{"id":"https://openalex.org/W4312856222","doi":"https://doi.org/10.1145/3524842.3528513","title":"SECOM","display_name":"SECOM","publication_year":2022,"publication_date":"2022-05-23","ids":{"openalex":"https://openalex.org/W4312856222","doi":"https://doi.org/10.1145/3524842.3528513"},"language":"en","primary_location":{"id":"doi:10.1145/3524842.3528513","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3524842.3528513","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3524842.3528513","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th International Conference on Mining Software Repositories","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3524842.3528513","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045058755","display_name":"Sofia Reis","orcid":"https://orcid.org/0000-0002-5690-2279"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sofia Reis","raw_affiliation_strings":["U. of Lisbon, Lisbon, Portugal"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"U. of Lisbon, Lisbon, Portugal","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Rui Abreu","orcid":null},"institutions":[{"id":"https://openalex.org/I182534213","display_name":"Universidade do Porto","ror":"https://ror.org/043pwc612","country_code":"PT","type":"education","lineage":["https://openalex.org/I182534213"]},{"id":"https://openalex.org/I4210090069","display_name":"Universidade S\u00e9nior Contempor\u00e2nea","ror":"https://ror.org/008836v19","country_code":"PT","type":"education","lineage":["https://openalex.org/I4210090069"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Rui Abreu","raw_affiliation_strings":["U. Porto, Porto, Portugal"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"U. Porto, Porto, Portugal","institution_ids":["https://openalex.org/I182534213","https://openalex.org/I4210090069"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071201325","display_name":"Hakan Erdogmus","orcid":"https://orcid.org/0000-0002-7987-5621"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hakan Erdogmus","raw_affiliation_strings":["Carnegie Mellon University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053134485","display_name":"Corina S. P\u0103s\u0103reanu","orcid":"https://orcid.org/0000-0002-5579-6961"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Corina P\u0103s\u0103reanu","raw_affiliation_strings":["Carnegie Mellon University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"764","last_page":"765"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/commit","display_name":"Commit","score":0.975858211517334},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7791863083839417},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.645315945148468},{"id":"https://openalex.org/keywords/security-bug","display_name":"Security bug","score":0.4705653190612793},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4303783178329468},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.4048525393009186},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.341044157743454},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.17701822519302368},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.12522155046463013},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.09847098588943481}],"concepts":[{"id":"https://openalex.org/C153180980","wikidata":"https://www.wikidata.org/wiki/Q19776675","display_name":"Commit","level":2,"score":0.975858211517334},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7791863083839417},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.645315945148468},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.4705653190612793},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4303783178329468},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4048525393009186},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.341044157743454},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.17701822519302368},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.12522155046463013},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.09847098588943481}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3524842.3528513","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3524842.3528513","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3524842.3528513","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th International Conference on Mining Software Repositories","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3524842.3528513","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3524842.3528513","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3524842.3528513","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th International Conference on Mining Software Repositories","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.699999988079071,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4312856222.pdf","grobid_xml":"https://content.openalex.org/works/W4312856222.grobid-xml"},"referenced_works_count":6,"referenced_works":["https://openalex.org/W2963926786","https://openalex.org/W3086100325","https://openalex.org/W3127782461","https://openalex.org/W3166095789","https://openalex.org/W3183469243","https://openalex.org/W6750295443"],"related_works":["https://openalex.org/W2560421591","https://openalex.org/W2406043920","https://openalex.org/W1561562093","https://openalex.org/W4385532476","https://openalex.org/W2499489413","https://openalex.org/W2589805430","https://openalex.org/W2155206946","https://openalex.org/W3189065608","https://openalex.org/W896362041","https://openalex.org/W4380568740"],"abstract_inverted_index":{"One":[0],"way":[1],"to":[2,31],"detect":[3],"and":[4,19,36,51,62,68,73],"assess":[5],"software":[6],"vulnerabilities":[7,22,64],"is":[8,27],"by":[9],"extracting":[10],"security-related":[11,55],"information":[12,56],"from":[13],"commit":[14,25,47],"messages.":[15,38],"Automating":[16],"the":[17,32],"detection":[18],"assessment":[20],"of":[21,34,54],"upon":[23],"security":[24,46],"messages":[26,48],"still":[28],"challenging":[29],"due":[30],"lack":[33],"structured":[35],"clear":[37],"We":[39],"created":[40],"a":[41],"convention,":[42],"called":[43],"SECOM,":[44],"for":[45,60,65],"that":[49,57],"structure":[50],"include":[52],"bits":[53],"are":[58,75],"essential":[59],"detecting":[61],"assessing":[63],"both":[66],"humans":[67],"tools.":[69],"The":[70],"full":[71],"convention":[72],"details":[74],"available":[76],"here:":[77],"https://tqrg.github.io/secom/.":[78]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2023-01-05T00:00:00"}