{"id":"https://openalex.org/W4307811449","doi":"https://doi.org/10.1145/3569936","title":"DAISY: Dynamic-Analysis-Induced Source Discovery for Sensitive Data","display_name":"DAISY: Dynamic-Analysis-Induced Source Discovery for Sensitive Data","publication_year":2022,"publication_date":"2022-10-29","ids":{"openalex":"https://openalex.org/W4307811449","doi":"https://doi.org/10.1145/3569936"},"language":"en","primary_location":{"id":"doi:10.1145/3569936","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3569936","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3569936","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3569936","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101924650","display_name":"Xueling Zhang","orcid":"https://orcid.org/0000-0002-3156-906X"},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xueling Zhang","raw_affiliation_strings":["Rochester Institute of Technology, USA"],"raw_orcid":"https://orcid.org/0000-0002-3156-906X","affiliations":[{"raw_affiliation_string":"Rochester Institute of Technology, USA","institution_ids":["https://openalex.org/I155173764"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103039077","display_name":"John Heaps","orcid":"https://orcid.org/0000-0002-4038-4278"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John Heaps","raw_affiliation_strings":["The University of Texas at San Antonio, USA"],"raw_orcid":"https://orcid.org/0000-0002-4038-4278","affiliations":[{"raw_affiliation_string":"The University of Texas at San Antonio, USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049810765","display_name":"Rocky Slavin","orcid":"https://orcid.org/0000-0003-1283-2595"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rocky Slavin","raw_affiliation_strings":["The University of Texas at San Antonio, USA"],"raw_orcid":"https://orcid.org/0000-0003-1283-2595","affiliations":[{"raw_affiliation_string":"The University of Texas at San Antonio, USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103041668","display_name":"Jianwei Niu","orcid":"https://orcid.org/0000-0002-5667-3285"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jianwei Niu","raw_affiliation_strings":["The University of Texas at San Antonio, USA"],"raw_orcid":"https://orcid.org/0000-0002-5667-3285","affiliations":[{"raw_affiliation_string":"The University of Texas at San Antonio, USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006266551","display_name":"Travis D. Breaux","orcid":"https://orcid.org/0000-0001-7127-8155"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Travis Breaux","raw_affiliation_strings":["Carnegie Mellon University, USA"],"raw_orcid":"https://orcid.org/0000-0001-7127-8155","affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, USA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101558050","display_name":"Xiaoyin Wang","orcid":"https://orcid.org/0000-0002-9079-5534"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaoyin Wang","raw_affiliation_strings":["The University of Texas at San Antonio, USA"],"raw_orcid":"https://orcid.org/0000-0002-9079-5534","affiliations":[{"raw_affiliation_string":"The University of Texas at San Antonio, USA","institution_ids":["https://openalex.org/I45438204"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2726,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.79152722,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"32","issue":"4","first_page":"1","last_page":"34"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.848761260509491},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7375838756561279},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.5558494329452515},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5161738991737366},{"id":"https://openalex.org/keywords/mobile-apps","display_name":"Mobile apps","score":0.4918837547302246},{"id":"https://openalex.org/keywords/third-party","display_name":"Third party","score":0.42084619402885437},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.41400134563446045},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.373540997505188},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.3347417116165161},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.1766112744808197},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14163348078727722},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.09432017803192139}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.848761260509491},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7375838756561279},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.5558494329452515},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5161738991737366},{"id":"https://openalex.org/C2988145974","wikidata":"https://www.wikidata.org/wiki/Q620615","display_name":"Mobile apps","level":2,"score":0.4918837547302246},{"id":"https://openalex.org/C2983583741","wikidata":"https://www.wikidata.org/wiki/Q16785388","display_name":"Third party","level":2,"score":0.42084619402885437},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.41400134563446045},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.373540997505188},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3347417116165161},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.1766112744808197},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14163348078727722},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.09432017803192139}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3569936","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3569936","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3569936","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3569936","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3569936","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3569936","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2257890507","display_name":"CREST