{"id":"https://openalex.org/W4406247099","doi":"https://doi.org/10.1142/s0218194025500123","title":"A Static Analysis Framework for Investigating Tainted Data Sources in Software Systems","display_name":"A Static Analysis Framework for Investigating Tainted Data Sources in Software Systems","publication_year":2025,"publication_date":"2025-01-10","ids":{"openalex":"https://openalex.org/W4406247099","doi":"https://doi.org/10.1142/s0218194025500123"},"language":"en","primary_location":{"id":"doi:10.1142/s0218194025500123","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194025500123","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5062859241","display_name":"Peng Dai","orcid":"https://orcid.org/0000-0003-1919-2498"},"institutions":[{"id":"https://openalex.org/I4210089621","display_name":"Chizhou University","ror":"https://ror.org/007cx7r28","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210089621"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Dai","raw_affiliation_strings":["Anhui Education Big Data Intelligent Perception and Application Engineering Research Center, Chizhou University, Chizhou 247000, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0000-0003-1919-2498","affiliations":[{"raw_affiliation_string":"Anhui Education Big Data Intelligent Perception and Application Engineering Research Center, Chizhou University, Chizhou 247000, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I4210089621"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xiaoqin Ma","orcid":"https://orcid.org/0009-0007-9428-3505"},"institutions":[{"id":"https://openalex.org/I4210089621","display_name":"Chizhou University","ror":"https://ror.org/007cx7r28","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210089621"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoqin Ma","raw_affiliation_strings":["Anhui Education Big Data Intelligent Perception and Application Engineering Research Center, Chizhou University, Chizhou 247000, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0009-0007-9428-3505","affiliations":[{"raw_affiliation_string":"Anhui Education Big Data Intelligent Perception and Application Engineering Research Center, Chizhou University, Chizhou 247000, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I4210089621"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003372884","display_name":"Zebo Peng","orcid":"https://orcid.org/0000-0002-5137-565X"},"institutions":[{"id":"https://openalex.org/I4210089621","display_name":"Chizhou University","ror":"https://ror.org/007cx7r28","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210089621"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zebo Peng","raw_affiliation_strings":["Anhui Provincial Joint Construction Key Laboratory of Intelligent Education Equipment and Technology, Chizhou 247000, P.\u00a0R.\u00a0China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Anhui Provincial Joint Construction Key Laboratory of Intelligent Education Equipment and Technology, Chizhou 247000, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I4210089621"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Chen Zhao","orcid":"https://orcid.org/0000-0001-8614-5080"},"institutions":[{"id":"https://openalex.org/I159389169","display_name":"Ningbo University of Technology","ror":"https://ror.org/037dym702","country_code":"CN","type":"education","lineage":["https://openalex.org/I159389169"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen Zhao","raw_affiliation_strings":["School of Cyber Science and Engineering, Ningbo University of Technology, Ningbo 315211, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0000-0001-8614-5080","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Ningbo University of Technology, Ningbo 315211, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I159389169"]}]},{"author_position":"last","author":{"id":null,"display_name":"Qianjin Zhang","orcid":"https://orcid.org/0000-0001-6263-7144"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qianjin Zhang","raw_affiliation_strings":["State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing 100876, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0000-0001-6263-7144","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing 100876, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I139759216"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.0314,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.95191787,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"35","issue":"04","first_page":"469","last_page":"501"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9876999855041504,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6740990877151489},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.5059735178947449},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4771539568901062},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.426422119140625},{"id":"https://openalex.org/keywords/software-system","display_name":"Software system","score":0.42098939418792725},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2654910683631897}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6740990877151489},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.5059735178947449},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4771539568901062},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.426422119140625},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.42098939418792725},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2654910683631897}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1142/s0218194025500123","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194025500123","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W1514171102","https://openalex.org/W2017025011","https://openalex.org/W2027091066","https://openalex.org/W2049309502","https://openalex.org/W2060692877","https://openalex.org/W2089745089","https://openalex.org/W2108747667","https://openalex.org/W2134633067","https://openalex.org/W2147088720","https://openalex.org/W2292865721","https://openalex.org/W2469491375","https://openalex.org/W2803054784","https://openalex.org/W2930019028","https://openalex.org/W2955422324","https://openalex.org/W2980999875","https://openalex.org/W3014271897","https://openalex.org/W3015326774","https://openalex.org/W3025451187","https://openalex.org/W3116329275","https://openalex.org/W3154138117","https://openalex.org/W3212807278","https://openalex.org/W4220837647","https://openalex.org/W4240951837","https://openalex.org/W4244726870","https://openalex.org/W4245027182","https://openalex.org/W4324130791","https://openalex.org/W4375928559"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2367207301","https://openalex.org/W2164098295","https://openalex.org/W4294754599"],"abstract_inverted_index":{"One":[0],"of":[1,47,54,91,97,116,157],"the":[2,24,28,45,52,88,95,114,121,125,155,162,177,188,194],"most":[3],"effective":[4],"methods":[5,64],"for":[6,140,169,183,209],"detecting":[7],"software":[8,15,48],"security":[9],"vulnerabilities":[10,110],"is":[11,77,174,180,191,197],"taint":[12,25,68,98,127,135,171,185,203,211],"analysis.":[13,99,212],"Some":[14],"defects":[16,49],"originate":[17],"from":[18,32],"certain":[19],"external":[20],"input":[21,118],"data.":[22],"Analyzing":[23],"sources":[26,34],"and":[27,50,61,83,176,193],"data":[29,119],"flow":[30],"propagation":[31,73,204],"these":[33],"to":[35,65,109],"defect":[36],"points":[37],"through":[38],"static":[39,134],"analysis":[40,63,129,137,158,164,173],"can":[41,201],"help":[42],"us":[43],"understand":[44],"causes":[46],"reduce":[51],"difficulty":[53],"debugging":[55],"them.":[56],"This":[57,100],"paper":[58],"combines":[59],"intraprocedural":[60],"interprocedural":[62,184],"obtain":[66],"global":[67,126],"source":[69,128,136,172,186],"information.":[70],"A":[71],"novel":[72],"path":[74],"calculation":[75],"algorithm":[76],"proposed,":[78],"incorporating":[79],"predecessor":[80],"node":[81],"computation":[82],"alias":[84],"analysis,":[85,187],"effectively":[86],"reducing":[87],"negative":[89],"impact":[90,115],"irrelevant":[92],"code":[93],"on":[94,120,124,147],"performance":[96],"method":[101],"not":[102],"only":[103],"helps":[104],"detect":[105],"errors":[106],"that":[107,152],"lead":[108],"but":[111],"also":[112],"analyzes":[113],"vulnerable":[117],"system.":[122],"Based":[123],"algorithm,":[130],"we":[131],"developed":[132],"a":[133],"prototype":[138],"tool":[139],"C":[141],"programs,":[142],"called":[143],"AWsTS.":[144],"Experiments":[145],"conducted":[146],"five":[148],"open-source":[149],"projects":[150],"show":[151],"AWsTS":[153,200],"improves":[154],"accuracy":[156],"results":[159],"without":[160],"increasing":[161],"required":[163],"time.":[165],"The":[166],"average":[167,178,189,195],"precision":[168,190],"intra-procedural":[170],"93.4%,":[175],"recall":[179,196],"90.2%.":[181],"Similarly,":[182],"87.6%,":[192],"84.9%.":[198],"Additionally,":[199],"output":[202],"paths,":[205],"providing":[206],"valuable":[207],"support":[208],"further":[210]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-16T13:24:37.021932","created_date":"2025-10-10T00:00:00"}