{"id":"https://openalex.org/W4284664377","doi":"https://doi.org/10.1145/3510003.3510150","title":"Automated detection of password leakage from public GitHub repositories","display_name":"Automated detection of password leakage from public GitHub repositories","publication_year":2022,"publication_date":"2022-05-21","ids":{"openalex":"https://openalex.org/W4284664377","doi":"https://doi.org/10.1145/3510003.3510150"},"language":"en","primary_location":{"id":"doi:10.1145/3510003.3510150","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3510003.3510150","pdf_url":null,"source":{"id":"https://openalex.org/S4363608872","display_name":"Proceedings of the 44th International Conference on Software Engineering","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 44th International Conference on Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009089268","display_name":"Runhan Feng","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Runhan Feng","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044495197","display_name":"Ziyang Yan","orcid":"https://orcid.org/0009-0006-7531-4057"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziyang Yan","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011770981","display_name":"Shiyan Peng","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shiyan Peng","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100320672","display_name":"Yuanyuan Zhang","orcid":"https://orcid.org/0000-0002-8632-5863"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuanyuan Zhang","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":null,"apc_paid":null,"fwci":6.6315,"has_fulltext":false,"cited_by_count":44,"citation_normalized_percentile":{"value":0.97813832,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"175","last_page":"186"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.8969330787658691},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.818581759929657},{"id":"https://openalex.org/keywords/upload","display_name":"Upload","score":0.6999523043632507},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5982642769813538},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.545465886592865},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.5016100406646729},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.49374350905418396},{"id":"https://openalex.org/keywords/password-cracking","display_name":"Password cracking","score":0.45448067784309387},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.34757259488105774},{"id":"https://openalex.org/keywords/one-time-password","display_name":"One-time password","score":0.3331618309020996},{"id":"https://openalex.org/keywords/password-strength","display_name":"Password strength","score":0.2835492491722107},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.12511461973190308}],"concepts":[{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.8969330787658691},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.818581759929657},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.6999523043632507},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5982642769813538},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.545465886592865},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.5016100406646729},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.49374350905418396},{"id":"https://openalex.org/C3847113","wikidata":"https://www.wikidata.org/wiki/Q2746524","display_name":"Password cracking","level":5,"score":0.45448067784309387},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.34757259488105774},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.3331618309020996},{"id":"https://openalex.org/C70530487","wikidata":"https://www.wikidata.org/wiki/Q1990841","display_name":"Password strength","level":4,"score":0.2835492491722107},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.12511461973190308}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3510003.3510150","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3510003.3510150","pdf_url":null,"source":{"id":"https://openalex.org/S4363608872","display_name":"Proceedings of the 44th International Conference on Software Engineering","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 44th International Conference on Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W1996430944","https://openalex.org/W2007488200","https://openalex.org/W2073342447","https://openalex.org/W2088673953","https://openalex.org/W2097267243","https://openalex.org/W2121386924","https://openalex.org/W2135359429","https://openalex.org/W2149929743","https://openalex.org/W2344444819","https://openalex.org/W2516621648","https://openalex.org/W2533383364","https://openalex.org/W2559935471","https://openalex.org/W2740220421","https://openalex.org/W2752929869","https://openalex.org/W2765667105","https://openalex.org/W2793024489","https://openalex.org/W2915514522","https://openalex.org/W2931153881","https://openalex.org/W2947593054","https://openalex.org/W2955656327","https://openalex.org/W2963022149","https://openalex.org/W2963532563","https://openalex.org/W2964150020","https://openalex.org/W2993331254","https://openalex.org/W2997591727","https://openalex.org/W2997915791","https://openalex.org/W3003572584","https://openalex.org/W3005951744","https://openalex.org/W3011564318","https://openalex.org/W3022049116","https://openalex.org/W3043171079","https://openalex.org/W3085613209","https://openalex.org/W3087524242","https://openalex.org/W3098380913","https://openalex.org/W3140103367","https://openalex.org/W4246226690","https://openalex.org/W4253731935","https://openalex.org/W6600020652","https://openalex.org/W6602452458"],"related_works":["https://openalex.org/W3088784215","https://openalex.org/W2989690789","https://openalex.org/W1990594668","https://openalex.org/W2021087413","https://openalex.org/W2400890210","https://openalex.org/W4381744352","https://openalex.org/W2184803487","https://openalex.org/W2949495265","https://openalex.org/W2953105088","https://openalex.org/W2054626033"],"abstract_inverted_index":{"The":[0],"prosperity":[1],"of":[2,146,153,167,186,222,236],"the":[3,29,38,49,91,143,151,154,164,168,171,180,234,237],"GitHub":[4,199],"community":[5],"has":[6],"raised":[7],"new":[8,176],"concerns":[9],"about":[10],"data":[11],"security":[12,235],"in":[13,28,37,42,48,56,78,170],"public":[14,39,125,195],"repositories.":[15,214],"Practitioners":[16],"who":[17],"manage":[18],"authentication":[19],"secrets":[20,69],"such":[21,46],"as":[22],"textual":[23,81,95,147,159],"passwords":[24,96,148,160,169],"and":[25,149,183,203,227],"API":[26,74],"keys":[27,77],"source":[30,50,172],"code":[31,51,155,196],"may":[32],"accidentally":[33],"leave":[34],"these":[35],"texts":[36],"repositories,":[40],"resulting":[41],"secret":[43],"leakage.":[44],"If":[45],"leakage":[47,123,188,207,224],"can":[52],"be":[53,61,98],"automatically":[54],"detected":[55],"time,":[57],"potential":[58],"damage":[59],"would":[60],"avoided.":[62],"With":[63],"existing":[64],"approaches":[65],"focusing":[66],"on":[67,107,132,189,198,225],"detecting":[68,121],"with":[70],"distinctive":[71],"formats":[72],"(e.g.,":[73],"keys,":[75],"cryptographic":[76],"PEM":[79],"format),":[80],"passwords,":[82],"which":[83],"are":[84],"ubiquitously":[85],"used":[86],"for":[87,161,200],"authentication,":[88,162],"fall":[89],"through":[90],"crack.":[92],"Given":[93],"that":[94,127,157,205],"could":[97,232],"virtually":[99],"any":[100],"strings,":[101],"a":[102,133,219],"naive":[103],"detection":[104],"scheme":[105],"based":[106],"regular":[108],"expression":[109],"performs":[110],"poorly.":[111],"This":[112],"paper":[113],"presents":[114],"PassFinder,":[115],"an":[116],"automated":[117],"approach":[118],"to":[119,141,218],"effectively":[120],"password":[122,187,206,223],"from":[124],"repositories":[126],"involve":[128],"various":[129],"programming":[130],"languages":[131],"large":[134],"scale.":[135],"PassFinder":[136],"utilizes":[137],"deep":[138],"neural":[139],"networks":[140],"unveil":[142],"intrinsic":[144],"characteristics":[145],"understand":[150],"semantics":[152],"snippets":[156],"use":[158],"i.e.,":[163],"contextual":[165],"information":[166],"code.":[173],"Using":[174],"this":[175],"technique,":[177],"we":[178,228],"performed":[179],"first":[181],"large-scale":[182],"longitudinal":[184],"analysis":[185],"GitHub.":[190],"We":[191],"inspected":[192],"newly":[193],"uploaded":[194],"files":[197],"75":[201],"days":[202],"found":[204],"is":[208],"pervasive,":[209],"affecting":[210],"over":[211],"sixty":[212],"thousand":[213],"Our":[215],"work":[216],"contributes":[217],"better":[220],"understanding":[221],"GitHub,":[226],"believe":[229],"our":[230],"technique":[231],"promote":[233],"open-source":[238],"ecosystem.":[239]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":1}],"updated_date":"2026-08-14T07:06:38.338062","created_date":"2025-10-10T00:00:00"}