{"id":"https://openalex.org/W2963153679","doi":"https://doi.org/10.1109/tse.2019.2931331","title":"ModGuard : Identifying Integrity & Confidentiality Violations in Java Modules","display_name":"ModGuard : Identifying Integrity & Confidentiality Violations in Java Modules","publication_year":2019,"publication_date":"2019-07-29","ids":{"openalex":"https://openalex.org/W2963153679","doi":"https://doi.org/10.1109/tse.2019.2931331","mag":"2963153679"},"language":"en","primary_location":{"id":"doi:10.1109/tse.2019.2931331","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2019.2931331","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086467510","display_name":"Andreas Dann","orcid":"https://orcid.org/0000-0002-6587-7431"},"institutions":[{"id":"https://openalex.org/I206945453","display_name":"Paderborn University","ror":"https://ror.org/058kzsd48","country_code":"DE","type":"education","lineage":["https://openalex.org/I206945453"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Andreas Dann","raw_affiliation_strings":["Heinz Nixdorf Institute, Paderborn University, Paderborn, Germany"],"raw_orcid":"https://orcid.org/0000-0002-6587-7431","affiliations":[{"raw_affiliation_string":"Heinz Nixdorf Institute, Paderborn University, Paderborn, Germany","institution_ids":["https://openalex.org/I206945453"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027995789","display_name":"Ben Hermann","orcid":"https://orcid.org/0000-0001-9848-2017"},"institutions":[{"id":"https://openalex.org/I206945453","display_name":"Paderborn University","ror":"https://ror.org/058kzsd48","country_code":"DE","type":"education","lineage":["https://openalex.org/I206945453"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ben Hermann","raw_affiliation_strings":["Heinz Nixdorf Institute, Paderborn University, Paderborn, Germany"],"raw_orcid":"https://orcid.org/0000-0001-9848-2017","affiliations":[{"raw_affiliation_string":"Heinz Nixdorf Institute, Paderborn University, Paderborn, Germany","institution_ids":["https://openalex.org/I206945453"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076678278","display_name":"Eric Bodden","orcid":"https://orcid.org/0000-0003-3470-3647"},"institutions":[{"id":"https://openalex.org/I206945453","display_name":"Paderborn University","ror":"https://ror.org/058kzsd48","country_code":"DE","type":"education","lineage":["https://openalex.org/I206945453"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Eric Bodden","raw_affiliation_strings":["Heinz Nixdorf Institute, Paderborn University, Paderborn, Germany"],"raw_orcid":"https://orcid.org/0000-0003-3470-3647","affiliations":[{"raw_affiliation_string":"Heinz Nixdorf Institute, Paderborn University, Paderborn, Germany","institution_ids":["https://openalex.org/I206945453"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I206945453"],"apc_list":null,"apc_paid":null,"fwci":0.1412,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.56032,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"47","issue":"8","first_page":"1656","last_page":"1667"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.878835916519165},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.635486900806427},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.6154151558876038},{"id":"https://openalex.org/keywords/maintainability","display_name":"Maintainability","score":0.5209997296333313},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.4786887764930725},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.43278056383132935},{"id":"https://openalex.org/keywords/hierarchy","display_name":"Hierarchy","score":0.41237276792526245},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.36932462453842163},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.24143245816230774}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.878835916519165},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.635486900806427},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.6154151558876038},{"id":"https://openalex.org/C160713754","wikidata":"https://www.wikidata.org/wiki/Q1389965","display_name":"Maintainability","level":2,"score":0.5209997296333313},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4786887764930725},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.43278056383132935},{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.41237276792526245},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.36932462453842163},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.24143245816230774},{"id":"https://openalex.org/C34447519","wikidata":"https://www.wikidata.org/wiki/Q179522","display_name":"Market