{"id":"https://openalex.org/W4413157413","doi":"https://doi.org/10.1109/jiot.2025.3598235","title":"Spring Framework Benchmarking Utility for Static Application Security Testing (SAST) Tools","display_name":"Spring Framework Benchmarking Utility for Static Application Security Testing (SAST) Tools","publication_year":2025,"publication_date":"2025-08-13","ids":{"openalex":"https://openalex.org/W4413157413","doi":"https://doi.org/10.1109/jiot.2025.3598235"},"language":"en","primary_location":{"id":"doi:10.1109/jiot.2025.3598235","is_oa":true,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3598235","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/jiot.2025.3598235","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082341665","display_name":"Elizaveta Kuzmina","orcid":null},"institutions":[{"id":"https://openalex.org/I4210120792","display_name":"Whitecliffe College of Arts and Design","ror":"https://ror.org/02d6ntk65","country_code":"NZ","type":"education","lineage":["https://openalex.org/I4210120792"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Elizaveta Kuzmina","raw_affiliation_strings":["Whitecliffe Technology and Innovation, Auckland, New Zealand","Whitecliffe Technology and Innovation, New Zealand"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Whitecliffe Technology and Innovation, Auckland, New Zealand","institution_ids":["https://openalex.org/I4210120792"]},{"raw_affiliation_string":"Whitecliffe Technology and Innovation, New Zealand","institution_ids":["https://openalex.org/I4210120792"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009337329","display_name":"Shahbaz Pervez","orcid":"https://orcid.org/0000-0003-0232-2356"},"institutions":[{"id":"https://openalex.org/I4210120792","display_name":"Whitecliffe College of Arts and Design","ror":"https://ror.org/02d6ntk65","country_code":"NZ","type":"education","lineage":["https://openalex.org/I4210120792"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Shahbaz Pervez Chattha","raw_affiliation_strings":["Whitecliffe Technology and Innovation, Auckland, New Zealand","Whitecliffe Technology and Innovation, New Zealand"],"raw_orcid":"https://orcid.org/0000-0003-0232-2356","affiliations":[{"raw_affiliation_string":"Whitecliffe Technology and Innovation, Auckland, New Zealand","institution_ids":["https://openalex.org/I4210120792"]},{"raw_affiliation_string":"Whitecliffe Technology and Innovation, New Zealand","institution_ids":["https://openalex.org/I4210120792"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113971874","display_name":"Seyed Ebrahim Hosseini","orcid":"https://orcid.org/0000-0002-2947-5582"},"institutions":[{"id":"https://openalex.org/I4210120792","display_name":"Whitecliffe College of Arts and Design","ror":"https://ror.org/02d6ntk65","country_code":"NZ","type":"education","lineage":["https://openalex.org/I4210120792"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Seyed Ebrahim Hosseini","raw_affiliation_strings":["Whitecliffe Technology and Innovation, Auckland, New Zealand","Whitecliffe Technology and Innovation, New Zealand"],"raw_orcid":"https://orcid.org/0000-0002-2947-5582","affiliations":[{"raw_affiliation_string":"Whitecliffe Technology and Innovation, Auckland, New Zealand","institution_ids":["https://openalex.org/I4210120792"]},{"raw_affiliation_string":"Whitecliffe Technology and Innovation, New Zealand","institution_ids":["https://openalex.org/I4210120792"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119285050","display_name":"Muazma Shahbaz","orcid":null},"institutions":[{"id":"https://openalex.org/I4210120792","display_name":"Whitecliffe College of Arts and Design","ror":"https://ror.org/02d6ntk65","country_code":"NZ","type":"education","lineage":["https://openalex.org/I4210120792"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Muazma Shahbaz","raw_affiliation_strings":["Whitecliffe Technology and Innovation, Auckland, New Zealand","Whitecliffe Technology and Innovation, New Zealand"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Whitecliffe Technology and Innovation, Auckland, New Zealand","institution_ids":["https://openalex.org/I4210120792"]},{"raw_affiliation_string":"Whitecliffe Technology and Innovation, New Zealand","institution_ids":["https://openalex.org/I4210120792"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035884247","display_name":"Adnan Akhunzada","orcid":"https://orcid.org/0000-0001-8370-9290"},"institutions":[{"id":"https://openalex.org/I4210105992","display_name":"Qatar Science and Technology Park","ror":"https://ror.org/01gshyb58","country_code":"QA","type":"archive","lineage":["https://openalex.org/I4210105992"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Adnan Akhunzada","raw_affiliation_strings":["College of Computing and Information Technology, University of Doha for Science and Technology, Doha, Qatar"],"raw_orcid":"https://orcid.org/0000-0001-8370-9290","affiliations":[{"raw_affiliation_string":"College of Computing and Information Technology, University of Doha for Science and