{"id":"https://openalex.org/W4405181090","doi":"https://doi.org/10.1145/3658644.3690276","title":"Gopher: High-Precision and Deep-Dive Detection of Cryptographic API Misuse in the Go Ecosystem","display_name":"Gopher: High-Precision and Deep-Dive Detection of Cryptographic API Misuse in the Go Ecosystem","publication_year":2024,"publication_date":"2024-12-02","ids":{"openalex":"https://openalex.org/W4405181090","doi":"https://doi.org/10.1145/3658644.3690276"},"language":"en","primary_location":{"id":"doi:10.1145/3658644.3690276","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690276","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690276","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690276","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029731391","display_name":"Y. H. Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuexi Zhang","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0002-6250-3570","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100683081","display_name":"Bingyu Li","orcid":"https://orcid.org/0000-0001-5925-1638"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bingyu Li","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-5925-1638","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075421344","display_name":"Jingqiang Lin","orcid":"https://orcid.org/0000-0003-2639-3722"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingqiang Lin","raw_affiliation_strings":["School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China"],"raw_orcid":"https://orcid.org/0000-0003-2639-3722","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101967550","display_name":"Linghui Li","orcid":"https://orcid.org/0000-0002-7614-3142"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Linghui Li","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-7614-3142","affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017174482","display_name":"Jia-Ju Bai","orcid":"https://orcid.org/0000-0002-9500-6100"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiaju Bai","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9500-6100","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101824334","display_name":"Shijie Jia","orcid":"https://orcid.org/0000-0002-4262-9478"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shijie Jia","raw_affiliation_strings":["Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, CAS, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-4262-9478","affiliations":[{"raw_affiliation_string":"Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064326715","display_name":"Qianhong Wu","orcid":"https://orcid.org/0000-0003-4604-1142"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qianhong Wu","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4604-1142","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6114,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.68037522,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"2978","last_page":"2992"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7865796089172363},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.776501476764679},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.6823958158493042},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4996225833892822},{"id":"https://openalex.org/keywords/scrutiny","display_name":"Scrutiny","score":0.49717119336128235},{"id":"https://openalex.org/keywords/cryptographic-primitive","display_name":"Cryptographic primitive","score":0.4906984567642212},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.3986338973045349},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3502119481563568},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.1747083067893982}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7865796089172363},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.776501476764679},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.6823958158493042},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4996225833892822},{"id":"https://openalex.org/C2776050585","wikidata":"https://www.wikidata.org/wiki/Q7439360","display_name":"Scrutiny","level":2,"score":0.49717119336128235},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.4906984567642212},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.3986338973045349},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3502119481563568},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.1747083067893982},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3658644.3690276","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690276","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690276","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3658644.3690276","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690276","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690276","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.699999988079071,"display_name":"Life below water","id":"https://metadata.un.org/sdg/14"}],"awards":[{"id":"https://openalex.org/G2970563681","display_name":null,"funder_award_id":"YWF-22-L-1272","funder_id":"https://openalex.org/F4320321125","funder_display_name":"Beihang