{"id":"https://openalex.org/W3123154329","doi":"https://doi.org/10.1145/3417113.3422154","title":"Characterizing co-located insecure coding patterns in infrastructure as code scripts","display_name":"Characterizing co-located insecure coding patterns in infrastructure as code scripts","publication_year":2020,"publication_date":"2020-09-21","ids":{"openalex":"https://openalex.org/W3123154329","doi":"https://doi.org/10.1145/3417113.3422154","mag":"3123154329"},"language":"en","primary_location":{"id":"doi:10.1145/3417113.3422154","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3417113.3422154","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 35th IEEE/ACM International Conference on Automated Software Engineering Workshops","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076411559","display_name":"Farzana Ahamed Bhuiyan","orcid":"https://orcid.org/0000-0002-0261-2196"},"institutions":[{"id":"https://openalex.org/I63920570","display_name":"Tennessee Technological University","ror":"https://ror.org/05drmrq39","country_code":"US","type":"education","lineage":["https://openalex.org/I63920570"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Farzana Ahamed Bhuiyan","raw_affiliation_strings":["Tennessee Technological University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tennessee Technological University","institution_ids":["https://openalex.org/I63920570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069063267","display_name":"Akond Rahman","orcid":"https://orcid.org/0000-0002-5056-757X"},"institutions":[{"id":"https://openalex.org/I63920570","display_name":"Tennessee Technological University","ror":"https://ror.org/05drmrq39","country_code":"US","type":"education","lineage":["https://openalex.org/I63920570"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Akond Rahman","raw_affiliation_strings":["Tennessee Technological University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tennessee Technological University","institution_ids":["https://openalex.org/I63920570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I63920570"],"apc_list":null,"apc_paid":null,"fwci":1.4789,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.84546962,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"27","last_page":"32"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.9439504146575928},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6982513070106506},{"id":"https://openalex.org/keywords/python","display_name":"Python (programming language)","score":0.6670644283294678},{"id":"https://openalex.org/keywords/coding","display_name":"Coding (social sciences)","score":0.555789589881897},{"id":"https://openalex.org/keywords/provisioning","display_name":"Provisioning","score":0.5258349180221558},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5255283713340759},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.49138322472572327},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4763914942741394},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.44917815923690796},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.43439286947250366},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.41248902678489685},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.36673325300216675},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.20381894707679749},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.11209887266159058},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.1081903874874115},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.10535469651222229},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.08267548680305481},{"id":"https://openalex.org/keywords/sociology","display_name":"Sociology","score":0.07542797923088074}],"concepts":[{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.9439504146575928},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6982513070106506},{"id":"https://openalex.org/C519991488","wikidata":"https://www.wikidata.org/wiki/Q28865","display_name":"Python (programming language)","level":2,"score":0.6670644283294678},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.555789589881897},{"id":"https://openalex.org/C172191483","wikidata":"https://www.wikidata.org/wiki/Q1071806","display_name":"Provisioning","level":2,"score":0.5258349180221558},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5255283713340759},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.49138322472572327},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4763914942741394},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.44917815923690796},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.43439286947250366},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.41248902678489685},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36673325300216675},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.20381894707679749},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.11209887266159058},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.1081903874874115},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10535469651222229},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.08267548680305481},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.07542797923088074},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3417113.3422154","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3417113.3422154","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 35th IEEE/ACM International Conference on Automated Software Engineering Workshops","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6000000238418579}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W1930624869","https://openalex.org/W1972978214","https://openalex.org/W1978813754","https://openalex.org/W2018939388","https://openalex.org/W2041282815","https://openalex.org/W2064653370","https://openalex.org/W2070425304","https://openalex.org/W2078393527","https://openalex.org/W2140190241","https://openalex.org/W2402800985","https://openalex.org/W2407292968","https://openalex.org/W2534143033","https://openalex.org/W2796047065","https://openalex.org/W2807298173","https://openalex.org/W2883411629","https://openalex.org/W2951258056","https://openalex.org/W2955656327","https://openalex.org/W2963995913","https://openalex.org/W2993710525","https://openalex.org/W2997591727","https://openalex.org/W3008316250","https://openalex.org/W3090625769","https://openalex.org/W3123074563","https://openalex.org/W4254388329"],"related_works":["https://openalex.org/W3023169329","https://openalex.org/W4389470870","https://openalex.org/W2782165897","https://openalex.org/W1582950852","https://openalex.org/W4300438041","https://openalex.org/W2054104202","https://openalex.org/W2139703748","https://openalex.org/W2761254753","https://openalex.org/W1024825291","https://openalex.org/W2188981919"],"abstract_inverted_index":{"Context:":[0],"Insecure":[1],"coding":[2,91],"patterns":[3,92],"(ICPs),":[4],"such":[5],"as":[6,15,79],"hard-coded":[7,158],"passwords":[8],"can":[9,48,165],"be":[10],"inadvertently":[11],"introduced":[12],"in":[13,45,59,72,93,128],"infrastructure":[14,78],"code":[16,31,74,80,167],"(IaC)":[17,81],"scripts,":[18],"providing":[19],"malicious":[20],"users":[21],"the":[22,139],"opportunity":[23],"to":[24,51,69,124,141],"attack":[25],"provisioned":[26],"computing":[27],"infrastructure.":[28],"As":[29],"performing":[30],"reviews":[32],"is":[33,68,157],"resource-intensive,":[34],"a":[35,46],"characterization":[36],"of":[37,65,88,138],"co-located":[38,89,126,143,154,178],"ICPs,":[39],"i.e.,":[40],"ICPs":[41,58,127,144],"that":[42,176],"occur":[43],"together":[44],"script":[47],"help":[49,70],"practitioners":[50,71],"prioritize":[52,166],"their":[53],"review":[54,75,168],"efforts":[55,76,169],"and":[56,105,117,136,149,160],"mitigate":[57],"IaC":[60,94,129,171],"scripts.":[61,95,130],"Objective:":[62],"The":[63,151],"goal":[64],"this":[66],"paper":[67],"prioritizing":[73],"for":[77,146,170],"scripts":[82,108,140,172,175],"by":[83,173],"conducting":[84],"an":[85,99],"empirical":[86,100],"study":[87,101],"insecure":[90],"Methodology:":[96],"We":[97,119,132],"conduct":[98],"with":[102],"1613,":[103],"2764":[104],"2845":[106],"Puppet":[107],"respectively":[109],"collected":[110],"from":[111],"three":[112],"organizations":[113],"namely,":[114],"Mozilla,":[115,147],"Openstack,":[116,148],"Wikimedia.":[118,150],"apply":[120],"association":[121],"rule":[122],"mining":[123],"identify":[125],"Results:":[131],"observe":[133],"17.9%,":[134],"32.9%,":[135],"26.7%":[137],"include":[142,177],"respectively,":[145],"most":[152],"frequent":[153],"ICP":[155],"category":[156],"secret":[159],"suspicious":[161],"comment.":[162],"Conclusion:":[163],"Practitioners":[164],"reviewing":[174],"ICPs.":[179]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}