{"id":"https://openalex.org/W4386025619","doi":"https://doi.org/10.1109/tse.2023.3301660","title":"Runtime Verification of Crypto APIs: An Empirical Study","display_name":"Runtime Verification of Crypto APIs: An Empirical Study","publication_year":2023,"publication_date":"2023-08-21","ids":{"openalex":"https://openalex.org/W4386025619","doi":"https://doi.org/10.1109/tse.2023.3301660"},"language":"en","primary_location":{"id":"doi:10.1109/tse.2023.3301660","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2023.3301660","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078465653","display_name":"Adriano Torres","orcid":"https://orcid.org/0000-0003-3754-029X"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Adriano Torres","raw_affiliation_strings":["Computer Science Department, University of Bras&#x00ED;lia, Bras&#x00ED;lia, Brazil"],"affiliations":[{"raw_affiliation_string":"Computer Science Department, University of Bras&#x00ED;lia, Bras&#x00ED;lia, Brazil","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014939992","display_name":"Pedro Henrique Teixeira Costa","orcid":"https://orcid.org/0000-0002-8385-8314"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pedro Costa","raw_affiliation_strings":["Computer Science Department, University of Bras&#x00ED;lia, Bras&#x00ED;lia, Brazil"],"affiliations":[{"raw_affiliation_string":"Computer Science Department, University of Bras&#x00ED;lia, Bras&#x00ED;lia, Brazil","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011909226","display_name":"Lu\u00eds Henrique Vieira Amaral","orcid":"https://orcid.org/0000-0003-1236-3119"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luis Amaral","raw_affiliation_strings":["Computer Science Department, University of Bras&#x00ED;lia, Bras&#x00ED;lia, Brazil"],"affiliations":[{"raw_affiliation_string":"Computer Science Department, University of Bras&#x00ED;lia, Bras&#x00ED;lia, Brazil","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092807459","display_name":"Jonata Pastro","orcid":"https://orcid.org/0009-0007-5328-9011"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jonata Pastro","raw_affiliation_strings":["Computer Science Department, University of Bras&#x00ED;lia, Bras&#x00ED;lia, Brazil"],"affiliations":[{"raw_affiliation_string":"Computer Science Department, University of Bras&#x00ED;lia, Bras&#x00ED;lia, Brazil","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021715300","display_name":"Rodrigo Bonif\u00e1cio","orcid":"https://orcid.org/0000-0002-2380-2829"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rodrigo Bonif\u00e1cio","raw_affiliation_strings":["Computer Science Department, University of Bras&#x00ED;lia, Bras&#x00ED;lia, Brazil"],"affiliations":[{"raw_affiliation_string":"Computer Science Department, University of Bras&#x00ED;lia, Bras&#x00ED;lia, Brazil","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020353093","display_name":"Marcelo d\u2019Amorim","orcid":"https://orcid.org/0000-0002-1323-8769"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]},{"id":"https://openalex.org/I25112270","display_name":"Universidade Federal de Pernambuco","ror":"https://ror.org/047908t24","country_code":"BR","type":"education","lineage":["https://openalex.org/I25112270"]}],"countries":["BR","US"],"is_corresponding":false,"raw_author_name":"Marcelo d'Amorim","raw_affiliation_strings":["Department of Computer Science, North Carolina State University, Raleigh, NC, USA","Informatics Center, Federal University of Pernambuco, Recife, Brazil"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]},{"raw_affiliation_string":"Informatics Center, Federal University of Pernambuco, Recife, Brazil","institution_ids":["https://openalex.org/I25112270"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070516536","display_name":"Owolabi Legunsen","orcid":"https://orcid.org/0000-0001-5631-4816"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Owolabi Legunsen","raw_affiliation_strings":["Department of Computer Science, Cornell University, Ithaca, NY, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Cornell University, Ithaca, NY, USA","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076678278","display_name":"Eric Bodden","orcid":"https://orcid.org/0000-0003-3470-3647"},"institutions":[{"id":"https://openalex.org/I206945453","display_name":"Paderborn