{"id":"https://openalex.org/W3035018584","doi":"https://doi.org/10.1145/3377811.3380438","title":"Heaps'n leaks","display_name":"Heaps'n leaks","publication_year":2020,"publication_date":"2020-06-27","ids":{"openalex":"https://openalex.org/W3035018584","doi":"https://doi.org/10.1145/3377811.3380438","mag":"3035018584"},"language":"en","primary_location":{"id":"doi:10.1145/3377811.3380438","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3377811.3380438","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM/IEEE 42nd International Conference on Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://zenodo.org/record/3627973","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063721439","display_name":"Manuel Benz","orcid":null},"institutions":[{"id":"https://openalex.org/I206945453","display_name":"Paderborn University","ror":"https://ror.org/058kzsd48","country_code":"DE","type":"education","lineage":["https://openalex.org/I206945453"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Manuel Benz","raw_affiliation_strings":["Paderborn University, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Paderborn University, Germany","institution_ids":["https://openalex.org/I206945453"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048998524","display_name":"Erik Krogh Kristensen","orcid":null},"institutions":[{"id":"https://openalex.org/I204337017","display_name":"Aarhus University","ror":"https://ror.org/01aj84f44","country_code":"DK","type":"education","lineage":["https://openalex.org/I204337017"]}],"countries":["DK"],"is_corresponding":false,"raw_author_name":"Erik Krogh Kristensen","raw_affiliation_strings":["Aarhus University, Denmark"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Aarhus University, Denmark","institution_ids":["https://openalex.org/I204337017"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022152776","display_name":"Linghui Luo","orcid":"https://orcid.org/0000-0003-2054-0373"},"institutions":[{"id":"https://openalex.org/I206945453","display_name":"Paderborn University","ror":"https://ror.org/058kzsd48","country_code":"DE","type":"education","lineage":["https://openalex.org/I206945453"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Linghui Luo","raw_affiliation_strings":["Paderborn University, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Paderborn University, Germany","institution_ids":["https://openalex.org/I206945453"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065823772","display_name":"Nataniel P. Borges","orcid":"https://orcid.org/0000-0002-9733-3113"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Nataniel P. Borges","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076678278","display_name":"Eric Bodden","orcid":"https://orcid.org/0000-0003-3470-3647"},"institutions":[{"id":"https://openalex.org/I206945453","display_name":"Paderborn University","ror":"https://ror.org/058kzsd48","country_code":"DE","type":"education","lineage":["https://openalex.org/I206945453"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Eric Bodden","raw_affiliation_strings":["Paderborn University, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Paderborn University, Germany","institution_ids":["https://openalex.org/I206945453"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051672229","display_name":"Andreas Zeller","orcid":"https://orcid.org/0000-0003-4719-8803"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Andreas Zeller","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Germany","institution_ids":["https://openalex.org/I4210128801"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8899,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.73188162,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1061","last_page":"1072"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/heap","display_name":"Heap (data structure)","score":0.9265389442443848},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8185520172119141},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.742001473903656},{"id":"https://openalex.org/keywords/snapshot","display_name":"Snapshot (computer storage)","score":0.6092646718025208},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.48712942004203796},{"id":"https://openalex.org/keywords/pointer-analysis","display_name":"Pointer analysis","score":0.463748037815094},{"id":"https://openalex.org/keywords/pointer","display_name":"Pointer (user interface)","score":0.4608881175518036},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.4569339156150818},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3897513449192047},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.3579251170158386},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.33721184730529785},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.24060729146003723},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.18967214226722717},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.13301092386245728}],"concepts":[{"id":"https://openalex.org/C134757568","wikidata":"https://www.wikidata.org/wiki/Q274089","display_name":"Heap (data structure)","level":2,"score":0.9265389442443848},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8185520172119141},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.742001473903656},{"id":"https://openalex.org/C55282118","wikidata":"https://www.wikidata.org/wiki/Q252683","display_name":"Snapshot (computer storage)","level":2,"score":0.6092646718025208},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.48712942004203796},{"id":"https://openalex.org/C7263679","wikidata":"https://www.wikidata.org/wiki/Q5978076","display_name":"Pointer analysis","level":3,"score":0.463748037815094},{"id":"https://openalex.org/C150202949","wikidata":"https://www.wikidata.org/wiki/Q107602","display_name":"Pointer (user