Center for Security and Privacy Enhanced Cloud Computing (C-SPECC)","funder_award_id":"1736209","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3431183365","display_name":"Collaborative Research: SHF: Small: Reuse and Migration of GUI Tests","funder_award_id":"2007718","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3479644679","display_name":"CRII: SaTC: Automatic Generation of API to Natural Language Data Type Mappings for Developer and End User Privacy Risk Mitigation","funder_award_id":"1948244","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5835596641","display_name":"Collaborative Research: EAGER: Enhancing Security and Privacy of Augmented Reality Mobile Applications through Software Behavior Analysis","funder_award_id":"2221843","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G645906881","display_name":"CAREER: Analysis and Repair of Build Scripts for DevOps Software Practice","funder_award_id":"1846467","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4307811449.pdf","grobid_xml":"https://content.openalex.org/works/W4307811449.grobid-xml"},"referenced_works_count":48,"referenced_works":["https://openalex.org/W124941384","https://openalex.org/W1614298861","https://openalex.org/W1616720564","https://openalex.org/W1972796262","https://openalex.org/W2060692877","https://openalex.org/W2063473896","https://openalex.org/W2070386561","https://openalex.org/W2078197322","https://openalex.org/W2080573945","https://openalex.org/W2083342170","https://openalex.org/W2111525908","https://openalex.org/W2113115074","https://openalex.org/W2166743230","https://openalex.org/W2344444819","https://openalex.org/W2376050373","https://openalex.org/W2493916176","https://openalex.org/W2735107741","https://openalex.org/W2746632572","https://openalex.org/W2794864670","https://openalex.org/W2803054784","https://openalex.org/W2888272748","https://openalex.org/W2888693151","https://openalex.org/W2896457183","https://openalex.org/W2914452207","https://openalex.org/W2914825488","https://openalex.org/W2915011089","https://openalex.org/W2931968245","https://openalex.org/W2947965029","https://openalex.org/W2961642335","https://openalex.org/W2962960733","https://openalex.org/W2964150020","https://openalex.org/W3036640941","https://openalex.org/W3047164090","https://openalex.org/W3091051094","https://openalex.org/W3106500569","https://openalex.org/W3123350660","https://openalex.org/W3161202781","https://openalex.org/W3177717497","https://openalex.org/W4237192363","https://openalex.org/W4239652717","https://openalex.org/W4244726870","https://openalex.org/W4246774680","https://openalex.org/W4253099749","https://openalex.org/W4254216947","https://openalex.org/W4300388644","https://openalex.org/W4300613830","https://openalex.org/W4300768436","https://openalex.org/W6719819555"],"related_works":["https://openalex.org/W2922039621","https://openalex.org/W2887633424","https://openalex.org/W4312980538","https://openalex.org/W2942010890","https://openalex.org/W2796028780","https://openalex.org/W2290452149","https://openalex.org/W2734812495","https://openalex.org/W3045828559","https://openalex.org/W2404825107","https://openalex.org/W2898697275"],"abstract_inverted_index":{"Mobile":[0],"apps":[1,131],"are":[2,89,96],"widely":[3],"used":[4],"and":[5,23,43,94,132,143,160,184],"often":[6],"process":[7],"users\u2019":[8],"sensitive":[9,20,37,62,128,149],"data.":[10,63,78],"Many":[11],"taint":[12],"analysis":[13],"tools":[14,30],"have":[15,45],"been":[16],"applied":[17],"to":[18,61,82,91],"analyze":[19],"information":[21,129],"flows":[22],"report":[24],"data":[25,38],"leaks":[26,185],"in":[27,151],"apps.":[28,153],"These":[29],"require":[31],"a":[32,97,118],"list":[33],"of":[34,100,141,171,180],"sources":[35,183],"(where":[36],"is":[39,80],"accessed)":[40],"as":[41],"input,":[42],"researchers":[44],"constructed":[46],"such":[47,84],"lists":[48],"within":[49],"the":[50,92,105,161,175,181],"Android":[51,55],"platform":[52],"by":[53,189],"identifying":[54,124],"API":[56],"methods":[57,70,75,125,142,150],"that":[58,107,126,164],"allow":[59],"access":[60],"However,":[64],"app":[65],"developers":[66],"may":[67],"also":[68],"define":[69],"or":[71],"use":[72],"third-party":[73,101,133],"library\u2019s":[74],"for":[76,123],"accessing":[77],"It":[79],"difficult":[81],"collect":[83],"source":[85],"methods,":[86],"because":[87],"they":[88],"unique":[90],"apps,":[93,159],"there":[95],"large":[98],"number":[99],"libraries":[102],"available":[103],"on":[104,136,157],"market":[106],"evolve":[108],"over":[109],"time.":[110],"To":[111],"address":[112],"this":[113],"problem,":[114],"we":[115],"propose":[116],"DAISY,":[117],"Dynamic-Analysis-Induced":[119],"Source":[120],"discoverY":[121],"approach":[122],"return":[127],"from":[130],"libraries.":[134],"Trained":[135],"an":[137,168],"automatically":[138],"labeled":[139],"dataset":[140],"their":[144],"calling":[145],"context,":[146],"DAISY":[147,156,165],"identifies":[148],"unseen":[152],"We":[154],"evaluated":[155],"real-world":[158],"results":[162],"show":[163],"can":[166],"achieve":[167],"overall":[169],"precision":[170],"77.9%":[172],"when":[173],"reporting":[174],"most":[176],"confident":[177],"results.":[178],"Most":[179],"identified":[182],"cannot":[186],"be":[187],"detected":[188],"existing":[190],"technologies.":[191]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}