{"id":"https://openalex.org/W2961642335","doi":"https://doi.org/10.1145/3293882.3330556","title":"Codebase-adaptive detection of security-relevant methods","display_name":"Codebase-adaptive detection of security-relevant methods","publication_year":2019,"publication_date":"2019-07-10","ids":{"openalex":"https://openalex.org/W2961642335","doi":"https://doi.org/10.1145/3293882.3330556","mag":"2961642335"},"language":"en","primary_location":{"id":"doi:10.1145/3293882.3330556","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3293882.3330556","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077569016","display_name":"Goran Piskachev","orcid":"https://orcid.org/0000-0003-4424-5838"},"institutions":[{"id":"https://openalex.org/I4210093498","display_name":"Fraunhofer Institute for Mechatronic Systems Design","ror":"https://ror.org/004nttc42","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210093498","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Goran Piskachev","raw_affiliation_strings":["Fraunhofer IEM, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer IEM, Germany","institution_ids":["https://openalex.org/I4210093498"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037366470","display_name":"Lisa Nguyen Quang","orcid":"https://orcid.org/0000-0003-3146-7968"},"institutions":[{"id":"https://openalex.org/I206945453","display_name":"Paderborn University","ror":"https://ror.org/058kzsd48","country_code":"DE","type":"education","lineage":["https://openalex.org/I206945453"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Lisa Nguyen Quang Do","raw_affiliation_strings":["University of Paderborn, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Paderborn, Germany","institution_ids":["https://openalex.org/I206945453"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076678278","display_name":"Eric Bodden","orcid":"https://orcid.org/0000-0003-3470-3647"},"institutions":[{"id":"https://openalex.org/I206945453","display_name":"Paderborn University","ror":"https://ror.org/058kzsd48","country_code":"DE","type":"education","lineage":["https://openalex.org/I206945453"]},{"id":"https://openalex.org/I4210093498","display_name":"Fraunhofer Institute for Mechatronic Systems Design","ror":"https://ror.org/004nttc42","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210093498","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Eric Bodden","raw_affiliation_strings":["University of Paderborn, Germany / Fraunhofer IEM, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Paderborn, Germany / Fraunhofer IEM, Germany","institution_ids":["https://openalex.org/I206945453","https://openalex.org/I4210093498"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.4145,"has_fulltext":false,"cited_by_count":22,"citation_normalized_percentile":{"value":0.89996433,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"181","last_page":"191"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/codebase","display_name":"Codebase","score":0.8912534713745117},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8537857532501221},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.6998721361160278},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.6414686441421509},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.5805993676185608},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5265381932258606},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.4265984892845154},{"id":"https://openalex.org/keywords/static-program-analysis","display_name":"Static program analysis","score":0.42323988676071167},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.42128604650497437},{"id":"https://openalex.org/keywords/call-graph","display_name":"Call graph","score":0.41356319189071655},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3306666314601898},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.31418636441230774},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.24600404500961304},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.23261168599128723},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.16269508004188538},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.12453451752662659}],"concepts":[{"id":"https://openalex.org/C51929080","wikidata":"https://www.wikidata.org/wiki/Q2425187","display_name":"Codebase","level":3,"score":0.8912534713745117},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8537857532501221},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.6998721361160278},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.6414686441421509},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5805993676185608},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5265381932258606},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.4265984892845154},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.42323988676