{"id":"https://openalex.org/W4403413389","doi":"https://doi.org/10.1145/3674805.3690748","title":"Towards Automated Continuous Security Compliance","display_name":"Towards Automated Continuous Security Compliance","publication_year":2024,"publication_date":"2024-10-15","ids":{"openalex":"https://openalex.org/W4403413389","doi":"https://doi.org/10.1145/3674805.3690748"},"language":"en","primary_location":{"id":"doi:10.1145/3674805.3690748","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3674805.3690748","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th ACM/IEEE International Symposium on Empirical Software Engineering and Measurement","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:bth-27254","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020380942","display_name":"Florian Angermeir","orcid":"https://orcid.org/0000-0001-7903-8236"},"institutions":[{"id":"https://openalex.org/I52719799","display_name":"Blekinge Institute of Technology","ror":"https://ror.org/0093a8w51","country_code":"SE","type":"education","lineage":["https://openalex.org/I52719799"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Florian Angermeir","raw_affiliation_strings":["fortiss, Germany and Blekinge Institute of Technology, Sweden"],"raw_orcid":"https://orcid.org/0000-0001-7903-8236","affiliations":[{"raw_affiliation_string":"fortiss, Germany and Blekinge Institute of Technology, Sweden","institution_ids":["https://openalex.org/I52719799"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005079284","display_name":"Jannik Fischbach","orcid":"https://orcid.org/0000-0002-4361-6118"},"institutions":[{"id":"https://openalex.org/I4210134795","display_name":"Fortiss","ror":"https://ror.org/042x1tp92","country_code":"DE","type":"nonprofit","lineage":["https://openalex.org/I4210134795"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jannik Fischbach","raw_affiliation_strings":["Netlight Consulting GmbH, Germany and fortiss, Germany"],"raw_orcid":"https://orcid.org/0000-0002-4361-6118","affiliations":[{"raw_affiliation_string":"Netlight Consulting GmbH, Germany and fortiss, Germany","institution_ids":["https://openalex.org/I4210134795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031864185","display_name":"Fabiola Moy\u00f3n","orcid":"https://orcid.org/0000-0003-0535-1371"},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]},{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Fabiola Moy\u00f3n","raw_affiliation_strings":["Siemens Technology, Germany and Technical University of Munich, Germany"],"raw_orcid":"https://orcid.org/0000-0003-0535-1371","affiliations":[{"raw_affiliation_string":"Siemens Technology, Germany and Technical University of Munich, Germany","institution_ids":["https://openalex.org/I1325886976","https://openalex.org/I62916508"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059051408","display_name":"Daniel M\u00e9ndez","orcid":"https://orcid.org/0000-0003-0619-6027"},"institutions":[{"id":"https://openalex.org/I52719799","display_name":"Blekinge Institute of Technology","ror":"https://ror.org/0093a8w51","country_code":"SE","type":"education","lineage":["https://openalex.org/I52719799"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Daniel Mendez","raw_affiliation_strings":["Blekinge Institute of Technology, Sweden and fortiss, Germany"],"raw_orcid":"https://orcid.org/0000-0003-0619-6027","affiliations":[{"raw_affiliation_string":"Blekinge Institute of Technology, Sweden and fortiss, Germany","institution_ids":["https://openalex.org/I52719799"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"440","last_page":"446"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.6395111680030823},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5697240829467773},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.36800944805145264}],"concepts":[{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.6395111680030823},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5697240829467773},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36800944805145264},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3674805.3690748","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3674805.3690748","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th ACM/IEEE International Symposium on Empirical Software Engineering and Measurement","raw_type":"proceedings-article"},{"id":"pmh:oai:DiVA.org:bth-27254","is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:bth-27254","pdf_url":null,"source":{"id":"https://openalex.org/S4306400653","display_name":"Diva portal (Dalarna University Library)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:DiVA.org:bth-27254","is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:bth-27254","pdf_url":null,"source":{"id":"https://openalex.org/S4306400653","display_name":"Diva portal (Dalarna University Library)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W49973284","https://openalex.org/W427395509","https://openalex.org/W1897168949","https://openalex.org/W1975675278","https://openalex.org/W2001677911","https://openalex.org/W2021064897","https://openalex.org/W2088970445","https://openalex.org/W2128412750","https://openalex.org/W2168894761","https://openalex.org/W2736436563","https://openalex.org/W2792022318","https://openalex.org/W2809926087","https://openalex.org/W2895782836","https://openalex.org/W2947546576","https://openalex.org/W2975885509","https://openalex.org/W3005780992","https://openalex.org/W3042680674","https://openalex.org/W3107548336","https://openalex.org/W3108915011","https://openalex.org/W3110913935","https://openalex.org/W3123715793","https://openalex.org/W3157515024","https://openalex.org/W3183843234","https://openalex.org/W4220864765","https://openalex.org/W4224248061","https://openalex.org/W4253747132","https://openalex.org/W4281756422","https://openalex.org/W4308643041","https://openalex.org/W4367017370","https://openalex.org/W4385232254","https://openalex.org/W4399213684","https://openalex.org/W6977031164"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2410395228","https://openalex.org/W2390279801","https://openalex.org/W3125941065","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2484615095","https://openalex.org/W4366449942"],"abstract_inverted_index":{"Context:":[0],"Continuous":[1,32],"Software":[2],"Engineering":[3],"is":[4],"increasingly":[5],"adopted":[6],"in":[7,26],"highly":[8,27],"regulated":[9,28],"domains,":[10],"raising":[11],"the":[12],"need":[13],"for":[14],"continuous":[15],"compliance.":[16],"Adherence":[17],"to":[18,38],"especially":[19],"security":[20],"regulations":[21],"\u2013":[22,30],"a":[23],"major":[24],"concern":[25],"domains":[29],"renders":[31],"Security":[33],"Compliance":[34],"of":[35],"high":[36],"relevance":[37],"industry":[39],"and":[40],"research.":[41]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}