{"id":"https://openalex.org/W2625021110","doi":"https://doi.org/10.1109/aiccsa.2016.7945693","title":"A classification methodology for security patterns to help fix software weaknesses","display_name":"A classification methodology for security patterns to help fix software weaknesses","publication_year":2016,"publication_date":"2016-11-01","ids":{"openalex":"https://openalex.org/W2625021110","doi":"https://doi.org/10.1109/aiccsa.2016.7945693","mag":"2625021110"},"language":"en","primary_location":{"id":"doi:10.1109/aiccsa.2016.7945693","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aiccsa.2016.7945693","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE/ACS 13th International Conference of Computer Systems and Applications (AICCSA)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000080342","display_name":"Loukmen Regainia","orcid":null},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I4210099416","display_name":"Laboratoire d'Informatique, de Mod\u00e9lisation et d'Optimisation des Syst\u00e8mes","ror":"https://ror.org/00t3fpp34","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I198244214","https://openalex.org/I198244214","https://openalex.org/I203339264","https://openalex.org/I205703379","https://openalex.org/I3019848993","https://openalex.org/I4210099416","https://openalex.org/I4210123221","https://openalex.org/I4210159245","https://openalex.org/I4387154249"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Loukmen Regainia","raw_affiliation_strings":["LIMOS - UMR CNRS 6158, Auvergne University, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LIMOS - UMR CNRS 6158, Auvergne University, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I4210099416"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032624369","display_name":"S\u00e9bastien Salva","orcid":null},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I4210099416","display_name":"Laboratoire d'Informatique, de Mod\u00e9lisation et d'Optimisation des Syst\u00e8mes","ror":"https://ror.org/00t3fpp34","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I198244214","https://openalex.org/I198244214","https://openalex.org/I203339264","https://openalex.org/I205703379","https://openalex.org/I3019848993","https://openalex.org/I4210099416","https://openalex.org/I4210123221","https://openalex.org/I4210159245","https://openalex.org/I4387154249"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Sebastien Salva","raw_affiliation_strings":["LIMOS - UMR CNRS 6158, Auvergne University, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LIMOS - UMR CNRS 6158, Auvergne University, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I4210099416"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5114918980","display_name":"Cedric Ecuhcurs","orcid":null},"institutions":[{"id":"https://openalex.org/I198244214","display_name":"Universit\u00e9 Clermont Auvergne","ror":"https://ror.org/01a8ajp46","country_code":"FR","type":"education","lineage":["https://openalex.org/I198244214"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Cedric Ecuhcurs","raw_affiliation_strings":["Universite Clermont Auvergne, Clermont-Ferrand, Auvergne, FR"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universite Clermont Auvergne, Clermont-Ferrand, Auvergne, FR","institution_ids":["https://openalex.org/I198244214"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3103,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.83096534,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"5","issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/strengths-and-weaknesses","display_name":"Strengths and weaknesses","score":0.7927541136741638},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7580258846282959},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.6768883466720581},{"id":"https://openalex.org/keywords/generality","display_name":"Generality","score":0.5488938093185425},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4871827960014343},{"id":"https://openalex.org/keywords/upgrade","display_name":"Upgrade","score":0.4856351912021637},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4416591227054596},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.40139034390449524},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3935036063194275},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.39210405945777893},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3606489300727844},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.32454410195350647},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.24286913871765137},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.23026445508003235}],"concepts":[{"id":"https://openalex.org/C63882131","wikidata":"https://www.wikidata.org/wiki/Q17122954","display_name":"Strengths