{"id":"https://openalex.org/W3107488247","doi":"https://doi.org/10.1145/3372297.3423360","title":"RTFM! Automatic Assumption Discovery and Verification Derivation from Library Document for API Misuse Detection","display_name":"RTFM! Automatic Assumption Discovery and Verification Derivation from Library Document for API Misuse Detection","publication_year":2020,"publication_date":"2020-10-30","ids":{"openalex":"https://openalex.org/W3107488247","doi":"https://doi.org/10.1145/3372297.3423360","mag":"3107488247"},"language":"en","primary_location":{"id":"doi:10.1145/3372297.3423360","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3372297.3423360","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077734179","display_name":"Tao Lv","orcid":"https://orcid.org/0000-0003-4926-2565"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tao Lv","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020665153","display_name":"Ruishi Li","orcid":"https://orcid.org/0000-0003-2513-1704"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruishi Li","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102017091","display_name":"Yi Yang","orcid":"https://orcid.org/0000-0002-2628-3737"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yi Yang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100437976","display_name":"Kai Chen","orcid":"https://orcid.org/0000-0002-5624-2987"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kai Chen","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084889167","display_name":"Xiaojing Liao","orcid":"https://orcid.org/0000-0001-7555-1673"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaojing Liao","raw_affiliation_strings":["Indiana University Bloomington, Bloomington, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indiana University Bloomington, Bloomington, IN, USA","institution_ids":["https://openalex.org/I4210119109"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100333270","display_name":"Xiaofeng Wang","orcid":"https://orcid.org/0000-0003-4902-7549"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"XiaoFeng Wang","raw_affiliation_strings":["Indiana University Bloomington, Bloomington, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indiana University Bloomington, Bloomington, IN, USA","institution_ids":["https://openalex.org/I4210119109"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054356228","display_name":"Peiwei Hu","orcid":"https://orcid.org/0000-0003-2803-7166"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peiwei Hu","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036446600","display_name":"Luyi Xing","orcid":"https://orcid.org/0000-0002-1036-1163"},"institutions":[{"id":"https://openalex.org/I4210119109","display_name":"Indiana University Bloomington","ror":"https://ror.org/02k40bc56","country_code":"US","type":"education","lineage":["https://openalex.org/I4210119109","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Luyi Xing","raw_affiliation_strings":["Indiana University Bloomington, Bloomington, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indiana University Bloomington, Bloomington, IN, USA","institution_ids":["https://openalex.org/I4210119109"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.3418,"has_fulltext":false,"cited_by_count":27,"citation_normalized_percentile":{"value":0.937472,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1837","last_page":"1852"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8257396221160889},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.7444111108779907},{"id":"https://openalex.org/keywords/misuse-detection","display_name":"Misuse detection","score":0.6019505262374878},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5202987790107727},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.5003728866577148},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4888414740562439},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.4871368110179901},{"id":"https://openalex.org/keywords/null","display_name":"Null (SQL)","score":0.48317185044288635},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.4482991397380829},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.4393380880355835},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.36632204055786133},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.358474999666214},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.33171015977859497},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.24569088220596313},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.18468362092971802}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8257396221160889},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.7444111108779907},{"id":"https://openalex.org/C2776973144","wikidata":"https://www.wikidata.org/wiki/Q6880649","display_name":"Misuse detection","level":4,"score":0.6019505262374878},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5202987790107727},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.5003728866577148},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4888414740562439},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4871368110179901},{"id":"https://openalex.org/C203763787","wikidata":"https://www.wikidata.org/wiki/Q371029","display_name":"Null (SQL)","level":2,"score":0.48317185044288635},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.4482991397380829},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.4393380880355835},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.36632204055786133},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.358474999666214},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.33171015977859497},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.24569088220596313},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.18468362092971802},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.0},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3372297.3423360","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3372297.3423360","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.4399999976158142}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W79696261","https://openalex.org/W1657461476","https://openalex.org/W1832693441","https://openalex.org/W1924770834","https://openalex.org/W1987615754","https://openalex.org/W2019798206","https://openalex.org/W2054520963","https://openalex.org/W2109612250","https://openalex.org/W2118655104","https://openalex.org/W2133378824","https://openalex.org/W2152874840","https://openalex.org/W2153579005","https://openalex.org/W2156515921","https://openalex.org/W2470673105","https://openalex.org/W2471601946","https://openalex.org/W2496223032","https://openalex.org/W2509822438","https://openalex.org/W2575155649","https://openalex.org/W2612622960","https://openalex.org/W2793978524","https://openalex.org/W2879105418","https://openalex.org/W2889326796","https://openalex.org/W2901853653","https://openalex.org/W2955839057","https://openalex.org/W2956307842","https://openalex.org/W2963403868","https://openalex.org/W2964241064","https://openalex.org/W2964370862","https://openalex.org/W2976890614","https://openalex.org/W2998989949","https://openalex.org/W3005870395","https://openalex.org/W3149821397","https://openalex.org/W4289670464","https://openalex.org/W4385245566","https://openalex.org/W6739901393"],"related_works":["https://openalex.org/W2951287487","https://openalex.org/W1570309050","https://openalex.org/W1994829526","https://openalex.org/W2219563043","https://openalex.org/W2212197444","https://openalex.org/W2097100439","https://openalex.org/W1885898241","https://openalex.org/W2389183782","https://openalex.org/W135767600","https://openalex.org/W1525062087"],"abstract_inverted_index":{"To":[0],"use":[1],"library":[2,64],"APIs,":[3],"a":[4,40,63,83,89],"developer":[5],"is":[6,57],"supposed":[7],"to":[8,51,58,96,116],"follow":[9],"guidance":[10],"and":[11,36,49,71,110],"respect":[12],"some":[13],"constraints,":[14],"which":[15],"we":[16],"call":[17],"integration":[18],"assumptions":[19,24],"(IAs).":[20],"Violations":[21],"of":[22,104,112],"these":[23],"can":[25],"have":[26],"serious":[27],"consequences,":[28],"introducing":[29],"security-critical":[30],"flaws":[31],"such":[32],"as":[33],"use-after-free,":[34],"NULL-dereference,":[35],"authentication":[37],"errors.":[38],"Analyzing":[39],"program":[41,84],"for":[42],"compliance":[43],"with":[44,76],"IAs":[45,61,105],"involves":[46],"significant":[47],"effort":[48],"needs":[50,95],"be":[52],"automated.":[53],"A":[54],"promising":[55],"direction":[56],"automatically":[59],"recover":[60],"from":[62,106],"document":[65],"using":[66],"Natural":[67],"Language":[68],"Processing":[69],"(NLP)":[70],"then":[72],"verify":[73],"their":[74,113],"consistency":[75],"the":[77,102],"ways":[78],"APIs":[79],"are":[80],"used":[81],"in":[82],"through":[85],"code":[86],"analysis.":[87],"However,":[88],"practical":[90],"solution":[91],"along":[92],"this":[93],"line":[94],"overcome":[97],"several":[98],"key":[99],"challenges,":[100],"particularly":[101],"discovery":[103],"loosely":[107],"formatted":[108],"documents":[109],"interpretation":[111],"informal":[114],"descriptions":[115],"identify":[117],"complicated":[118],"constraints":[119],"(e.g.,":[120],"data-/control-flow":[121],"relations":[122],"between":[123],"different":[124],"APIs).":[125]},"counts_by_year":[{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}