{"id":"https://openalex.org/W1987455670","doi":"https://doi.org/10.1109/ase.2013.6693091","title":"Automatically partition software into least privilege components using dynamic data dependency analysis","display_name":"Automatically partition software into least privilege components using dynamic data dependency analysis","publication_year":2013,"publication_date":"2013-11-01","ids":{"openalex":"https://openalex.org/W1987455670","doi":"https://doi.org/10.1109/ase.2013.6693091","mag":"1987455670"},"language":"en","primary_location":{"id":"doi:10.1109/ase.2013.6693091","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ase.2013.6693091","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 28th IEEE/ACM International Conference on Automated Software Engineering (ASE)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://ink.library.smu.edu.sg/cgi/viewcontent.cgi?article=6009&context=sis_research","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101682836","display_name":"Yongzheng Wu","orcid":"https://orcid.org/0000-0002-1345-3346"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yongzheng Wu","raw_affiliation_strings":["Singapore University of Technology and Design","Singapore University of Technology & Design, Singapore, Singapore#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Singapore University of Technology and Design","institution_ids":["https://openalex.org/I152815399"]},{"raw_affiliation_string":"Singapore University of Technology & Design, Singapore, Singapore#TAB#","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100429004","display_name":"Jun Sun","orcid":"https://orcid.org/0000-0002-3545-1392"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jun Sun","raw_affiliation_strings":["Singapore University of Technology and Design","Singapore University of Technology & Design, Singapore, Singapore#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Singapore University of Technology and Design","institution_ids":["https://openalex.org/I152815399"]},{"raw_affiliation_string":"Singapore University of Technology & Design, Singapore, Singapore#TAB#","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100355692","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Nanyang Technological University","Nanyang Tech. Univ., Singapore, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"Nanyang Tech. Univ., Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085067496","display_name":"Jin Song Dong","orcid":"https://orcid.org/0000-0002-6512-8326"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jin Song Dong","raw_affiliation_strings":["School of Computing National University of Singapore","Sch. of Comput. Nat., Univ. of Singapore, Singapore, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing National University of Singapore","institution_ids":["https://openalex.org/I165932596"]},{"raw_affiliation_string":"Sch. of Comput. Nat., Univ. of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.0593,"has_fulltext":false,"cited_by_count":46,"citation_normalized_percentile":{"value":0.88000452,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"323","last_page":"333"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7989596128463745},{"id":"https://openalex.org/keywords/backporting","display_name":"Backporting","score":0.582295298576355},{"id":"https://openalex.org/keywords/dependency-graph","display_name":"Dependency graph","score":0.5672388672828674},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.5147016644477844},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4811866879463196},{"id":"https://openalex.org/keywords/software-construction","display_name":"Software construction","score":0.46016713976860046},{"id":"https://openalex.org/keywords/call-graph","display_name":"Call graph","score":0.4593503773212433},{"id":"https://openalex.org/keywords/software-system","display_name":"Software system","score":0.4541347622871399},{"id":"https://openalex.org/keywords/component-based-software-engineering","display_name":"Component-based software engineering","score":0.44424569606781006},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.43900808691978455},{"id":"https://openalex.org/keywords/data-flow-analysis","display_name":"Data-flow analysis","score":0.4318031966686249},{"id":"https://openalex.org/keywords/software-sizing","display_name":"Software sizing","score":0.4117443561553955},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3834446966648102},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3698734939098358},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.308670312166214},{"id":"https://openalex.org/keywords/data-flow-diagram","display_name":"Data flow diagram","score":0.26614096760749817},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.21976909041404724}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7989596128463745},{"id":"https://openalex.org/C21491501","wikidata":"https://www.wikidata.org/wiki/Q430253","display_name":"Backporting","level":5,"score":0.582295298576355},{"id":"https://openalex.org/C16311509","wikidata":"https://www.wikidata.org/wiki/Q4148050","display_name":"Dependency graph","level":3,"score":0.5672388672828674},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.5147016644477844},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4811866879463196},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.46016713976860046},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.4593503773212433},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.4541347622871399},{"id":"https://openalex.org/C174683762","wikidata":"https://www.wikidata.org/wiki/Q609588","display_name":"Component-based software engineering","level":4,"score":0.44424569606781006},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.43900808691978455},{"id":"https://openalex.org/C88468194","wikidata":"https://www.wikidata.org/wiki/Q1172416","display_name":"Data-flow analysis","level":3,"score":0.4318031966686249},{"id":"https://openalex.org/C201515116","wikidata":"https://www.wikidata.org/wiki/Q7554363","display_name":"Software sizing","level":5,"score":0.4117443561553955},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3834446966648102},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3698734939098358},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.308670312166214},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.26614096760749817},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.21976909041404724}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/ase.2013.6693091","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ase.2013.6693091","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 