University","ror":"https://ror.org/058kzsd48","country_code":"DE","type":"education","lineage":["https://openalex.org/I206945453"]},{"id":"https://openalex.org/I4210093498","display_name":"Fraunhofer Institute for Mechatronic Systems Design","ror":"https://ror.org/004nttc42","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210093498","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Eric Bodden","raw_affiliation_strings":["Paderborn University and the Fraunhofer Institute for Mechatronic Systems Design, Paderborn, Germany"],"affiliations":[{"raw_affiliation_string":"Paderborn University and the Fraunhofer Institute for Mechatronic Systems Design, Paderborn, Germany","institution_ids":["https://openalex.org/I4210093498","https://openalex.org/I206945453"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000905065","display_name":"Edna Dias Canedo","orcid":"https://orcid.org/0000-0002-2159-339X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Edna Dias Canedo","raw_affiliation_strings":["Computer Science Department, University of Bras&#x00ED;lia, Bras&#x00ED;lia, Brazil"],"affiliations":[{"raw_affiliation_string":"Computer Science Department, University of Bras&#x00ED;lia, Bras&#x00ED;lia, Brazil","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":9,"corresponding_author_ids":["https://openalex.org/A5078465653"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.7924,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.71351519,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"49","issue":"10","first_page":"4510","last_page":"4525"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8205074071884155},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.5860602259635925},{"id":"https://openalex.org/keywords/software-bug","display_name":"Software bug","score":0.5681273341178894},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.5480998158454895},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5402749180793762},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.43906232714653015},{"id":"https://openalex.org/keywords/notation","display_name":"Notation","score":0.42914968729019165},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3221052289009094},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.27072346210479736},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.08577066659927368}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8205074071884155},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5860602259635925},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.5681273341178894},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5480998158454895},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5402749180793762},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.43906232714653015},{"id":"https://openalex.org/C45357846","wikidata":"https://www.wikidata.org/wiki/Q2001982","display_name":"Notation","level":2,"score":0.42914968729019165},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3221052289009094},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.27072346210479736},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.08577066659927368},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tse.2023.3301660","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2023.3301660","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},{"id":"pmh:oai:publica.fraunhofer.de:publica/506295","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/506295","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"journal article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5799999833106995}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":67,"referenced_works":["https://openalex.org/W93306303","https://openalex.org/W209133351","https://openalex.org/W589443784","https://openalex.org/W830431287","https://openalex.org/W1414322427","https://openalex.org/W1565745194","https://openalex.org/W1847288881","https://openalex.org/W2004605637","https://openalex.org/W2008810193","https://openalex.org/W2045057497","https://openalex.org/W2108632968","https://openalex.org/W2114987070","https://openalex.org/W2132852010","https://openalex.org/W2154693288","https://openalex.org/W2164119561","https://openalex.org/W2166743230","https://openalex.org/W2209872464","https://openalex.org/W2248459344","https://openalex.org/W2253074222","https://openalex.org/W2269664735","https://openalex.org/W2293618135","https://openalex.org/W2357927175","https://openalex.org/W2400063502","https://openalex.org/W2464018720","