{"id":"https://openalex.org/W4200282997","doi":"https://doi.org/10.1145/3485464","title":"A Practical Approach for Dynamic Taint Tracking with Control-flow Relationships","display_name":"A Practical Approach for Dynamic Taint Tracking with Control-flow Relationships","publication_year":2021,"publication_date":"2021-12-24","ids":{"openalex":"https://openalex.org/W4200282997","doi":"https://doi.org/10.1145/3485464"},"language":"en","primary_location":{"id":"doi:10.1145/3485464","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3485464","pdf_url":null,"source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082815597","display_name":"Katherine Hough","orcid":"https://orcid.org/0000-0003-4397-1635"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Katherine Hough","raw_affiliation_strings":["Northeastern University, Boston, MA, United States"],"raw_orcid":"https://orcid.org/0000-0003-4397-1635","affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, MA, United States","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053080959","display_name":"Jonathan Bell","orcid":"https://orcid.org/0000-0002-1187-9298"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jonathan Bell","raw_affiliation_strings":["Northeastern University, Boston, MA, United States"],"raw_orcid":"https://orcid.org/0000-0002-1187-9298","affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, MA, United States","institution_ids":["https://openalex.org/I12912129"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I12912129"],"apc_list":null,"apc_paid":null,"fwci":1.4972,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.83297421,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"31","issue":"2","first_page":"1","last_page":"43"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.9303044080734253},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8381935358047485},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.6701760292053223},{"id":"https://openalex.org/keywords/debugging","display_name":"Debugging","score":0.6461139917373657},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5909149646759033},{"id":"https://openalex.org/keywords/tracking","display_name":"Tracking (education)","score":0.5124645829200745},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.49642497301101685},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4926174283027649},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.45363104343414307},{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.4205373227596283},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.24791932106018066},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.18430212140083313}],"concepts":[{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.9303044080734253},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8381935358047485},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.6701760292053223},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.6461139917373657},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5909149646759033},{"id":"https://openalex.org/C2775936607","wikidata":"https://www.wikidata.org/wiki/Q466845","display_name":"Tracking (education)","level":2,"score":0.5124645829200745},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.49642497301101685},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4926174283027649},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.45363104343414307},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.4205373227596283},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.24791932106018066},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.18430212140083313},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C19417346","wikidata":"https://www.wikidata.org/wiki/Q7922","display_name":"Pedagogy","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3485464","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3485464","pdf_url":null,"source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W134722953","https://openalex.org/W1613776191","https://openalex.org/W1963971515","https://openalex.org/W1976878954","https://openalex.org/W1982205631","https://openalex.org/W2012286850","https://openalex.org/W2066078729","https://openalex.org/W2073655054","https://openalex.org/W2089745089","https://openalex.org/W2116774218","https://openalex.org/W2122049982","https://openalex.org/W2123302446","https://openalex.org/W2128985333","https://openalex.org/W2129278597","https://openalex.org/W2138788987","https://openalex.org/W2143546156","https://openalex.org/W2144789413","https://openalex.org/W2147478478","https://openalex.org/W2149969483","https://openalex.org/W2156723666","https://openalex.org/W2157606397","https://openalex.org/W2160510992","https://openalex.org/W2170224888","https://openalex.org/W2279560118","https://openalex.org/W2293624369","https://openalex.org/W2545572223","https://openalex.org/W2613534458","https://openalex.org/W2761268318","https://openalex.org/W2766465278","https://openalex.org/W2796301966","https://openalex.org/W2959616428","https://openalex.org/W2979324777","https://openalex.org/W2987470874","https://openalex.org/W3004185948","https://openalex.org/W3089408421","https://openalex.org/W3102504333","https://openalex.org/W3160685084","https://openalex.org/W4230176856","https://openalex.org/W4231040899","https://openalex.org/W4232242439","https://openalex.org/W4244452712","https://openalex.org/W4244726870","https://openalex.org/W4249902158","https://openalex.org/W4250942327","https://openalex.org/W6647783520","https://openalex.org/W6976687966"],"related_works":["https://openalex.org/W3194833114","https://openalex.org/W4205868343","https://openalex.org/W2480874422","https://openalex.org/W2953905390","https://openalex.org/W4226258670","https://openalex.org/W2912319261","https://openalex.org/W2785297793","https://openalex.org/W2015960018","https://openalex.org/W2121579803","https://openalex.org/W2966514766"],"abstract_inverted_index":{"Dynamic":[0],"taint":[1,26,53,83,97,144,173],"tracking,":[2,145],"a":[3,11,19,38,116,124,131,140,160,177],"technique":[4],"that":[5,70,185],"traces":[6],"relationships":[7,40,62],"between":[8,41],"values":[9,43],"as":[10],"program":[12],"executes,":[13],"has":[14],"been":[15],"used":[16],"to":[17,104,150],"support":[18],"variety":[20],"of":[21,52,81,111,127,137,143,164,195],"software":[22],"engineering":[23],"tasks.":[24],"Some":[25],"tracking":[27,54,71,84],"systems":[28],"only":[29],"consider":[30],"data":[31],"flows":[32,73,113],"and":[33,114,129],"ignore":[34],"control":[35,72,100,112],"flows.":[36,101],"As":[37],"result,":[39],"some":[42],"are":[44],"not":[45],"reflected":[46],"by":[47,107],"the":[48,79,82,109,135,188,196],"analysis.":[49],"Many":[50],"applications":[51],"either":[55],"benefit":[56],"from":[57],"or":[58],"rely":[59],"on":[60,139,192],"these":[61],"being":[63],"traced,":[64],"but":[65],"past":[66],"works":[67],"have":[68],"found":[69],"resulted":[74],"in":[75],"over-tainting,":[76,183],"dramatically":[77],"reducing":[78,119,181],"precision":[80],"system.":[85],"In":[86,148],"this":[87,151],"article,":[88],"we":[89,154],"introduce":[90],"Conflux":[91,102,128,138,156,170,186],",":[92],"alternative":[93],"semantics":[94],"for":[95,118,180],"propagating":[96],"tags":[98],"along":[99],"aims":[103],"reduce":[105],"over-tainting":[106],"decreasing":[108],"scope":[110],"providing":[115],"heuristic":[117],"loop-related":[120],"over-tainting.":[121],"We":[122,168],"created":[123],"Java":[125],"implementation":[126],"performed":[130],"case":[132,152],"study":[133],"exploring":[134],"effect":[136],"concrete":[141],"application":[142],"automated":[146],"debugging.":[147],"addition":[149],"study,":[153],"evaluated":[155],"\u2019s":[157],"accuracy":[158],"using":[159],"novel":[161],"benchmark":[162],"consisting":[163],"popular,":[165],"real-world":[166],"programs.":[167],"compared":[169],"against":[171],"existing":[172],"propagation":[174],"policies,":[175],"including":[176],"state-of-the-art":[178],"approach":[179],"control-flow-related":[182],"finding":[184],"had":[187],"highest":[189],"F1":[190],"score":[191],"43":[193],"out":[194],"48":[197],"total":[198],"tests.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":3}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}