28th IEEE/ACM International Conference on Automated Software Engineering (ASE)","raw_type":"proceedings-article"},{"id":"pmh:oai:ink.library.smu.edu.sg:sis_research-6009","is_oa":true,"landing_page_url":"https://ink.library.smu.edu.sg/cgi/viewcontent.cgi?article=6009&context=sis_research","pdf_url":null,"source":{"id":"https://openalex.org/S4306401925","display_name":"Singapore Management University Institutional Knowledge (InK) (Singapore Management University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79891267","host_organization_name":"Singapore Management University","host_organization_lineage":["https://openalex.org/I79891267"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1109/ASE.2013.6693091","raw_type":"Conference Proceeding Article"},{"id":"pmh:oai:scholarbank.nus.edu.sg:10635/78036","is_oa":false,"landing_page_url":"http://scholarbank.nus.edu.sg/handle/10635/78036","pdf_url":null,"source":{"id":"https://openalex.org/S7407052290","display_name":"National University of Singapore","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Scopus","raw_type":"Conference Paper"}],"best_oa_location":{"id":"pmh:oai:ink.library.smu.edu.sg:sis_research-6009","is_oa":true,"landing_page_url":"https://ink.library.smu.edu.sg/cgi/viewcontent.cgi?article=6009&context=sis_research","pdf_url":null,"source":{"id":"https://openalex.org/S4306401925","display_name":"Singapore Management University Institutional Knowledge (InK) (Singapore Management University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79891267","host_organization_name":"Singapore Management University","host_organization_lineage":["https://openalex.org/I79891267"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1109/ASE.2013.6693091","raw_type":"Conference Proceeding Article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7400000095367432}],"awards":[],"funders":[{"id":"https://openalex.org/F4320324110","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W6385438","https://openalex.org/W55937681","https://openalex.org/W66570796","https://openalex.org/W1488050751","https://openalex.org/W1520961854","https://openalex.org/W1563300346","https://openalex.org/W1710734607","https://openalex.org/W1809664600","https://openalex.org/W1981960292","https://openalex.org/W2008475686","https://openalex.org/W2009248821","https://openalex.org/W2061197966","https://openalex.org/W2065076704","https://openalex.org/W2079029390","https://openalex.org/W2093312379","https://openalex.org/W2095881341","https://openalex.org/W2101629181","https://openalex.org/W2109276114","https://openalex.org/W2110244733","https://openalex.org/W2134633067","https://openalex.org/W2138633784","https://openalex.org/W2152986618","https://openalex.org/W2166510103","https://openalex.org/W2978757628","https://openalex.org/W4239813889","https://openalex.org/W4245410964","https://openalex.org/W6600256889","https://openalex.org/W6602324607","https://openalex.org/W6602729356","https://openalex.org/W6629245390","https://openalex.org/W6633875382","https://openalex.org/W6637688222","https://openalex.org/W6638627507","https://openalex.org/W6768779726"],"related_works":["https://openalex.org/W4386035321","https://openalex.org/W2808651716","https://openalex.org/W4300962513","https://openalex.org/W2318011356","https://openalex.org/W2162436812","https://openalex.org/W2135688034","https://openalex.org/W3043516402","https://openalex.org/W3028068108","https://openalex.org/W2614382400","https://openalex.org/W2064900118"],"abstract_inverted_index":{"The":[0,103,118],"principle":[1],"of":[2,40,150,173,206,211,244],"least":[3,115],"privilege":[4,28,57,116,119,212],"requires":[5,60],"that":[6,16],"software":[7,30,41,55,59,78,121,186],"components":[8],"should":[9],"be":[10,65,180],"granted":[11],"only":[12,178],"necessary":[13],"privileges,":[14],"so":[15],"compromising":[17,24],"one":[18],"component":[19,124],"does":[20,167,239],"not":[21,168,177,240],"lead":[22],"to":[23,74,155,220],"others.":[25],"However,":[26],"writing":[27],"separated":[29,58,120,127],"is":[31,42,105,236],"difficult":[32],"and":[33,63,96,209,231,238],"as":[34,47],"a":[35,37,48,71,88,114,126,160,203,217],"result,":[36],"large":[38],"number":[39],"monolithic,":[43],"i.e.,":[44],"it":[45,135,138,176],"runs":[46,122],"whole":[49],"without":[50],"separation.":[51],"Manually":[52],"rewriting":[53],"monolithic":[54,77],"into":[56,108],"significant":[61],"effort":[62],"can":[64,145,179],"error":[66],"prone.":[67],"We":[68,133,144],"propose":[69,216],"ProgramCutter,":[70],"novel":[72],"approach":[73,219],"automatically":[75],"partitioning":[76],"using":[79],"dynamic":[80,227],"data":[81,89,99],"dependency":[82,90],"analysis.":[83],"ProgramCutter":[84,166],"works":[85],"by":[86,136,182,190],"constructing":[87],"graph":[91,104],"whose":[92],"nodes":[93],"are":[94,98,198],"functions":[95],"edges":[97],"dependencies":[100],"between":[101],"functions.":[102],"then":[106],"partitioned":[107],"subgraphs":[109],"where":[110],"each":[111,123],"subgraph":[112],"represents":[113],"component.":[117],"in":[125],"process":[128,235],"with":[129],"confined":[130],"system":[131,194],"privileges.":[132],"evaluate":[134],"applying":[137],"on":[139,226],"four":[140],"open":[141],"source":[142],"software.":[143,246],"reduce":[146],"the":[147,151,174,207,222,233,245],"privileged":[148],"part":[149],"program":[152],"from":[153],"100%":[154],"below":[156],"22%,":[157],"while":[158],"having":[159],"reasonable":[161],"execution":[162],"time":[163],"overhead.":[164],"Since":[165],"require":[169,241],"any":[170],"expert":[171,242],"knowledge":[172,243],"software,":[175],"used":[181],"its":[183],"developers":[184],"for":[185],"refactoring,":[187],"but":[188],"also":[189],"end":[191],"users":[192],"or":[193],"administrators.":[195],"Our":[196],"contributions":[197],"threefold:":[199],"(i)":[200],"we":[201,215],"define":[202],"quantitative":[204],"measure":[205],"security":[208],"performance":[210],"separation;":[213],"(ii)":[214],"graph-based":[218],"compute":[221],"optimal":[223],"separation":[224,234],"based":[225],"information":[228],"flow":[229],"analysis;":[230],"(iii)":[232],"automatic":[237]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":5},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}