{"id":"https://openalex.org/W1568390596","doi":"https://doi.org/10.1145/1809100.1809104","title":"Using semantic templates to study vulnerabilities recorded in large software repositories","display_name":"Using semantic templates to study vulnerabilities recorded in large software repositories","publication_year":2010,"publication_date":"2010-05-02","ids":{"openalex":"https://openalex.org/W1568390596","doi":"https://doi.org/10.1145/1809100.1809104","mag":"1568390596"},"language":"en","primary_location":{"id":"doi:10.1145/1809100.1809104","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1809100.1809104","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2010 ICSE Workshop on Software Engineering for Secure Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101719371","display_name":"Yan Wu","orcid":"https://orcid.org/0000-0003-2106-4225"},"institutions":[{"id":"https://openalex.org/I122266389","display_name":"University of Nebraska at Omaha","ror":"https://ror.org/04yrkc140","country_code":"US","type":"education","lineage":["https://openalex.org/I122266389"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Yan Wu","raw_affiliation_strings":["University of Nebraska at Omaha"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Nebraska at Omaha","institution_ids":["https://openalex.org/I122266389"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Robin A. Gandhi","orcid":null},"institutions":[{"id":"https://openalex.org/I122266389","display_name":"University of Nebraska at Omaha","ror":"https://ror.org/04yrkc140","country_code":"US","type":"education","lineage":["https://openalex.org/I122266389"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robin A. Gandhi","raw_affiliation_strings":["University of Nebraska at Omaha"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Nebraska at Omaha","institution_ids":["https://openalex.org/I122266389"]}]},{"author_position":"last","author":{"id":null,"display_name":"Harvey Siy","orcid":null},"institutions":[{"id":"https://openalex.org/I122266389","display_name":"University of Nebraska at Omaha","ror":"https://ror.org/04yrkc140","country_code":"US","type":"education","lineage":["https://openalex.org/I122266389"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Harvey Siy","raw_affiliation_strings":["University of Nebraska at Omaha"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Nebraska at Omaha","institution_ids":["https://openalex.org/I122266389"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5101719371"],"corresponding_institution_ids":["https://openalex.org/I122266389"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"22","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9786999821662903,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9729999899864197,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6945993304252625},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.48328855633735657},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.21169009804725647}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6945993304252625},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.48328855633735657},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.21169009804725647}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1809100.1809104","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1809100.1809104","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2010 ICSE Workshop on Software Engineering for Secure Systems","raw_type":"proceedings-article"},{"id":"mag:1568390596","is_oa":false,"landing_page_url":"https://eric.ed.gov/?id=ED535680","pdf_url":null,"source":{"id":"https://openalex.org/S4306478302","display_name":"ProQuest LLC eBooks","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"ebook platform"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":"ProQuest LLC eBooks","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","score":0.49000000953674316,"id":"https://metadata.un.org/sdg/10"}],"awards":[{"id":"https://openalex.org/G4049605708","display_name":null,"funder_award_id":"FA9550-07-1-0499","funder_id":"https://openalex.org/F4320338279","funder_display_name":"Air Force Office of Scientific Research"},{"id":"https://openalex.org/G5803606680","display_name":null,"funder_award_id":"FA9550-07-1-0499","funder_id":"https://openalex.org/F4320306078","funder_display_name":"U.S. Department of Defense"},{"id":"https://openalex.org/G7529530169","display_name":null,"funder_award_id":"FA9550-07-1-0499","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306078","display_name":"U.S. Department of Defense","ror":"https://ror.org/0447fe631"},{"id":"https://openalex.org/F4320338279","display_name":"Air Force Office of Scientific Research","ror":"https://ror.org/011e9bt93"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W1531064568","https://openalex.org/W2046897614","https://openalex.org/W2049828091","https://openalex.org/W2077797310","https://openalex.org/W2133345877","https://openalex.org/W2133464983","https://openalex.org/W2137079713","https://openalex.org/W2149321161"],"related_works":["https://openalex.org/W3168706341","https://openalex.org/W2017432166","https://openalex.org/W2029544555","https://openalex.org/W2011657963","https://openalex.org/W2398896409","https://openalex.org/W1972338538","https://openalex.org/W2367020906","https://openalex.org/W2903863335","https://openalex.org/W2768572949","https://openalex.org/W2087187521","https://openalex.org/W1965313825","https://openalex.org/W2075206141","https://openalex.org/W1968476270","https://openalex.org/W2122381903","https://openalex.org/W2808503686","https://openalex.org/W2005492920","https://openalex.org/W2165174014","https://openalex.org/W1561291302","https://openalex.org/W3141104967","https://openalex.org/W2130914945"],"abstract_inverted_index":{"Software":[0],"repositories":[1],"are":[2,118],"rich":[3],"sources":[4],"of":[5,48,55,71,79,97,129,156],"information":[6,18,102],"about":[7],"vulnerabilities":[8,80,111,157],"that":[9],"occur":[10],"during":[11],"a":[12,29,52,83,91],"product's":[13],"lifecycle.":[14],"Although":[15],"available,":[16],"such":[17],"is":[19,99],"scattered":[20],"across":[21,34],"numerous":[22],"databases.":[23],"Furthermore,":[24],"in":[25,51,82,103,115,139,158],"large":[26],"software":[27,56,73,84,141],"repositories,":[28],"single":[30],"vulnerability":[31,49,98],"may":[32],"span":[33],"multiple":[35],"components":[36,74],"and":[37,112,148],"have":[38],"multidimensional":[39],"interactions":[40],"with":[41,120],"other":[42,136],"vulnerabilities.":[43],"Thus,":[44],"identifying":[45],"the":[46,104,116,123,127,130,140,159],"patterns":[47],"occurrence":[50],"larger":[53],"context":[54],"development":[57],"continues":[58],"to":[59],"be":[60,143],"an":[61,76],"open":[62],"problem.":[63],"Here":[64],"we":[65],"present":[66,151],"findings":[67],"from":[68,101,122,153],"our":[69,154],"study":[70,155],"vulnerable":[72],"using":[75],"ontology-guided":[77],"analysis":[78],"recorded":[81],"project's":[85],"code":[86],"repository.":[87],"In":[88],"this":[89],"approach,":[90],"semantic":[92],"template":[93],"for":[94,145],"each":[95],"type":[96],"created":[100],"Common":[105],"Weakness":[106],"Enumeration":[107],"dictionary.":[108],"Next,":[109],"known":[110],"related":[113],"concepts":[114,121],"repository":[117],"tagged":[119],"template.":[124],"Based":[125],"on":[126],"characteristics":[128],"resources":[131,138],"affected":[132],"by":[133],"these":[134],"vulnerabilities,":[135],"similar":[137],"can":[142],"identified":[144],"closer":[146],"inspection":[147],"verification.":[149],"We":[150],"results":[152],"Apache":[160],"web":[161],"server.":[162]},"counts_by_year":[{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}