{"id":"https://openalex.org/W4398226175","doi":"https://doi.org/10.1109/access.2024.3404058","title":"On the Impact of Refactorings on Software Attack Surface","display_name":"On the Impact of Refactorings on Software Attack Surface","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4398226175","doi":"https://doi.org/10.1109/access.2024.3404058"},"language":"en","primary_location":{"id":"doi:10.1109/access.2024.3404058","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3404058","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10536085.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10536085.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5098761992","display_name":"Estomii Edward","orcid":"https://orcid.org/0009-0008-8623-6079"},"institutions":[{"id":"https://openalex.org/I28285804","display_name":"The University of Dodoma","ror":"https://ror.org/009n8zh45","country_code":"TZ","type":"education","lineage":["https://openalex.org/I28285804"]}],"countries":["TZ"],"is_corresponding":false,"raw_author_name":"Estomii Edward","raw_affiliation_strings":["Department of Computer Science and Engineering, The University of Dodoma, Dodoma, Tanzania"],"raw_orcid":"https://orcid.org/0009-0008-8623-6079","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, The University of Dodoma, Dodoma, Tanzania","institution_ids":["https://openalex.org/I28285804"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022306911","display_name":"Ally S. Nyamawe","orcid":"https://orcid.org/0000-0002-5210-259X"},"institutions":[{"id":"https://openalex.org/I28285804","display_name":"The University of Dodoma","ror":"https://ror.org/009n8zh45","country_code":"TZ","type":"education","lineage":["https://openalex.org/I28285804"]}],"countries":["TZ"],"is_corresponding":false,"raw_author_name":"Ally S. Nyamawe","raw_affiliation_strings":["Department of Computer Science and Engineering, The University of Dodoma, Dodoma, Tanzania"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, The University of Dodoma, Dodoma, Tanzania","institution_ids":["https://openalex.org/I28285804"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007051028","display_name":"Noe Elisa","orcid":"https://orcid.org/0000-0002-5558-9647"},"institutions":[{"id":"https://openalex.org/I28285804","display_name":"The University of Dodoma","ror":"https://ror.org/009n8zh45","country_code":"TZ","type":"education","lineage":["https://openalex.org/I28285804"]}],"countries":["TZ"],"is_corresponding":false,"raw_author_name":"Noe Elisa","raw_affiliation_strings":["Department of Computer Science and Engineering, The University of Dodoma, Dodoma, Tanzania"],"raw_orcid":"https://orcid.org/0000-0002-5558-9647","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, The University of Dodoma, Dodoma, Tanzania","institution_ids":["https://openalex.org/I28285804"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I28285804"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":3.1979,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.92741825,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"12","issue":null,"first_page":"128570","last_page":"128584"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9377999901771545,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9377999901771545,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9312000274658203,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.90420001745224,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6776673197746277},{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.5887420177459717},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.586511492729187},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3436729311943054},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.33400604128837585},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.28385117650032043}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6776673197746277},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.5887420177459717},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.586511492729187},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3436729311943054},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.33400604128837585},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.28385117650032043}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2024.3404058","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3404058","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10536085.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:bc63751c1b08438eb529ebdc03e3f57d","is_oa":true,"landing_page_url":"https://doaj.org/article/bc63751c1b08438eb529ebdc03e3f57d","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 12, Pp 128570-128584 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2024.3404058","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3404058","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10536085.