071167},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.42128604650497437},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.41356319189071655},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3306666314601898},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.31418636441230774},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.24600404500961304},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.23261168599128723},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.16269508004188538},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.12453451752662659},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3293882.3330556","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3293882.3330556","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},{"id":"mag:3163666125","is_oa":false,"landing_page_url":"https://jglobal.jst.go.jp/en/detail?JGLOBAL_ID=202002246825382838","pdf_url":null,"source":{"id":"https://openalex.org/S4306500161","display_name":"ACM Proceedings","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":"ACM Proceedings","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6100000143051147,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1525731446","https://openalex.org/W1536265389","https://openalex.org/W1915915253","https://openalex.org/W1966143594","https://openalex.org/W1989479444","https://openalex.org/W1996197144","https://openalex.org/W2021235830","https://openalex.org/W2025268205","https://openalex.org/W2100553995","https://openalex.org/W2112081648","https://openalex.org/W2113709047","https://openalex.org/W2159613309","https://openalex.org/W2164403446","https://openalex.org/W2164777277","https://openalex.org/W2166743230","https://openalex.org/W2620899025","https://openalex.org/W2625788084","https://openalex.org/W2693129777","https://openalex.org/W2735026211","https://openalex.org/W2767389543","https://openalex.org/W2784876765","https://openalex.org/W2794648377","https://openalex.org/W2796056969","https://openalex.org/W2900918122","https://openalex.org/W2901387825","https://openalex.org/W3214785274","https://openalex.org/W4238623774","https://openalex.org/W4239249613","https://openalex.org/W4245985716","https://openalex.org/W4248587618","https://openalex.org/W4285719527","https://openalex.org/W4411337147"],"related_works":["https://openalex.org/W2141388993","https://openalex.org/W1978034799","https://openalex.org/W1981466760","https://openalex.org/W1486481742","https://openalex.org/W4226391422","https://openalex.org/W2106371080","https://openalex.org/W4321227771","https://openalex.org/W2809528855","https://openalex.org/W2504614904","https://openalex.org/W2052691027"],"abstract_inverted_index":{"More":[0],"and":[1,27,92,124],"more":[2],"companies":[3],"use":[4],"static":[5],"analysis":[6,139],"to":[7,12,21,43,53,68,87,120,125,135,141,162,178],"perform":[8],"regular":[9],"code":[10,55,122],"reviews":[11],"detect":[13,22,88],"security":[14],"vulnerabilities":[15,28],"in":[16,64],"their":[17],"code,":[18],"configuring":[19],"them":[20],"various":[23],"types":[24],"of":[25,107,155],"bugs":[26],"such":[29,41],"as":[30,45,47],"the":[31,36,54,72,101,108,115,121,143,176],"SANS":[32,109],"top":[33,38,110],"25":[34],"or":[35,160],"OWASP":[37],"10.":[39],"For":[40],"analyses":[42,70],"be":[44,51],"precise":[46],"possible,":[48],"they":[49,57],"must":[50],"adapted":[52],"base":[56,123],"scan.":[58],"The":[59],"particular":[60],"challenge":[61],"we":[62,129],"address":[63],"this":[65],"paper":[66],"is":[67,158],"provide":[69],"with":[71],"correct":[73],"security-relevant":[74],"methods":[75,94],"(Srm):":[76],"sources,":[77,89],"sinks,":[78,90],"etc.":[79],"We":[80],"present":[81],"SWAN,":[82],"a":[83,171],"fully-automated":[84],"machine-learning":[85],"approach":[86],"validators,":[91],"authentication":[93],"for":[95],"Java":[96,148],"programs.":[97],"SWAN":[98,119,136,150],"further":[99,113],"classifies":[100],"Srm":[102],"into":[103],"specific":[104],"vulnerability":[105],"classes":[106],"25.":[111],"To":[112],"adapt":[114],"lists":[116],"detected":[117],"by":[118],"improve":[126,180],"its":[127,181],"precision,":[128],"also":[130],"introduce":[131],"SWANAssist,":[132],"an":[133,152],"extension":[134],"that":[137,168],"allows":[138],"users":[140],"refine":[142],"classifications.":[144],"On":[145],"twelve":[146],"popular":[147],"frameworks,":[149],"achieves":[151],"average":[153],"precision":[154],"0.826,":[156],"which":[157],"better":[159],"comparable":[161],"existing":[163],"approaches.":[164],"Our":[165],"experiments":[166],"show":[167],"SWANAssist":[169],"requires":[170],"relatively":[172],"low":[173],"effort":[174],"from":[175],"developer":[177],"significantly":[179],"precision.":[182]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":4},{"year":2019,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}