University"},{"id":"https://openalex.org/G3037219954","display_name":null,"funder_award_id":"2022YFB2701600","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4154949110","display_name":null,"funder_award_id":"U21A20467","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4233126585","display_name":null,"funder_award_id":"62272457","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4823297027","display_name":null,"funder_award_id":"2022YFB2701600","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"},{"id":"https://openalex.org/G6412863181","display_name":null,"funder_award_id":"62472021, 62202066, U21A20467, 61932011, 62272457","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"},{"id":"https://openalex.org/G7289417769","display_name":null,"funder_award_id":"62202066","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8060741714","display_name":"\u57fa\u4e8e\u533a\u5757\u94fe\u7684\u7269\u8054\u7f51\u5b89\u5168\u6280\u672f\u7814\u7a76","funder_award_id":"61932011","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321125","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56"},{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4405181090.pdf","grobid_xml":"https://content.openalex.org/works/W4405181090.grobid-xml"},"referenced_works_count":24,"referenced_works":["https://openalex.org/W1594513698","https://openalex.org/W2008810193","https://openalex.org/W2064136106","https://openalex.org/W2084864601","https://openalex.org/W2293618135","https://openalex.org/W2357927175","https://openalex.org/W2698406033","https://openalex.org/W2759023773","https://openalex.org/W2760843627","https://openalex.org/W2767943400","https://openalex.org/W2914982603","https://openalex.org/W2964144088","https://openalex.org/W2973035781","https://openalex.org/W2985320478","https://openalex.org/W3034714558","https://openalex.org/W3162604819","https://openalex.org/W3182110757","https://openalex.org/W3195289546","https://openalex.org/W3198445466","https://openalex.org/W3198867963","https://openalex.org/W3202114283","https://openalex.org/W4319338822","https://openalex.org/W4328028881","https://openalex.org/W4391724777"],"related_works":["https://openalex.org/W2904818008","https://openalex.org/W2904314268","https://openalex.org/W57958781","https://openalex.org/W1554274402","https://openalex.org/W1982325601","https://openalex.org/W4240432851","https://openalex.org/W2289378658","https://openalex.org/W1531360494","https://openalex.org/W1988007309","https://openalex.org/W154233216"],"abstract_inverted_index":{"The":[0],"complexity":[1],"of":[2,115,143,166,188],"cryptographic":[3,20,49,87],"APIs":[4],"and":[5,43,65,96,111,120,137,145,156,185,200],"developers'":[6],"expertise":[7],"gaps":[8],"often":[9],"leads":[10],"to":[11,32,39,45,106,129],"their":[12],"improper":[13],"use,":[14],"seriously":[15],"threatening":[16],"information":[17],"security.":[18],"Existing":[19],"API":[21,95],"misuse":[22,88,202],"detection":[23,35,89,147],"tools":[24,54],"that":[25,91],"rely":[26],"on":[27],"black/white-list":[28],"methods":[29],"require":[30],"experts":[31],"manually":[33],"establish":[34],"rules.":[36],"They":[37],"struggle":[38],"dynamically":[40],"update":[41],"rules":[42,108,119],"scale":[44],"cover":[46],"numerous":[47,196],"unofficial":[48],"libraries.":[50],"Furthermore,":[51],"as":[52],"these":[53,80],"are":[55],"primarily":[56],"aimed":[57],"at":[58],"non-Go":[59],"languages,":[60],"they":[61],"have":[62,103,161],"limited":[63],"applicability":[64],"accuracy":[66,183],"in":[67,93],"the":[68,152,167],"Go":[69,168,172],"ecosystem,":[70,169],"which":[71],"is":[72],"extensively":[73],"used":[74],"for":[75],"security-centric":[76],"applications.":[77],"To":[78],"mitigate":[79],"challenges,":[81],"we":[82,102,160],"present":[83],"Gopher,":[84,159],"a":[85,131,180],"novel":[86],"framework,":[90,101],"excels":[92],"encapsulated":[94],"cross-library":[97],"detection.":[98],"In":[99,174],"this":[100],"designed":[104],"CryDict":[105,128],"convert":[107],"into":[109],"unified":[110],"standardized":[112],"constraints,":[113],"capable":[114],"deriving":[116],"new":[117],"usage":[118],"elucidating":[121],"implicit":[122],"knowledge":[123],"during":[124],"scanning.":[125],"Gopher":[126,153,178],"leverages":[127],"create":[130],"logical":[132],"separation":[133],"between":[134],"rule":[135],"formulation":[136],"Detector":[138],"detection,":[139],"enabling":[140],"dynamic":[141],"updating":[142],"constraints":[144],"enhancing":[146],"capabilities.":[148],"This":[149,192],"significantly":[150],"improves":[151],"'s":[154],"compatibility":[155],"scalability.":[157],"Utilizing":[158],"conducted":[162],"an":[163],"extensive":[164],"analysis":[165],"examining":[170],"19,313":[171],"projects.":[173],"our":[175],"rigorous":[176],"testing,":[177],"demonstrated":[179],"remarkable":[181],"98.9%":[182],"rate":[184],"identified":[186],"64.1%":[187],"previously":[189],"undetected":[190],"misuses.":[191],"scrutiny":[193],"has":[194],"surfaced":[195],"hidden":[197],"security":[198],"vulnerabilities,":[199],"highlighted":[201],"tendencies":[203],"across":[204],"diverse":[205],"project":[206],"categories.":[207]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}