{"id":"https://openalex.org/W4411484393","doi":"https://doi.org/10.1109/svm66695.2025.00009","title":"An Exploratory Study of Security Vulnerabilities in Machine Learning Deployment Projects","display_name":"An Exploratory Study of Security Vulnerabilities in Machine Learning Deployment Projects","publication_year":2025,"publication_date":"2025-05-03","ids":{"openalex":"https://openalex.org/W4411484393","doi":"https://doi.org/10.1109/svm66695.2025.00009"},"language":"en","primary_location":{"id":"doi:10.1109/svm66695.2025.00009","is_oa":false,"landing_page_url":"https://doi.org/10.1109/svm66695.2025.00009","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM 3rd International Workshop on Software Vulnerability Management (SVM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069063267","display_name":"Akond Rahman","orcid":"https://orcid.org/0000-0002-5056-757X"},"institutions":[{"id":"https://openalex.org/I82497590","display_name":"Auburn University","ror":"https://ror.org/02v80fc35","country_code":"US","type":"education","lineage":["https://openalex.org/I82497590"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Akond Rahman","raw_affiliation_strings":["Auburn University,AL,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Auburn University,AL,USA","institution_ids":["https://openalex.org/I82497590"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026440046","display_name":"Anthony Skjellum","orcid":"https://orcid.org/0000-0001-5252-6600"},"institutions":[{"id":"https://openalex.org/I63920570","display_name":"Tennessee Technological University","ror":"https://ror.org/05drmrq39","country_code":"US","type":"education","lineage":["https://openalex.org/I63920570"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anthony Skjellum","raw_affiliation_strings":["Tennessee Tech University,TN,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tennessee Tech University,TN,USA","institution_ids":["https://openalex.org/I63920570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100333788","display_name":"Yue Zhang","orcid":"https://orcid.org/0000-0003-2128-8472"},"institutions":[{"id":"https://openalex.org/I63920570","display_name":"Tennessee Technological University","ror":"https://ror.org/05drmrq39","country_code":"US","type":"education","lineage":["https://openalex.org/I63920570"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yue Zhang","raw_affiliation_strings":["Tennessee Tech University,TN,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tennessee Tech University,TN,USA","institution_ids":["https://openalex.org/I63920570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.15065985,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"33","last_page":"36"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9667999744415283,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9667999744415283,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9017999768257141,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.8045281767845154},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6712536215782166},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6548572182655334},{"id":"https://openalex.org/keywords/exploratory-research","display_name":"Exploratory research","score":0.48730432987213135},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.14671218395233154}],"concepts":[{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.8045281767845154},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6712536215782166},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6548572182655334},{"id":"https://openalex.org/C85973986","wikidata":"https://www.wikidata.org/wiki/Q1091731","display_name":"Exploratory research","level":2,"score":0.48730432987213135},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.14671218395233154},{"id":"https://openalex.org/C19165224","wikidata":"https://www.wikidata.org/wiki/Q23404","display_name":"Anthropology","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/svm66695.2025.00009","is_oa":false,"landing_page_url":"https://doi.org/10.1109/svm66695.2025.00009","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM 3rd International Workshop on Software Vulnerability Management (SVM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2163362445","https://openalex.org/W2164777277","https://openalex.org/W2572504188","https://openalex.org/W2964040431","https://openalex.org/W3104128335","https://openalex.org/W3121354948","https://openalex.org/W3214785090","https://openalex.org/W4220908965","https://openalex.org/W4295846662","https://openalex.org/W4311491592","https://openalex.org/W4377235553","https://openalex.org/W4384026546","https://openalex.org/W4388212678","https://openalex.org/W4401635890"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2770234245","https://openalex.org/W96612179","https://openalex.org/W4229499248","https://openalex.org/W2566006169","https://openalex.org/W1567818861","https://openalex.org/W2987774938","https://openalex.org/W4256492088"],"abstract_inverted_index":{"Machine":[0],"learning":[1],"(ML)":[2],"deployment":[3,16,28,47,66,73,122],"projects":[4,17,24,48,67],"are":[5,87],"used":[6,49,118,139],"by":[7,50,128],"practitioners":[8,135],"to":[9,31,44,68,101,116],"automatically":[10],"deploy":[11],"ML":[12,15,27,46,65,72,103,121],"models.":[13],"While":[14],"aid":[18,40],"practitioners,":[19],"security":[20,32],"vulnerabilities":[21,38,59,70,86],"in":[22,41,71,119],"these":[23],"can":[25,39],"make":[26],"infrastructure":[29],"susceptible":[30],"attacks.":[33],"A":[34],"systematic":[35],"characterization":[36],"of":[37,83,96,132],"identifying":[42],"activities":[43],"secure":[45],"practitioners.":[51],"We":[52,124],"conduct":[53],"an":[54],"empirical":[55,77],"study":[56],"with":[57],"149":[58,85],"mined":[60],"from":[61],"12":[62],"open":[63],"source":[64],"characterize":[69],"projects.":[74,123],"From":[75],"our":[76,126,141],"study,":[78],"we":[79],"(i)":[80],"find":[81],"68":[82],"the":[84,120],"critically":[88],"or":[89],"highly":[90],"severe;":[91],"(ii)":[92],"derive":[93],"10":[94],"consequences":[95],"vulnerabilities,":[97],"e.g.,":[98],"unauthorized":[99],"access":[100],"trigger":[102],"deployments;":[104],"and":[105,136],"(iii)":[106],"observe":[107],"established":[108],"quality":[109],"assurance":[110],"activities,":[111],"such":[112],"as":[113],"code":[114],"review":[115],"be":[117],"conclude":[125],"paper":[127,142],"providing":[129],"a":[130],"set":[131],"recommendations":[133],"for":[134,140],"researchers.":[137],"Dataset":[138],"is":[143],"available":[144],"online.":[145]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}