{"id":"https://openalex.org/W4411449680","doi":"https://doi.org/10.1145/3729349","title":"Dynamic Taint Tracking for Modern Java Virtual Machines","display_name":"Dynamic Taint Tracking for Modern Java Virtual Machines","publication_year":2025,"publication_date":"2025-06-19","ids":{"openalex":"https://openalex.org/W4411449680","doi":"https://doi.org/10.1145/3729349"},"language":"en","primary_location":{"id":"doi:10.1145/3729349","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3729349","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3729349","source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3729349","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082815597","display_name":"Katherine Hough","orcid":"https://orcid.org/0000-0003-4397-1635"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Katherine Hough","raw_affiliation_strings":["Northeastern University, Boston, USA"],"raw_orcid":"https://orcid.org/0000-0003-4397-1635","affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, USA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053080959","display_name":"Jonathan Bell","orcid":"https://orcid.org/0000-0002-1187-9298"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jonathan Bell","raw_affiliation_strings":["Northeastern University, Boston, USA"],"raw_orcid":"https://orcid.org/0000-0002-1187-9298","affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, USA","institution_ids":["https://openalex.org/I12912129"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I12912129"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.05256805,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2","issue":"FSE","first_page":"1757","last_page":"1779"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9740999937057495,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.8935376405715942},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8882073163986206},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.755440354347229},{"id":"https://openalex.org/keywords/mirroring","display_name":"Mirroring","score":0.6021538972854614},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5872798562049866},{"id":"https://openalex.org/keywords/suite","display_name":"Suite","score":0.5868537425994873},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.39288991689682007},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3763976991176605},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.18594908714294434}],"concepts":[{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.8935376405715942},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8882073163986206},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.755440354347229},{"id":"https://openalex.org/C189645446","wikidata":"https://www.wikidata.org/wiki/Q350865","display_name":"Mirroring","level":2,"score":0.6021538972854614},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5872798562049866},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.5868537425994873},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.39288991689682007},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3763976991176605},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.18594908714294434},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C46312422","wikidata":"https://www.wikidata.org/wiki/Q11024","display_name":"Communication","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3729349","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3729349","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3729349","source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3729349","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3729349","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3729349","source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Partnerships for the goals","id":"https://metadata.un.org/sdg/17","score":0.4099999964237213}],"awards":[{"id":"https://openalex.org/G6725783617","display_name":"SHF: Medium: Collaborative Research: Enhancing Continuous Integration Testing for the Open-Source Ecosystem","funder_award_id":"2100037","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G849179848","display_name":"CAREER: Amplifying Developer-Written Tests for Code Injection Vulnerability Detection","funder_award_id":"2100015","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4411449680.pdf","grobid_xml":"https://content.openalex.org/works/W4411449680.grobid-xml"},"referenced_works_count":38,"referenced_works":["https://openalex.org/W1526710119","https://openalex.org/W1989790414","https://openalex.org/W2012286850","https://openalex.org/W2073655054","https://openalex.org/W2088475168","https://openalex.org/W2110908283","https://openalex.org/W2116774218","https://openalex.org/W2122049982","https://openalex.org/W2128985333","https://openalex.org/W2144789413","https://openalex.org/W2144992712","https://openalex.org/W2147478478","https://openalex.org/W2149207009","https://openalex.org/W2149969483","https://openalex.org/W2153155256","https://openalex.org/W2161688581","https://openalex.org/W2166091242","https://openalex.org/W2259042472","https://openalex.org/W2589638126","https://openalex.org/W2613534458","https://openalex.org/W2898614297","https://openalex.org/W2991316809","https://openalex.org/W3089408421","https://openalex.org/W3102504333","https://openalex.org/W3160685084","https://openalex.org/W4210788642","https://openalex.org/W4232973962","https://openalex.org/W4233467731","https://openalex.org/W4239249613","https://openalex.org/W4251988601","https://openalex.org/W4284705569","https://openalex.org/W4287882631","https://openalex.org/W4307789634","https://openalex.org/W4308643019","https://openalex.org/W4313563662","https://openalex.org/W4384302826","https://openalex.org/W6833780757","https://openalex.org/W6902249202"],"related_works":["https://openalex.org/W4379115841","https://openalex.org/W2083794993","https://openalex.org/W1511772879","https://openalex.org/W4394660363","https://openalex.org/W2186315912","https://openalex.org/W2588591308","https://openalex.org/W2248125223","https://openalex.org/W2910542634","https://openalex.org/W2127898439","https://openalex.org/W3082894236"],"abstract_inverted_index":{"Dynamic":[0],"taint":[1,29,92,109,132,167],"tracking":[2,93,168],"is":[3,35,43,56],"a":[4,14,116,171],"program":[5,52,61,139],"analysis":[6],"that":[7,97,126,153,162],"traces":[8],"the":[9,17,48,51,78,95],"flow":[10],"of":[11,50,68,100,119,148,163,174],"information":[12,40],"through":[13],"program.":[15],"In":[16,82],"Java":[18,80,122,177],"virtual":[19],"machine":[20],"(JVM),":[21],"there":[22],"are":[23,71],"two":[24,164],"prominent":[25],"approaches":[26,70],"for":[27,90],"dynamic":[28,91,166],"tracking:":[30],"\"shadowing\"":[31],"and":[32,103,156],"\"mirroring\".":[33],"Shadowing":[34],"able":[36,58,129],"to":[37,46,59,105,130],"precisely":[38],"track":[39],"flows,":[41],"but":[42,63],"also":[44,151],"prone":[45],"disrupting":[47],"semantics":[49,140],"under":[53],"analysis.":[54],"Mirroring":[55],"better":[57],"preserve":[60],"semantics,":[62],"often":[64],"inaccurate.":[65],"The":[66],"limitations":[67],"these":[69],"further":[72],"exacerbated":[73],"by":[74],"features":[75],"introduced":[76],"in":[77,94,112],"latest":[79],"versions.":[81],"this":[83],"paper,":[84],"we":[85,124],"propose":[86],"Galette,":[87],"an":[88],"approach":[89],"JVM":[96],"combines":[98],"aspects":[99],"both":[101],"shadowing":[102],"mirroring":[104],"provide":[106],"precise,":[107],"robust":[108],"tag":[110],"propagation":[111],"modern":[113],"JVMs.":[114],"On":[115],"benchmark":[117,172],"suite":[118,173],"3,451":[120],"synthetic":[121],"programs,":[123],"found":[125,152],"Galette":[127],"was":[128],"propagate":[131],"tags":[133],"with":[134,161],"perfect":[135],"accuracy":[136],"while":[137],"preserving":[138],"on":[141,170],"all":[142],"four":[143],"active":[144],"long-term":[145],"support":[146],"versions":[147],"Java.":[149],"We":[150],"Galette's":[154],"runtime":[155],"memory":[157],"overheads":[158],"were":[159],"competitive":[160],"state-of-the-art":[165],"systems":[169],"twenty":[175],"real-world":[176],"programs.":[178]},"counts_by_year":[],"updated_date":"2026-08-06T08:24:18.245995","created_date":"2025-10-10T00:00:00"}