{"id":"https://openalex.org/W4311595398","doi":"https://doi.org/10.1145/3564625.3564654","title":"From Hindsight to Foresight: Enhancing Design Artifacts for Business Logic Flaw Discovery","display_name":"From Hindsight to Foresight: Enhancing Design Artifacts for Business Logic Flaw Discovery","publication_year":2022,"publication_date":"2022-12-03","ids":{"openalex":"https://openalex.org/W4311595398","doi":"https://doi.org/10.1145/3564625.3564654"},"language":"en","primary_location":{"id":"doi:10.1145/3564625.3564654","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3564625.3564654","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5016592996","display_name":"Carmen Cheh","orcid":"https://orcid.org/0000-0002-8510-7274"},"institutions":[{"id":"https://openalex.org/I4210108443","display_name":"Advanced Digital Sciences Center","ror":"https://ror.org/01xaqx887","country_code":"SG","type":"facility","lineage":["https://openalex.org/I4210108443"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Carmen Cheh","raw_affiliation_strings":["Advanced Digital Sciences Center, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-8510-7274","affiliations":[{"raw_affiliation_string":"Advanced Digital Sciences Center, Singapore","institution_ids":["https://openalex.org/I4210108443"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046267104","display_name":"Nicholas Tay","orcid":"https://orcid.org/0000-0002-5063-3151"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Nicholas Tay","raw_affiliation_strings":["Singapore University of Technology and Design, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-5063-3151","affiliations":[{"raw_affiliation_string":"Singapore University of Technology and Design, Singapore","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100687673","display_name":"Binbin Chen","orcid":"https://orcid.org/0000-0002-9584-0082"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Binbin Chen","raw_affiliation_strings":["Singapore University of Technology and Design, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-9584-0082","affiliations":[{"raw_affiliation_string":"Singapore University of Technology and Design, Singapore","institution_ids":["https://openalex.org/I152815399"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5024,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.63897891,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"400","last_page":"411"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hindsight-bias","display_name":"Hindsight bias","score":0.8802275657653809},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.758562445640564},{"id":"https://openalex.org/keywords/futures-studies","display_name":"Futures studies","score":0.602259635925293},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.5588595867156982},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5078571438789368},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.41811975836753845},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.37368229031562805},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.36728736758232117},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2147805094718933},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.18107333779335022}],"concepts":[{"id":"https://openalex.org/C10347200","wikidata":"https://www.wikidata.org/wiki/Q1960297","display_name":"Hindsight bias","level":2,"score":0.8802275657653809},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.758562445640564},{"id":"https://openalex.org/C64848388","wikidata":"https://www.wikidata.org/wiki/Q188867","display_name":"Futures studies","level":2,"score":0.602259635925293},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.5588595867156982},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5078571438789368},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.41811975836753845},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.37368229031562805},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.36728736758232117},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2147805094718933},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.18107333779335022},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3564625.3564654","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3564625.3564654","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1191933946","display_name":null,"funder_award_id":"SRG ISTD 2020 157","funder_id":"https://openalex.org/F4320324110","funder_display_name":"Singapore University of Technology and Design"}],"funders":[{"id":"https://openalex.org/F4320320709","display_name":"National Research Foundation Singapore","ror":"https://ror.org/03cpyc314"},{"id":"https://openalex.org/F4320324110","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W2070689669","https://openalex.org/W2118520057","https://openalex.org/W2153773513","https://openalex.org/W2156835762","https://openalex.org/W2162720432","https://openalex.org/W2204102791","https://openalex.org/W2793043914","https://openalex.org/W2890521506","https://openalex.org/W3000351562","https://openalex.org/W3023744356","https://openalex.org/W4313036393"],"related_works":["https://openalex.org/W3197854638","https://openalex.org/W3140454661","https://openalex.org/W4245029315","https://openalex.org/W2139970489","https://openalex.org/W1492315459","https://openalex.org/W1512434910","https://openalex.org/W2540910169","https://openalex.org/W3089780453","https://openalex.org/W3148904318","https://openalex.org/W2022803902"],"abstract_inverted_index":{"Web":[0],"applications":[1,124],"have":[2,126],"encroached":[3],"on":[4,85],"our":[5,117,131],"lives,":[6],"handling":[7],"important":[8],"tasks":[9],"and":[10,78,137],"sensitive":[11],"information.":[12],"There":[13],"are":[14,26],"many":[15],"tools":[16],"that":[17],"check":[18],"application":[19],"code":[20,41,99],"for":[21,101],"implementation-level":[22],"vulnerabilities":[23],"but":[24],"they":[25],"often":[27],"blind":[28],"to":[29,50,119],"flaws":[30,39,55,58,110],"caused":[31],"by":[32,59],"violation":[33],"of":[34],"design-level":[35,57],"assumptions.":[36],"Fixing":[37],"such":[38],"after":[40,151],"deployment":[42],"is":[43],"costly.":[44],"In":[45],"this":[46],"work,":[47],"we":[48,72,105],"seek":[49],"retroactively":[51],"identify":[52],"business":[53],"logic":[54],"or":[56],"generating":[60],"security":[61],"tests":[62],"during":[63,111],"the":[64,112,158],"design":[65,87,109],"phase":[66],"using":[67,95],"available":[68],"software":[69],"artifacts.":[70],"Specifically,":[71],"take":[73],"in":[74,149],"use":[75,103],"case":[76,82,93,134],"scenarios":[77,83,94,135],"automatically":[79],"generate":[80],"misuse":[81,92,133],"based":[84],"user-defined":[86],"constraints.":[88],"By":[89],"running":[90],"those":[91],"already":[96],"existing":[97],"testing":[98],"written":[100],"functional":[102],"cases,":[104],"can":[106],"discover":[107],"potential":[108],"coding":[113],"phase.":[114],"We":[115],"apply":[116],"approach":[118],"two":[120],"widely":[121],"used":[122],"open-source":[123],"which":[125],"high-quality":[127],"feature":[128],"files.":[129],"Running":[130],"generated":[132],"discovers,":[136],"hence,":[138],"potentially":[139],"prevents":[140],"seven":[141],"flaws.":[142],"Among":[143],"them,":[144],"several":[145],"were":[146],"only":[147],"fixed":[148],"hindsight":[150],"someone":[152],"stumbled":[153],"upon":[154],"a":[155],"bug,":[156],"with":[157],"remaining":[159],"being":[160],"new":[161],"issues.":[162]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}