{"id":"https://openalex.org/W3124933548","doi":"https://doi.org/10.1145/3426470","title":"Analyzing Dynamic Code","display_name":"Analyzing Dynamic Code","publication_year":2021,"publication_date":"2021-01-21","ids":{"openalex":"https://openalex.org/W3124933548","doi":"https://doi.org/10.1145/3426470","mag":"3124933548"},"language":"en","primary_location":{"id":"doi:10.1145/3426470","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3426470","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011667986","display_name":"Vincenzo Arceri","orcid":"https://orcid.org/0000-0002-5150-0393"},"institutions":[{"id":"https://openalex.org/I119439378","display_name":"University of Verona","ror":"https://ror.org/039bp8j42","country_code":"IT","type":"education","lineage":["https://openalex.org/I119439378"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Vincenzo Arceri","raw_affiliation_strings":["University of Verona, Verona, Italy"],"raw_orcid":"https://orcid.org/0000-0002-5150-0393","affiliations":[{"raw_affiliation_string":"University of Verona, Verona, Italy","institution_ids":["https://openalex.org/I119439378"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031780173","display_name":"Isabella Mastroeni","orcid":"https://orcid.org/0000-0003-1213-536X"},"institutions":[{"id":"https://openalex.org/I119439378","display_name":"University of Verona","ror":"https://ror.org/039bp8j42","country_code":"IT","type":"education","lineage":["https://openalex.org/I119439378"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Isabella Mastroeni","raw_affiliation_strings":["University of Verona, Verona, Italy"],"raw_orcid":"https://orcid.org/0000-0003-1213-536X","affiliations":[{"raw_affiliation_string":"University of Verona, Verona, Italy","institution_ids":["https://openalex.org/I119439378"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I119439378"],"apc_list":null,"apc_paid":null,"fwci":3.9835,"has_fulltext":false,"cited_by_count":21,"citation_normalized_percentile":{"value":0.94029644,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"24","issue":"2","first_page":"1","last_page":"38"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8182752132415771},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.7719932794570923},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.7182521820068359},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.6748355031013489},{"id":"https://openalex.org/keywords/string","display_name":"String (physics)","score":0.6415504217147827},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.6222358345985413},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5991644859313965},{"id":"https://openalex.org/keywords/callback","display_name":"Callback","score":0.574604332447052},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.48869946599006653},{"id":"https://openalex.org/keywords/statement","display_name":"Statement (logic)","score":0.4741230309009552},{"id":"https://openalex.org/keywords/static-program-analysis","display_name":"Static program analysis","score":0.4709395170211792},{"id":"https://openalex.org/keywords/program-analysis","display_name":"Program analysis","score":0.44278404116630554},{"id":"https://openalex.org/keywords/dead-code","display_name":"Dead code","score":0.43387794494628906},{"id":"https://openalex.org/keywords/redundant-code","display_name":"Redundant code","score":0.3664039969444275},{"id":"https://openalex.org/keywords/code-generation","display_name":"Code generation","score":0.29380106925964355},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.18231657147407532},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.1353771984577179},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.12736794352531433},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.10462400317192078},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.10262754559516907}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8182752132415771},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.7719932794570923},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.7182521820068359},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.6748355031013489},{"id":"https://openalex.org/C157486923","wikidata":"https://www.wikidata.org/wiki/Q1376436","display_name":"String (physics)","level":2,"score":0.6415504217147827},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.6222358345985413},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5991644859313965},{"id":"https://openalex.org/C204495577","wikidata":"https://www.wikidata.org/wiki/Q1205349","display_name":"Callback","level":2,"score":0.574604332447052},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.48869946599006653},{"id":"https://openalex.org/C2777026412","wikidata":"https://www.wikidata.org/wiki/Q2684591","display_name":"Statement (logic)","level":2,"score":0.4741230309009552},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.4709395170211792},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.44278404116630554},{"id":"https://openalex.org/C47434764","wikidata":"https://www.wikidata.org/wiki/Q1770035","display_name":"Dead code","level":5,"score":0.43387794494628906},{"id":"https://openalex.org/C151578736","wikidata":"https://www.wikidata.org/wiki/Q1251793","display_name":"Redundant code","level":4,"score":0.3664039969444275},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.29380106925964355},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.18231657147407532},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.1353771984577179},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.12736794352531433},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.10462400317192078},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.10262754559516907},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.0},{"id":"https://openalex.org/C37914503","wikidata":"https://www.wikidata.org/wiki/Q156495","display_name":"Mathematical