{"id":"https://openalex.org/W4402457456","doi":"https://doi.org/10.1145/3650212.3652139","title":"Silent Taint-Style Vulnerability Fixes Identification","display_name":"Silent Taint-Style Vulnerability Fixes Identification","publication_year":2024,"publication_date":"2024-09-11","ids":{"openalex":"https://openalex.org/W4402457456","doi":"https://doi.org/10.1145/3650212.3652139"},"language":"en","primary_location":{"id":"doi:10.1145/3650212.3652139","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3650212.3652139","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5083834832","display_name":"Zhongzhen Wen","orcid":"https://orcid.org/0009-0005-6737-9953"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhongzhen Wen","raw_affiliation_strings":["Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0009-0005-6737-9953","affiliations":[{"raw_affiliation_string":"Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012386754","display_name":"Jiayuan Zhou","orcid":"https://orcid.org/0000-0002-5181-3146"},"institutions":[{"id":"https://openalex.org/I4210115038","display_name":"Huawei Technologies (Canada)","ror":"https://ror.org/026venb53","country_code":"CA","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210115038"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Jiayuan Zhou","raw_affiliation_strings":["Huawei, Waterloo, Canada"],"raw_orcid":"https://orcid.org/0000-0002-5181-3146","affiliations":[{"raw_affiliation_string":"Huawei, Waterloo, Canada","institution_ids":["https://openalex.org/I4210115038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002720603","display_name":"Minxue Pan","orcid":"https://orcid.org/0000-0002-4011-5350"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Minxue Pan","raw_affiliation_strings":["Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-4011-5350","affiliations":[{"raw_affiliation_string":"Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070990953","display_name":"Shaohua Wang","orcid":"https://orcid.org/0000-0001-5777-7759"},"institutions":[{"id":"https://openalex.org/I137867983","display_name":"Central University of Finance and Economics","ror":"https://ror.org/008e3hf02","country_code":"CN","type":"education","lineage":["https://openalex.org/I137867983"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shaohua Wang","raw_affiliation_strings":["Central University of Finance and Economics, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-5777-7759","affiliations":[{"raw_affiliation_string":"Central University of Finance and Economics, Beijing, China","institution_ids":["https://openalex.org/I137867983"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047688641","display_name":"Xing Hu","orcid":"https://orcid.org/0000-0003-0093-3292"},"institutions":[{"id":"https://openalex.org/I109935558","display_name":"Ningbo University","ror":"https://ror.org/03et85d35","country_code":"CN","type":"education","lineage":["https://openalex.org/I109935558"]},{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xing Hu","raw_affiliation_strings":["Zhejiang University, Ningbo, China"],"raw_orcid":"https://orcid.org/0000-0003-0093-3292","affiliations":[{"raw_affiliation_string":"Zhejiang University, Ningbo, China","institution_ids":["https://openalex.org/I109935558","https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102788204","display_name":"Tongtong Xu","orcid":"https://orcid.org/0000-0002-4323-497X"},"institutions":[{"id":"https://openalex.org/I2250955327","display_name":"Huawei Technologies (China)","ror":"https://ror.org/00cmhce21","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250955327"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tongtong Xu","raw_affiliation_strings":["Huawei, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-4323-497X","affiliations":[{"raw_affiliation_string":"Huawei, Hangzhou, China","institution_ids":["https://openalex.org/I2250955327"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078890349","display_name":"Tian Zhang","orcid":"https://orcid.org/0000-0003-0104-2731"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tian Zhang","raw_affiliation_strings":["Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0003-0104-2731","affiliations":[{"raw_affiliation_string":"Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090810072","display_name":"Xuandong Li","orcid":"https://orcid.org/0000-0003-3090-9568"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuandong Li","raw_affiliation_strings":["Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0003-3090-9568","affiliations":[{"raw_affiliation_string":"Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6114,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.65546664,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"428","last_page":"439"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6889280080795288},{"id":"https://openalex.org/keywords/style","display_name":"Style (visual arts)","score":0.6740925908088684},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6687813997268677},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.6605393886566162},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.4727264940738678},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4674827456474304},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.14627587795257568},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.0652170479297638},{"id":"https://openalex.org/keywords/social-psychology","display_name":"Social