interface)","level":2,"score":0.4608881175518036},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.4569339156150818},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3897513449192047},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.3579251170158386},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.33721184730529785},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.24060729146003723},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.18967214226722717},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.13301092386245728},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3377811.3380438","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3377811.3380438","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM/IEEE 42nd International Conference on Software Engineering","raw_type":"proceedings-article"},{"id":"pmh:oai:fraunhofer.de:N-614634","is_oa":false,"landing_page_url":"http://publica.fraunhofer.de/documents/N-614634.html","pdf_url":null,"source":{"id":"https://openalex.org/S4306400801","display_name":"Publikationsdatenbank der Fraunhofer-Gesellschaft (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Fraunhofer IEM","raw_type":"Conference Paper"},{"id":"pmh:oai:publica.fraunhofer.de:publica/410027","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/410027","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference paper"},{"id":"pmh:oai:zenodo.org:3627973","is_oa":true,"landing_page_url":"https://zenodo.org/record/3627973","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ICSE '20: International Conference on Software Engineering","raw_type":"software"}],"best_oa_location":{"id":"pmh:oai:zenodo.org:3627973","is_oa":true,"landing_page_url":"https://zenodo.org/record/3627973","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ICSE '20: International Conference on Software Engineering","raw_type":"software"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7502889706","display_name":null,"funder_award_id":"BO 2528/6-1","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"}],"funders":[{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W81879861","https://openalex.org/W1536098516","https://openalex.org/W1557543533","https://openalex.org/W1604771615","https://openalex.org/W1825733274","https://openalex.org/W1915915253","https://openalex.org/W1963971515","https://openalex.org/W1971531093","https://openalex.org/W2017025011","https://openalex.org/W2027538101","https://openalex.org/W2050477758","https://openalex.org/W2067104598","https://openalex.org/W2068583268","https://openalex.org/W2077202047","https://openalex.org/W2078393527","https://openalex.org/W2087804676","https://openalex.org/W2128835824","https://openalex.org/W2133497528","https://openalex.org/W2140021378","https://openalex.org/W2166091242","https://openalex.org/W2166743230","https://openalex.org/W2294292201","https://openalex.org/W2343325785","https://openalex.org/W2463553622","https://openalex.org/W2514084604","https://openalex.org/W2571682498","https://openalex.org/W2577540292","https://openalex.org/W2599572386","https://openalex.org/W2752929869","https://openalex.org/W2761428514","https://openalex.org/W2784876765","https://openalex.org/W2796301966","https://openalex.org/W2850983117","https://openalex.org/W2884704156","https://openalex.org/W2899357780","https://openalex.org/W3102504333","https://openalex.org/W3136699861","https://openalex.org/W4243644740","https://openalex.org/W4245027182","https://openalex.org/W4251478049"],"related_works":["https://openalex.org/W2553375745","https://openalex.org/W2363386825","https://openalex.org/W2188526093","https://openalex.org/W1996094959","https://openalex.org/W2999115679","https://openalex.org/W2622138879","https://openalex.org/W2213281886","https://openalex.org/W3121955897","https://openalex.org/W2761428514","https://openalex.org/W3035018584"],"abstract_inverted_index":{"The":[0,139],"assessment":[1],"of":[2,9,145,203],"information":[3],"flows":[4],"is":[5,14,166],"an":[6,137],"essential":[7],"part":[8],"analyzing":[10],"Android":[11,129],"apps,":[12],"and":[13,81,89,97,105,119,151,164,191,210],"frequently":[15],"supported":[16],"by":[17,168,218],"static":[18,47,65,179],"taint":[19,79],"analysis.":[20,66],"Its":[21],"precision,":[22,211],"however,":[23],"can":[24,39,61,215],"suffer":[25],"from":[26],"the":[27,143,174,201,204],"analysis":[28,48,149,175],"not":[29],"being":[30],"able":[31],"to":[32,72,111,178,207],"precisely":[33],"determine":[34],"what":[35,73],"elements":[36],"a":[37,124,158,169,194,212],"pointer":[38],"(and":[40],"cannot)":[41],"point":[42,58],"to.":[43],"Recent":[44],"advances":[45],"in":[46,172],"suggest":[49],"that":[50,131],"incorporating":[51],"dynamic":[52,187],"heap":[53,113,146,196],"snapshots,":[54,114],"taken":[55,199],"at":[56,59,200],"one":[57],"runtime,":[60],"significantly":[62],"improve":[63,208],"general":[64],"In":[67],"this":[68,75],"paper,":[69],"we":[70,132],"investigate":[71],"extent":[74],"also":[76,133],"holds":[77],"for":[78,182,184],"analysis,":[80],"how":[82,90,98],"various":[83],"design":[84],"decisions,":[85],"such":[86],"as":[87,136],"when":[88],"many":[91],"snapshots":[92,147],"are":[93,101],"collected":[94],"during":[95],"execution,":[96],"exactly":[99],"they":[100],"used,":[102],"impact":[103],"soundness":[104],"precision.":[106],"We":[107],"have":[108],"extended":[109],"FlowDroid":[110],"incorporate":[112],"yielding":[115],"our":[116],"prototype":[117],"Heapster,":[118],"evaluated":[120],"it":[121],"on":[122],"DroidMacroBench,":[123],"novel":[125],"benchmark":[126],"comprising":[127],"real-world":[128],"apps":[130],"make":[134],"available":[135],"artifact.":[138],"results":[140],"show":[141],"(1)":[142],"use":[144],"lowers":[148],"time":[150],"memory":[152],"consumption":[153],"while":[154,193],"increasing":[155],"precision;":[156],"(2)":[157],"very":[159],"good":[160],"trade-off":[161,214],"between":[162],"precision":[163],"recall":[165],"achieved":[167],"mixed":[170],"mode":[171],"which":[173,185],"falls":[176],"back":[177],"points-to":[180],"relations":[181],"objects":[183],"no":[186],"data":[188],"was":[189],"recorded;":[190],"(3)":[192],"single":[195],"snapshot":[197],"(ideally":[198],"end":[202],"execution)":[205],"suffices":[206],"performance":[209],"better":[213],"be":[216],"obtained":[217],"using":[219],"multiple":[220],"snapshots.":[221]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2020-06-19T00:00:00"}