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4398226175.pdf"},"referenced_works_count":69,"referenced_works":["https://openalex.org/W1487083903","https://openalex.org/W1524601730","https://openalex.org/W2000679946","https://openalex.org/W2004804617","https://openalex.org/W2044556410","https://openalex.org/W2065176875","https://openalex.org/W2078321472","https://openalex.org/W2081809611","https://openalex.org/W2086406325","https://openalex.org/W2091543666","https://openalex.org/W2104459614","https://openalex.org/W2113157806","https://openalex.org/W2135359801","https://openalex.org/W2151583273","https://openalex.org/W2153887189","https://openalex.org/W2156168162","https://openalex.org/W2161661398","https://openalex.org/W2258155898","https://openalex.org/W2330591856","https://openalex.org/W2382315693","https://openalex.org/W2405957016","https://openalex.org/W2464134769","https://openalex.org/W2530824252","https://openalex.org/W2540205231","https://openalex.org/W2592144821","https://openalex.org/W2605547445","https://openalex.org/W2740981432","https://openalex.org/W2742512005","https://openalex.org/W2769069578","https://openalex.org/W2795027827","https://openalex.org/W2796023385","https://openalex.org/W2809097206","https://openalex.org/W2884058242","https://openalex.org/W2903428887","https://openalex.org/W2944080842","https://openalex.org/W2963518198","https://openalex.org/W2977616976","https://openalex.org/W2991700097","https://openalex.org/W3004570974","https://openalex.org/W3037700620","https://openalex.org/W3088384753","https://openalex.org/W3099529967","https://openalex.org/W3101399476","https://openalex.org/W3135507467","https://openalex.org/W3141872514","https://openalex.org/W3166181464","https://openalex.org/W3167050758","https://openalex.org/W3169664518","https://openalex.org/W3175255846","https://openalex.org/W3216427897","https://openalex.org/W3217467444","https://openalex.org/W4214834810","https://openalex.org/W4229749093","https://openalex.org/W4280632162","https://openalex.org/W4287107080","https://openalex.org/W4288901787","https://openalex.org/W4295872857","https://openalex.org/W4297792605","https://openalex.org/W4312245811","https://openalex.org/W4324082558","https://openalex.org/W4360584753","https://openalex.org/W4378072131","https://openalex.org/W4385208592","https://openalex.org/W4385731437","https://openalex.org/W6604234155","https://openalex.org/W6758396222","https://openalex.org/W6759629457","https://openalex.org/W6850537521","https://openalex.org/W6851058363"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W4382046111","https://openalex.org/W3009153228","https://openalex.org/W2536179434","https://openalex.org/W1929087753","https://openalex.org/W3152571439","https://openalex.org/W3083937200","https://openalex.org/W3080294124","https://openalex.org/W3041847967"],"abstract_inverted_index":{"Refactoring":[0,42],"is":[1],"one":[2],"of":[3,16,36,52,58,70,125,138,150,162,209,214],"the":[4,13,33,50,56,67,81,92,131,136,142,146,160,165,210],"techniques":[5],"mostly":[6],"employed":[7],"by":[8],"software":[9,37,93,109,166,220],"developers":[10,205],"to":[11,24,65,88,129,158],"improve":[12,66,219],"quality":[14,221],"attributes":[15],"their":[17],"systems.":[18],"However,":[19],"little":[20],"has":[21],"been":[22],"done":[23],"investigate":[25],"how":[26],"refactoring":[27,132,215],"operations":[28,48,133,216],"specifically":[29],"aimed":[30],"at":[31],"improving":[32],"internal":[34,68],"structure":[35],"can":[38,185,218],"impact":[39,161],"its":[40,224],"security.":[41,225],"usually":[43],"entails":[44],"different":[45],"code":[46,59,78,152,196],"change":[47],"including":[49],"decomposition":[51],"classes,":[53],"methods,":[54],"and":[55,117,135,154,178,198],"reallocation":[57],"elements.":[60],"While":[61],"this":[62,97,99],"refinement":[63],"aims":[64],"design":[69],"a":[71],"system,":[72],"it":[73],"might":[74],"inadvertently":[75],"disperse":[76],"security-critical":[77],"elements":[79],"throughout":[80],"codebase.":[82],"Consequently,":[83],"such":[84],"dispersion":[85],"could":[86],"contribute":[87],"an":[89,102],"increase":[90],"in":[91,114],"attack":[94,167],"surface.":[95,168],"To":[96],"end,":[98],"paper":[100],"presents":[101],"empirical":[103],"study":[104,120,143],"conducted":[105],"on":[106,145,164,194],"30":[107],"open-source":[108],"systems":[110],"that":[111,183,204,217],"were":[112],"developed":[113],"Python,":[115],"C,":[116],"Java.":[118],"The":[119,180,200],"scrutinized":[121],"two":[122],"subsequent":[123],"versions":[124],"each":[126],"subject":[127],"application":[128],"uncover":[130],"applied":[134],"trend":[137],"security":[139],"vulnerabilities.":[140,199],"Specifically,":[141],"focused":[144],"injection":[147],"or":[148,192,212],"removal":[149],"bugs,":[151,195],"smells":[153],"other":[155],"vulnerabilities":[156],"aiming":[157],"discern":[159],"refactorings":[163,184],"Data":[169],"was":[170],"collected":[171],"using":[172],"well-known":[173],"tools,":[174],"namely":[175],"SonarQube,":[176],"RefDiff,":[177],"PyReff.":[179],"findings":[181,201],"suggest":[182],"have":[186],"multiple":[187],"effects":[188],"(i.e.,":[189],"positive,":[190],"negative,":[191],"neutral)":[193],"smells,":[197],"further":[202],"confirm":[203],"must":[206],"be":[207],"aware":[208],"combination":[211],"sequence":[213],"without":[222],"compromising":[223]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2023,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}