psychology","score":0.06366205215454102},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.04613146185874939}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6889280080795288},{"id":"https://openalex.org/C2776445246","wikidata":"https://www.wikidata.org/wiki/Q1792644","display_name":"Style (visual arts)","level":2,"score":0.6740925908088684},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6687813997268677},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.6605393886566162},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4727264940738678},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4674827456474304},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.14627587795257568},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0652170479297638},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.06366205215454102},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.04613146185874939},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3650212.3652139","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3650212.3652139","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W1536098516","https://openalex.org/W1563577331","https://openalex.org/W2014950794","https://openalex.org/W2047636717","https://openalex.org/W2051990174","https://openalex.org/W2060692877","https://openalex.org/W2144344516","https://openalex.org/W2165597437","https://openalex.org/W2166743230","https://openalex.org/W2171240827","https://openalex.org/W2466311470","https://openalex.org/W2618635610","https://openalex.org/W2763994238","https://openalex.org/W2766411424","https://openalex.org/W3036270494","https://openalex.org/W3088518643","https://openalex.org/W3150814957","https://openalex.org/W4210493608","https://openalex.org/W4210660460","https://openalex.org/W4283077732","https://openalex.org/W4285176706","https://openalex.org/W4285490477","https://openalex.org/W4321383501","https://openalex.org/W4383898398","https://openalex.org/W4384155568","https://openalex.org/W4384155580","https://openalex.org/W4384302745","https://openalex.org/W4385412394","https://openalex.org/W4388482991","https://openalex.org/W4389159189"],"related_works":["https://openalex.org/W1883246888","https://openalex.org/W2370114625","https://openalex.org/W1756374135","https://openalex.org/W2947584067","https://openalex.org/W3118510577","https://openalex.org/W2280562859","https://openalex.org/W230721595","https://openalex.org/W3157230915","https://openalex.org/W1496728123","https://openalex.org/W2062873522"],"abstract_inverted_index":{"The":[0],"coordinated":[1],"vulnerability":[2,20,91,199],"disclosure":[3,47],"model,":[4],"widely":[5],"adopted":[6],"in":[7,41,167,196,201],"open-source":[8],"software":[9],"(OSS)":[10],"organizations,":[11],"recommends":[12],"the":[13,27,45,65,90,176,202],"silent":[14,110],"resolution":[15],"of":[16,31,48,117,141,169],"vulnerabilities":[17,69],"without":[18,127],"revealing":[19],"information":[21],"until":[22],"their":[23,189],"public":[24,29],"disclosure.":[25,71],"However,":[26],"inherently":[28],"nature":[30],"OSS":[32,59,79],"development":[33],"leads":[34],"to":[35,58,81,88,98,108,175],"security":[36,56,118,186,191],"fixes":[37,83,111,187,200],"becoming":[38],"publicly":[39],"available":[40],"repositories":[42],"weeks":[43],"before":[44,70,92,188],"official":[46],"vulnerabilities.":[49],"This":[50],"time":[51],"gap":[52],"poses":[53],"a":[54,75,104,164],"significant":[55],"risk":[57],"users,":[60],"as":[61,84,86],"attackers":[62],"could":[63],"discover":[64],"fix":[66,153],"and":[67,133,147],"exploit":[68],"Thus,":[72],"there":[73],"is":[74],"critical":[76],"need":[77],"for":[78,112,150],"users":[80],"sense":[82],"early":[85],"possible":[87],"address":[89],"any":[93],"exploitation":[94],"occurs.":[95],"In":[96],"response":[97],"this":[99],"challenge,":[100],"we":[101],"introduce":[102],"EarlyVulnFix,":[103],"novel":[105],"approach":[106],"designed":[107],"identify":[109],"taint-style":[113],"vulnerabilities\u2014a":[114],"persistent":[115],"class":[116],"weaknesses":[119],"where":[120],"attacker-controlled":[121],"input":[122],"reaches":[123],"sensitive":[124],"operations":[125],"(sink)":[126],"proper":[128],"sanitization.":[129],"Leveraging":[130],"data":[131],"flow":[132],"dependency":[134],"analysis,":[135],"our":[136],"tool":[137],"distinguishes":[138],"two":[139,151],"types":[140],"connections":[142],"between":[143],"newly":[144],"introduced":[145],"code":[146],"sinks,":[148],"tailored":[149],"common":[152],"scenarios.":[154],"Our":[155],"evaluation":[156],"demonstrates":[157],"that":[158],"EarlyVulnFix":[159,183],"surpasses":[160],"state-of-the-art":[161],"baselines":[162],"by":[163],"substantial":[165],"margin":[166],"terms":[168],"F1":[170],"score.":[171],"Furthermore,":[172],"when":[173],"applied":[174],"700":[177],"latest":[178],"commits":[179],"across":[180],"seven":[181],"projects,":[182],"detected":[184],"three":[185],"respective":[190],"releases,":[192],"highlighting":[193],"its":[194],"effectiveness":[195],"identifying":[197],"unreported":[198],"wild.":[203]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}