{"id":"https://openalex.org/W3016540043","doi":"https://doi.org/10.1145/3387939.3391609","title":"Self-protection against business logic vulnerabilities","display_name":"Self-protection against business logic vulnerabilities","publication_year":2020,"publication_date":"2020-06-29","ids":{"openalex":"https://openalex.org/W3016540043","doi":"https://doi.org/10.1145/3387939.3391609","mag":"3016540043"},"language":"en","primary_location":{"id":"doi:10.1145/3387939.3391609","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3387939.3391609","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 15th International Symposium on Software Engineering for Adaptive and Self-Managing Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030111816","display_name":"Silvan Zeller","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Silvan Zeller","raw_affiliation_strings":["Omegapoint AB, Stockholm, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Omegapoint AB, Stockholm, Sweden","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080062466","display_name":"Narges Khakpour","orcid":"https://orcid.org/0000-0002-0377-5595"},"institutions":[{"id":"https://openalex.org/I223464139","display_name":"Linnaeus University","ror":"https://ror.org/00j9qag85","country_code":"SE","type":"education","lineage":["https://openalex.org/I223464139"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Narges Khakpour","raw_affiliation_strings":["Linnaeus University, V\u00e4xj\u00f6, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Linnaeus University, V\u00e4xj\u00f6, Sweden","institution_ids":["https://openalex.org/I223464139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059882053","display_name":"Danny Weyns","orcid":"https://orcid.org/0000-0002-1162-0817"},"institutions":[{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Danny Weyns","raw_affiliation_strings":["KU Leuven & Linnaeus University, Leuven, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KU Leuven & Linnaeus University, Leuven, Belgium","institution_ids":["https://openalex.org/I99464096"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059042444","display_name":"Daniel Deogun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Daniel Deogun","raw_affiliation_strings":["Omegapoint AB, Stockholm, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Omegapoint AB, Stockholm, Sweden","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.115,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.32191574,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"174","last_page":"180"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7774977087974548},{"id":"https://openalex.org/keywords/business-logic","display_name":"Business logic","score":0.758339524269104},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7259387969970703},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6578325629234314},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.6225491762161255},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.14230751991271973}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7774977087974548},{"id":"https://openalex.org/C146222976","wikidata":"https://www.wikidata.org/wiki/Q1204997","display_name":"Business logic","level":2,"score":0.758339524269104},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7259387969970703},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6578325629234314},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.6225491762161255},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.14230751991271973},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3387939.3391609","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3387939.3391609","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 15th International Symposium on Software Engineering for Adaptive and Self-Managing Systems","raw_type":"proceedings-article"},{"id":"pmh:oai:lirias2repo.kuleuven.be:20.500.12942/687380","is_oa":false,"landing_page_url":"https://lirias.kuleuven.be/bitstream/20.500.12942/687380/2/3387939.3391609.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S7407055369","display_name":"Lirias","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"IEEE/ACM 15th International Symposium on Software Engineering for Adaptive and Self-Managing Systems (SEAMS), SOUTH KOREA, Seoul, 25-26 May 2020","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.8199999928474426}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W33764377","https://openalex.org/W1499438245","https://openalex.org/W1591094652","https://openalex.org/W1606099259","https://openalex.org/W1847288881","https://openalex.org/W1964137226","https://openalex.org/W1990911977","https://openalex.org/W2033406822","https://openalex.org/W2036315391","https://openalex.org/W2036625623","https://openalex.org/W2060692877","https://openalex.org/W2063150593","https://openalex.org/W2070689669","https://openalex.org/W2101623441","https://openalex.org/W2109671077","https://openalex.org/W2115051564","https://openalex.org/W2130523241","https://openalex.org/W2166515197","https://openalex.org/W2172135069","https://openalex.org/W2407358725","https://openalex.org/W2482678392","https://openalex.org/W2512714308","https://openalex.org/W2752929869","https://openalex.org/W2793043914","https://openalex.org/W2797046864","https://openalex.org/W2802202188","https://openalex.org/W2912438158","https://openalex.org/W2955937337","https://openalex.org/W4248627707","https://openalex.org/W6629834653"],"related_works":["https://openalex.org/W2964604098","https://openalex.org/W2997512100","https://openalex.org/W2331043530","https://openalex.org/W3048799479","https://openalex.org/W2393933887","https://openalex.org/W1555721731","https://openalex.org/W2152018389","https://openalex.org/W228411881","https://openalex.org/W4287577102","https://openalex.org/W2342018874"],"abstract_inverted_index":{"Attacks":[0],"against":[1,41,60],"business":[2,45,65],"logic":[3,46,66],"rules":[4,12],"occur":[5],"when":[6],"the":[7,10,42,101,107],"attacker":[8],"exploits":[9],"domain":[11,72,108],"in":[13,24],"a":[14,33,39,51,54,104],"malicious":[15],"way.":[16],"Such":[17],"attacks":[18,61,85],"have":[19],"not":[20],"received":[21],"sufficient":[22],"attention":[23],"research":[25],"so":[26],"far.":[27],"In":[28],"this":[29],"paper,":[30],"we":[31],"propose":[32],"novel":[34],"self-protecting":[35,55],"approach":[36,49,69,102],"that":[37],"defends":[38],"system":[40,52,95],"exploitation":[43],"of":[44,109],"vulnerabilities.":[47],"The":[48,68],"empowers":[50],"with":[53],"layer":[56],"to":[57,80],"protect":[58],"it":[59],"aimed":[62],"at":[63,97],"misusing":[64],"rules.":[67],"maintains":[70],"up-to-date":[71],"knowledge":[73],"which":[74],"is":[75],"analyzed":[76],"using":[77,103],"runtime":[78],"verification":[79],"detect":[81],"logical":[82],"attacks.":[83],"When":[84],"are":[86,89],"discovered":[87],"they":[88],"dynamically":[90],"mitigated":[91],"by":[92],"applying":[93],"proper":[94],"reconfigurations":[96],"runtime.":[98],"We":[99],"evaluate":[100],"case":[105],"from":[106],"hotel":[110],"booking":[111],"systems.":[112]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}