Technology, Doha, Qatar","institution_ids":["https://openalex.org/I4210105992"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":{"value":2645,"currency":"USD","value_usd":2645},"fwci":6.5962,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.96485828,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"12","issue":"22","first_page":"46863","last_page":"46877"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.8988000154495239,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.8988000154495239,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.8870999813079834,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.8780999779701233,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.776296854019165},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.73341304063797},{"id":"https://openalex.org/keywords/spring","display_name":"Spring (device)","score":0.5857092142105103},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.14229357242584229}],"concepts":[{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.776296854019165},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.73341304063797},{"id":"https://openalex.org/C2778712887","wikidata":"https://www.wikidata.org/wiki/Q102836","display_name":"Spring (device)","level":2,"score":0.5857092142105103},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.14229357242584229},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2025.3598235","is_oa":true,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3598235","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/jiot.2025.3598235","is_oa":true,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3598235","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W2856489528","https://openalex.org/W2927016110","https://openalex.org/W2985320478","https://openalex.org/W2986819198","https://openalex.org/W2995887959","https://openalex.org/W3033053557","https://openalex.org/W3035998237","https://openalex.org/W3093595239","https://openalex.org/W3112499362","https://openalex.org/W3132910239","https://openalex.org/W3153018678","https://openalex.org/W3192198953","https://openalex.org/W3201367946","https://openalex.org/W3202871865","https://openalex.org/W4200028713","https://openalex.org/W4200634422","https://openalex.org/W4220988989","https://openalex.org/W4225326198","https://openalex.org/W4301757740","https://openalex.org/W4310423035","https://openalex.org/W4313242379","https://openalex.org/W4324093415","https://openalex.org/W4386893544","https://openalex.org/W4388038761","https://openalex.org/W4388788621","https://openalex.org/W4389159189","https://openalex.org/W4390817543","https://openalex.org/W4394862968","https://openalex.org/W4399667970","https://openalex.org/W4399668127"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4238897586","https://openalex.org/W435179959","https://openalex.org/W2619091065","https://openalex.org/W2059640416","https://openalex.org/W1490753184","https://openalex.org/W2284465472","https://openalex.org/W2291782699"],"abstract_inverted_index":{"Software":[0],"developers":[1,22],"face":[2],"several":[3,109],"challenges":[4],"when":[5],"creating":[6],"or":[7],"maintaining":[8],"applications,":[9],"security":[10,29,195],"assurance":[11],"is":[12,53,88,101],"one":[13],"of":[14,20,73,94,108,113,122,131,142,159,163],"them.":[15],"To":[16,59],"minimise":[17],"the":[18,60,68,71,92,111,118,129,132,135,154,157,160,171,188,192],"occurrence":[19],"vulnerabilities,":[21,117],"utilize":[23],"various":[24,45],"solutions,":[25],"including":[26],"static":[27],"application":[28,41],"testing":[30],"(SAST)":[31],"tools.":[32,98,186],"These":[33],"tools":[34,75,127],"use":[35,153],"different":[36],"analysis":[37,112],"techniques":[38],"to":[39,55,90,144,152,176,182,191],"detect":[40],"flaws":[42],"and":[43,49,106,120,128,196],"support":[44],"programming":[46],"languages,":[47],"frameworks":[48],"third-party":[50],"libraries.":[51],"It":[52],"important":[54],"understand":[56],"their":[57,164],"capabilities.":[58],"authors\u2019":[61],"knowledge,":[62],"researchers":[63],"have":[64],"not":[65],"yet":[66],"addressed":[67],"gap":[69],"in":[70,167],"benchmarking":[72,85,123],"SAST":[74,97,145,165,185],"used":[76,175],"with":[77],"Spring":[78,95,115,168],"framework.":[79],"Therefore,":[80],"this":[81],"research":[82,105,181,189,198],"proposes":[83],"a":[84],"utility":[86,133,172],"that":[87],"designed":[89],"assess":[91],"performance":[93],"framework":[96,116],"The":[99,138],"study":[100,139],"based":[102],"on":[103],"action":[104],"consists":[107],"parts:":[110],"existing":[114],"collection":[119],"enhancement":[121],"strategies":[124],"from":[125],"similar":[126],"development":[130],"using":[134],"collected":[136],"data.":[137],"findings":[140],"are":[141],"interest":[143],"providers":[146],"as":[147],"they":[148],"would":[149],"be":[150,174],"able":[151],"benchmark":[155,178],"for":[156,179],"evaluation":[158],"detection":[161],"capabilities":[162],"solution":[166],"environment.":[169],"Moreover,":[170],"could":[173],"provide":[177],"future":[180],"compare":[183],"other":[184],"Overall,":[187],"contributes":[190],"IT,":[193],"cyber":[194],"related":[197],"fields.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-23T07:36:19.812096","created_date":"2025-10-10T00:00:00"}