physics","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3426470","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3426470","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5202168427","display_name":null,"funder_award_id":"cda-univr-21/12/2018","funder_id":"https://openalex.org/F4320324120","funder_display_name":"Universit\u00e0 degli Studi di Verona"}],"funders":[{"id":"https://openalex.org/F4320324120","display_name":"Universit\u00e0 degli Studi di Verona","ror":"https://ror.org/039bp8j42"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":61,"referenced_works":["https://openalex.org/W9494735","https://openalex.org/W58852127","https://openalex.org/W83033814","https://openalex.org/W109951691","https://openalex.org/W146604323","https://openalex.org/W202191487","https://openalex.org/W641989116","https://openalex.org/W1512870920","https://openalex.org/W1531074043","https://openalex.org/W1545917948","https://openalex.org/W1553894716","https://openalex.org/W1595405651","https://openalex.org/W1809751277","https://openalex.org/W1879453804","https://openalex.org/W1917555234","https://openalex.org/W1966862293","https://openalex.org/W1977541831","https://openalex.org/W1983820815","https://openalex.org/W1998765795","https://openalex.org/W2008626182","https://openalex.org/W2014528910","https://openalex.org/W2017796755","https://openalex.org/W2043100293","https://openalex.org/W2045002320","https://openalex.org/W2055931054","https://openalex.org/W2084875723","https://openalex.org/W2090924529","https://openalex.org/W2093050213","https://openalex.org/W2101310246","https://openalex.org/W2107604680","https://openalex.org/W2112460268","https://openalex.org/W2116131106","https://openalex.org/W2118516658","https://openalex.org/W2124873267","https://openalex.org/W2132661148","https://openalex.org/W2138124253","https://openalex.org/W2140021378","https://openalex.org/W2148350313","https://openalex.org/W2156429182","https://openalex.org/W2165304392","https://openalex.org/W2167363133","https://openalex.org/W2230934865","https://openalex.org/W2290206096","https://openalex.org/W2401455848","https://openalex.org/W2591793539","https://openalex.org/W2597324076","https://openalex.org/W2777297765","https://openalex.org/W2785627758","https://openalex.org/W2898614297","https://openalex.org/W2910728092","https://openalex.org/W2937057045","https://openalex.org/W2981410985","https://openalex.org/W2982707566","https://openalex.org/W3020117182","https://openalex.org/W3026427111","https://openalex.org/W3027870633","https://openalex.org/W3126151140","https://openalex.org/W4211183341","https://openalex.org/W4239277337","https://openalex.org/W4248710586","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W2354385412","https://openalex.org/W4210653322","https://openalex.org/W2390085541","https://openalex.org/W2969257295","https://openalex.org/W4384948641","https://openalex.org/W3013559043","https://openalex.org/W2054234143","https://openalex.org/W2506798315","https://openalex.org/W3040982692","https://openalex.org/W1967199258"],"abstract_inverted_index":{"Dynamic":[0],"languages,":[1],"such":[2,63,91],"as":[3,64,131],"JavaScript,":[4,68],"employ":[5],"string-to-code":[6,105,156,215],"primitives":[7],"to":[8,48,88,103,127,133,136,143,154,168,199,204],"turn":[9],"dynamically":[10,52,175],"generated":[11,176],"text":[12],"into":[13],"executable":[14],"code":[15,57,137,210],"at":[16,58],"run-time.":[17],"These":[18],"features":[19],"make":[20],"standard":[21],"static":[22,86,140,195],"analysis":[23,167,196],"extremely":[24],"hard":[25],"if":[26],"not":[27,89,120],"impossible,":[28],"because":[29],"its":[30],"essential":[31],"data":[32],"structures,":[33],"i.e.,":[34],"the":[35,39,46,98,144,149,152,166,172,209],"control-flow":[36],"graph":[37],"and":[38,118,138,163,203,207],"system":[40],"of":[41,100,148,174,183],"recursive":[42],"equations":[43],"associated":[44],"with":[45,179],"program":[47,177],"analyze,":[49],"are":[50],"themselves":[51],"mutating":[53],"objects.":[54],"Nevertheless,":[55],"assembling":[56],"run-time":[59],"by":[60,65,213],"manipulating":[61],"strings,":[62],"eval":[66,81],"in":[67,171],"has":[69],"been":[70],"always":[71],"strongly":[72],"discouraged,":[73],"since":[74],"it":[75],"is":[76,82,115],"often":[77],"recognized":[78],"that":[79,114],"\u201c":[80],"evil":[83,117],",\u201d":[84],"leading":[85],"analyzers":[87],"consider":[90],"statements":[92,106,157],"or":[93],"ignoring":[94],"their":[95],"effects.":[96],"Unfortunately,":[97],"lack":[99],"formal":[101],"approaches":[102],"analyze":[104,208],"pose":[107],"a":[108,194,214],"perfect":[109],"habitat":[110],"for":[111],"malicious":[112,129,146],"code,":[113],"surely":[116],"do":[119],"respect":[121],"good":[122],"practice":[123],"rules,":[124],"allowing":[125,165,197],"them":[126],"hide":[128],"intents":[130],"strings":[132],"be":[134,186],"converted":[135],"making":[139],"analyses":[141],"blind":[142],"real":[145],"aim":[147],"code.":[150],"Hence,":[151],"need":[153],"handle":[155],"approximating":[158],"what":[159],"they":[160],"can":[161],"execute,":[162],"therefore":[164],"continue":[169],"(even":[170],"presence":[173],"statements)":[178],"an":[180],"acceptable":[181],"degree":[182],"precision,":[184],"should":[185],"clear.":[187],"To":[188],"reach":[189],"this":[190],"goal,":[191],"we":[192],"propose":[193],"us":[198],"collect":[200],"string":[201],"values":[202],"soundly":[205],"over-approximate":[206],"potentially":[211],"executed":[212],"statement.":[216]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}