61872262","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3583493253","display_name":null,"funder_award_id":"2017YFB1401200","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5698035823","display_name":"\u6cdb\u5728\u63a5\u5165\u6761\u4ef6\u4e0b\u79fb\u52a8\u5e94\u7528\u5b89\u5168\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"61572349","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2941753076.pdf","grobid_xml":"https://content.openalex.org/works/W2941753076.grobid-xml"},"referenced_works_count":37,"referenced_works":["https://openalex.org/W1505465226","https://openalex.org/W1563577331","https://openalex.org/W1992114977","https://openalex.org/W2027806980","https://openalex.org/W2040385668","https://openalex.org/W2078197322","https://openalex.org/W2114221821","https://openalex.org/W2117353399","https://openalex.org/W2118587067","https://openalex.org/W2141558501","https://openalex.org/W2148702066","https://openalex.org/W2158047578","https://openalex.org/W2181712945","https://openalex.org/W2199318523","https://openalex.org/W2375939852","https://openalex.org/W2518860820","https://openalex.org/W2526541690","https://openalex.org/W2537338860","https://openalex.org/W2548627465","https://openalex.org/W2559935471","https://openalex.org/W2584448458","https://openalex.org/W2585582603","https://openalex.org/W2618635610","https://openalex.org/W2791610814","https://openalex.org/W2808213784","https://openalex.org/W2808378737","https://openalex.org/W2808620986","https://openalex.org/W2884017574","https://openalex.org/W2884262171","https://openalex.org/W2896082384","https://openalex.org/W2962825342","https://openalex.org/W3005667672","https://openalex.org/W4239312229","https://openalex.org/W4244726870","https://openalex.org/W4248587618","https://openalex.org/W6630065895","https://openalex.org/W6687742033"],"related_works":["https://openalex.org/W4245395944","https://openalex.org/W2143551613","https://openalex.org/W2138823233","https://openalex.org/W1979740464","https://openalex.org/W2143345456","https://openalex.org/W1789991335","https://openalex.org/W2562731034","https://openalex.org/W4315705795","https://openalex.org/W1870651561","https://openalex.org/W1840581861"],"abstract_inverted_index":{"Taint-style":[0],"vulnerabilities":[1,43,229],"can":[2],"damage":[3],"the":[4,23,26,30,36,52,57,74,79,132,135,138,145,148,153,156,160,165,172,177,206,211,220,227],"service":[5],"provided":[6],"by":[7],"mobile":[8],"seriously.":[9],"The":[10,45,82,187],"pattern-based":[11],"method":[12,168,182,191,196,207],"is":[13,85,169,192],"a":[14,88],"practical":[15],"way":[16],"to":[17,70,171,175,225],"detect":[18],"taint-style":[19,83,201],"vulnerabilities.":[20,53],"Most":[21],"of":[22,60,108,125],"methods":[24],"extract":[25,131],"vulnerability":[27,37,84,198],"patterns":[28,38,72,199,209,215,222],"from":[29,134,210],"code":[31,140,212],"base,":[32,213],"however,":[33],"sometimes":[34],"missing":[35],"and":[39,120,127,141,151,218],"resulting":[40],"in":[41,63],"some":[42],"undiscovered.":[44],"security":[46,75,80],"patches":[47],"contain":[48],"valuable":[49],"information":[50,76],"about":[51],"To":[54],"compensate":[55],"for":[56,200],"inherent":[58],"incompleteness":[59],"pattern":[61],"matching,":[62],"this":[64],"paper,":[65],"we":[66,130],"propose":[67],"an":[68],"approach":[69],"infer":[71,144],"with":[73,147,183,205],"carried":[77],"on":[78,159],"patches.":[81],"described":[86],"as":[87],"3-tuples":[89],"(S":[90,115],"<sub":[91,96,101,110,116],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[92,97,102,111,117],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">src</sub>":[93,112],",":[94,99],"S":[95,100],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">san</sub>":[98,118],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">sink</sub>":[103],")":[104],"here,":[105],"which":[106],"consist":[107],"sources(S":[109],"),":[113,119],"sanitization":[114],"sinks(Ssink).":[121],"For":[122],"each":[123],"pair":[124],"vulnerable":[126,139],"patched":[128],"programs,":[129],"sanitizations":[133],"changes":[136],"between":[137],"corresponding":[142],"patches,":[143],"sinks":[146],"impact":[149],"analysis,":[150],"determine":[152],"sources":[154],"through":[155],"backward":[157],"traversal":[158],"control":[161],"flow":[162],"graph.":[163],"Finally,":[164],"complete-linkage":[166],"clustering":[167],"applied":[170,224],"extracted":[173],"triples":[174],"summary":[176],"patterns.":[178],"We":[179],"evaluate":[180],"our":[181,190,195],"open":[184],"source":[185],"projects.":[186],"results":[188],"show":[189],"effective:":[193],"1)":[194],"infers":[197],"vulnerabilities;":[202],"2)":[203],"compared":[204],"inferring":[208],"new":[214],"are":[216,223],"discovered;":[217],"3)":[219],"inferred":[221],"search":[226],"similar":[228],"successfully.":[230]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}