economy","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tse.2019.2931331","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2019.2931331","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5899999737739563,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1221071920","https://openalex.org/W1500987966","https://openalex.org/W1572739102","https://openalex.org/W1915915253","https://openalex.org/W1934184837","https://openalex.org/W1963971515","https://openalex.org/W1969599528","https://openalex.org/W1971859150","https://openalex.org/W1987823287","https://openalex.org/W2006905489","https://openalex.org/W2028705369","https://openalex.org/W2077850509","https://openalex.org/W2078197322","https://openalex.org/W2090060521","https://openalex.org/W2091159822","https://openalex.org/W2105256796","https://openalex.org/W2110741066","https://openalex.org/W2122049982","https://openalex.org/W2122167991","https://openalex.org/W2126319334","https://openalex.org/W2135389226","https://openalex.org/W2140021378","https://openalex.org/W2152982904","https://openalex.org/W2163521620","https://openalex.org/W2171295941","https://openalex.org/W2546558533","https://openalex.org/W2553375745","https://openalex.org/W2763994238","https://openalex.org/W4237737995","https://openalex.org/W4247929472","https://openalex.org/W4251478049","https://openalex.org/W6640203312","https://openalex.org/W6641190993","https://openalex.org/W6678518939"],"related_works":["https://openalex.org/W4387497383","https://openalex.org/W3183948672","https://openalex.org/W3173606202","https://openalex.org/W3110381201","https://openalex.org/W2948807893","https://openalex.org/W2935909890","https://openalex.org/W2778153218","https://openalex.org/W2758277628","https://openalex.org/W1531601525","https://openalex.org/W2160765347"],"abstract_inverted_index":{"With":[0],"version":[1],"9,":[2],"Java":[3,116],"has":[4],"been":[5],"given":[6],"the":[7,19,31,36,50,67,115,145,169,183],"new":[8],"module":[9,32,51,65,117,150],"system":[10,33,52,118],"Jigsaw.":[11],"Major":[12],"goals":[13],"were":[14],"to":[15,60,95,122,155,167,178],"simplify":[16],"maintainability":[17],"of":[18,38,140,175,202,229],"JDK":[20],"and":[21,84,99,177,226],"improve":[22],"its":[23],"security":[24],"by":[25],"encapsulating":[26],"modules'":[27],"internal":[28,39],"types.":[29],"While":[30],"successfully":[34],"limits":[35],"visibility":[37],"types,":[40],"it":[41,92],"does":[42,207],"not":[43,208],"prevent":[44,209],"sensitive":[45,210,230],"data":[46],"from":[47,212],"escaping.":[48],"Since":[49],"reasons":[53],"about":[54,97],"types":[55],"only,":[56],"objects":[57],"are":[58],"allowed":[59],"escape":[61,127],"even":[62],"if":[63],"that":[64,126,148,191,199,217],"declares":[66],"type":[68,100],"as":[69,77,91],"internal.":[70],"Finding":[71],"such":[72],"unintended":[73],"escapes":[74],"is":[75,87,219],"important,":[76],"they":[78],"may":[79],"violate":[80],"a":[81,88,106,136,141,149,162,188,200],"module's":[82,142],"integrity":[83,225],"confidentiality,":[85],"but":[86,171],"complex":[89],"task":[90],"requires":[93],"one":[94],"reason":[96],"pointers":[98],"hierarchy.":[101],"We":[102,158],"thus":[103],"present":[104],"ModGuard,":[105,176],"novel":[107,163],"static":[108],"analysis":[109,121],"based":[110],"on":[111],"Doop":[112],"which":[113,197],"complements":[114],"with":[119,132],"an":[120,220],"automatically":[123],"identify":[124],"instances":[125,211],"their":[128],"declaring":[129],"module.":[130],"Along":[131],"ModGuard":[133,218],"we":[134,186,192],"contribute":[135],"complete":[137],"formal":[138],"definition":[139],"entrypoints,":[143],"i.e.,":[144],"method":[146],"implementations":[147],"actually":[151],"allows":[152],"other":[153],"modules":[154,206],"directly":[156],"invoke.":[157],"further":[159],"make":[160],"available":[161],"micro-benchmark":[164],"suite":[165],"MIC9Bench":[166],"show":[168],"effectiveness":[170],"also":[172,215],"current":[173],"shortcomings":[174],"enable":[179],"comparative":[180],"studies":[181],"in":[182,223],"future.":[184],"Finally,":[185],"describe":[187],"case":[189],"study":[190],"conducted":[193],"using":[194],"Apache":[195],"Tomcat,":[196],"shows":[198,216],"migration":[201],"applications":[203],"towards":[204],"Jigsaw":[205],"escaping,":[213],"yet":[214],"effective":[221],"aid":[222],"identifying":[224],"confidentiality":[227],"violations":[228],"instances.":[231]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}