and weaknesses","level":2,"score":0.7927541136741638},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7580258846282959},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.6768883466720581},{"id":"https://openalex.org/C2780767217","wikidata":"https://www.wikidata.org/wiki/Q5532421","display_name":"Generality","level":2,"score":0.5488938093185425},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4871827960014343},{"id":"https://openalex.org/C2780615140","wikidata":"https://www.wikidata.org/wiki/Q920419","display_name":"Upgrade","level":2,"score":0.4856351912021637},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4416591227054596},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40139034390449524},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3935036063194275},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.39210405945777893},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3606489300727844},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.32454410195350647},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.24286913871765137},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.23026445508003235},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/aiccsa.2016.7945693","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aiccsa.2016.7945693","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE/ACS 13th International Conference of Computer Systems and Applications (AICCSA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W652748195","https://openalex.org/W1526198568","https://openalex.org/W1561349478","https://openalex.org/W1970141412","https://openalex.org/W2065076704","https://openalex.org/W2083241531","https://openalex.org/W2084481113","https://openalex.org/W2095881341","https://openalex.org/W2112968394","https://openalex.org/W2134521102","https://openalex.org/W2141927586","https://openalex.org/W2142527556","https://openalex.org/W2167228371","https://openalex.org/W2277041267","https://openalex.org/W2524476898","https://openalex.org/W2619284436","https://openalex.org/W3139909712","https://openalex.org/W6679960114","https://openalex.org/W6681317342","https://openalex.org/W6738705311"],"related_works":["https://openalex.org/W2045049461","https://openalex.org/W2368672678","https://openalex.org/W4381094582","https://openalex.org/W1978893398","https://openalex.org/W1977906818","https://openalex.org/W2201908702","https://openalex.org/W2369625323","https://openalex.org/W2364579609","https://openalex.org/W2370626080","https://openalex.org/W3111143909"],"abstract_inverted_index":{"Security":[0],"patterns":[1,69,98,150],"are":[2,108],"generic":[3,21],"solutions":[4],"that":[5,80,107],"can":[6],"be":[7,83],"applied":[8],"since":[9],"early":[10],"stages":[11],"of":[12,49,103,114,123,133],"software":[13,59,146],"life":[14],"to":[15,76,82,85],"overcome":[16],"recurrent":[17],"security":[18,61,64,78,115,149,153],"weaknesses.":[19],"Their":[20],"nature":[22],"and":[23,51,63,99,127,143,151],"growing":[24],"number":[25],"make":[26],"their":[27],"choice":[28],"difficult,":[29],"even":[30],"for":[31,140],"experts":[32],"in":[33],"system":[34],"design.":[35],"To":[36],"help":[37],"them":[38],"on":[39,93,161],"the":[40,52,77,87,120,124,158],"pattern":[41],"choice,":[42],"this":[43,135],"paper":[44],"proposes":[45],"a":[46,71,111],"semi-automatic":[47],"methodology":[48,90],"classification":[50,53,126,136],"itself,":[54],"which":[55,68,96],"exposes":[56],"relationships":[57],"among":[58],"weaknesses,":[60,147],"principles":[62,79],"patterns.":[65],"It":[66],"expresses":[67],"remove":[70],"given":[72],"weakness":[73],"with":[74],"respect":[75],"have":[81],"addressed":[84],"fix":[86],"weakness.":[88],"The":[89],"is":[91],"based":[92],"seven":[94],"steps,":[95],"anatomize":[97],"weaknesses":[100],"into":[101],"set":[102],"more":[104],"precise":[105],"sub-properties":[106],"associated":[109],"through":[110],"hierarchical":[112],"organization":[113],"principles.":[116,154],"These":[117],"steps":[118],"provide":[119],"detailed":[121],"justifications":[122],"resulting":[125],"allow":[128],"its":[129],"upgrade.":[130],"Without":[131],"loss":[132],"generality,":[134],"has":[137],"been":[138],"established":[139],"Web":[141],"applications":[142],"covers":[144],"185":[145],"26":[148],"66":[152],"Research":[155],"supported":[156],"by":[157],"industrial":[159],"chair":[160],"Digital":[162],"Confidence":[163],"(http://confiance-numerique.clermont-universite.fr/index-en.html).":[164]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}