https://openalex.org/W2477215876","https://openalex.org/W2511368574","https://openalex.org/W2527840540","https://openalex.org/W2537005174","https://openalex.org/W2604673637","https://openalex.org/W2605138103","https://openalex.org/W2698406033","https://openalex.org/W2755572540","https://openalex.org/W2767943400","https://openalex.org/W2795452229","https://openalex.org/W2893210661","https://openalex.org/W2897859437","https://openalex.org/W2913912901","https://openalex.org/W2921794460","https://openalex.org/W2946413635","https://openalex.org/W2951461268","https://openalex.org/W2963893085","https://openalex.org/W2964144088","https://openalex.org/W2972786937","https://openalex.org/W2973035781","https://openalex.org/W2984297109","https://openalex.org/W2985320478","https://openalex.org/W2989932676","https://openalex.org/W3039516369","https://openalex.org/W3048026305","https://openalex.org/W3091299963","https://openalex.org/W3094062523","https://openalex.org/W3095312267","https://openalex.org/W3100228586","https://openalex.org/W3136521622","https://openalex.org/W3145806289","https://openalex.org/W3153576810","https://openalex.org/W3166106713","https://openalex.org/W3182110757","https://openalex.org/W3203801049","https://openalex.org/W4200634422","https://openalex.org/W4211233231","https://openalex.org/W4225326198","https://openalex.org/W4232095179","https://openalex.org/W6623213150","https://openalex.org/W6682710486","https://openalex.org/W6736443099","https://openalex.org/W6785589684"],"related_works":["https://openalex.org/W3196559688","https://openalex.org/W2898686857","https://openalex.org/W2131032015","https://openalex.org/W2125343911","https://openalex.org/W4250848060","https://openalex.org/W4233410239","https://openalex.org/W2142890871","https://openalex.org/W2078393527","https://openalex.org/W2888223970","https://openalex.org/W4384302888"],"abstract_inverted_index":{"Misuse":[0],"of":[1,9,41,50,83,122,129,167,187],"cryptographic":[2],"(crypto)":[3],"APIs":[4],"is":[5,151,194],"a":[6,48,55,104],"noteworthy":[7],"cause":[8],"security":[10],"vulnerabilities.":[11],"For":[12],"this":[13,44],"reason,":[14],"static":[15,42,105,205],"analyzers":[16],"were":[17],"recently":[18],"proposed":[19],"for":[20,58,78,175,196,213],"detecting":[21,197,214],"crypto":[22,59,92,132,198,215],"API":[23,60,93,133,199,216],"misuses.":[24,200,217],"They":[25],"differ":[26],"in":[27,103,114,147,156],"strengths":[28,184],"and":[29,31,76,94,138,150,173,178,185,190,206],"weaknesses,":[30],"they":[32],"might":[33],"miss":[34],"bugs.":[35],"Motivated":[36],"by":[37],"the":[38,80,89,120,157,183],"inherent":[39],"limitations":[40,186],"analyzers,":[43],"article":[45],"reports":[46],"on":[47,88,100,152],"study":[49],"runtime":[51],"verification":[52],"(RV)":[53],"as":[54],"dynamic-analysis-based":[56],"alternative":[57],"misuse":[61],"detection.":[62],"RV":[63,97,193],"monitors":[64],"program":[65],"runs":[66],"against":[67],"formal":[68],"specifications;":[69],"it":[70],"was":[71],"shown":[72],"to":[73],"be":[74],"effective":[75,195],"efficient":[77],"amplifying":[79],"bug-finding":[81],"ability":[82],"software":[84],"tests.":[85],"We":[86,107,181,201],"focus":[87],"popular":[90],"JCA":[91],"write":[95],"22":[96],"specifications":[98,110],"based":[99],"expert-validated":[101],"rules":[102],"analyzer.":[106],"monitor":[108],"these":[109,188],"while":[111],"running":[112],"tests":[113],"five":[115],"benchmarks.":[116],"Lastly,":[117],"we":[118],"compare":[119],"accuracy":[121,146],"our":[123],"RV-based":[124],"approach,":[125],"RVSec,":[126],"with":[127,154,170],"those":[128],"three":[130],"state-of-the-art":[131],"misuses":[134],"detectors:":[135],"CogniCrypt,":[136,176],"CryptoGuard,":[137,177],"CryLogger.":[139],"Results":[140],"show":[141,191],"that":[142,192],"RVSec":[143,160],"has":[144],"higher":[145],"four":[148],"benchmarks":[149],"par":[153],"CryptoGuard":[155],"fifth.":[158],"Overall,":[159],"achieves":[161],"an":[162],"average":[163],"<inline-formula><tex-math":[164],"notation=\"LaTeX\">${\\boldsymbol{F}}_{1}$</tex-math></inline-formula>":[165],"measure":[166],"95%,":[168],"compared":[169],"83%,":[171],"78%,":[172],"86%":[174],"CryLogger,":[179],"respectively.":[180],"highlight":[182],"tools":[189],"also":[202],"discuss":[203],"how":[204],"dynamic":[207],"analysis":[208],"can":[209],"complement":[210],"each":[211],"other":[212]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}