{"id":"https://openalex.org/W4410408833","doi":"https://doi.org/10.1145/3735968","title":"Detecting Misuse of Security APIs: A Systematic Review","display_name":"Detecting Misuse of Security APIs: A Systematic Review","publication_year":2025,"publication_date":"2025-05-15","ids":{"openalex":"https://openalex.org/W4410408833","doi":"https://doi.org/10.1145/3735968"},"language":"en","primary_location":{"id":"doi:10.1145/3735968","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3735968","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"review","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3735968","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100775113","display_name":"Zahra Mousavi","orcid":"https://orcid.org/0000-0001-6538-5966"},"institutions":[{"id":"https://openalex.org/I1337719021","display_name":"Australian Research Council","ror":"https://ror.org/05mmh0f86","country_code":"AU","type":"government","lineage":["https://openalex.org/I1337719021","https://openalex.org/I2801453606","https://openalex.org/I4210132349"]},{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zahra Mousavi","raw_affiliation_strings":["Centre for Research on Engineering Software Technologies (CREST) & Adelaide University, Cyber Security CRC, CSIRO's Data61","Centre for Research on Engineering Software Technologies (CREST) & Adelaide University,  Adelaide, Australia"],"raw_orcid":"https://orcid.org/0000-0001-6538-5966","affiliations":[{"raw_affiliation_string":"Centre for Research on Engineering Software Technologies (CREST) & Adelaide University, Cyber Security CRC, CSIRO's Data61","institution_ids":["https://openalex.org/I1337719021"]},{"raw_affiliation_string":"Centre for Research on Engineering Software Technologies (CREST) & Adelaide University,  Adelaide, Australia","institution_ids":["https://openalex.org/I5681781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012225295","display_name":"Chadni Islam","orcid":"https://orcid.org/0000-0002-6349-6483"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Chadni Islam","raw_affiliation_strings":["Edith Cowan University","Edith Cowan University,  Perth, Australia"],"raw_orcid":"https://orcid.org/0000-0002-6349-6483","affiliations":[{"raw_affiliation_string":"Edith Cowan University","institution_ids":["https://openalex.org/I12079687"]},{"raw_affiliation_string":"Edith Cowan University,  Perth, Australia","institution_ids":["https://openalex.org/I12079687"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103075476","display_name":"Muhammad Ali Babar","orcid":"https://orcid.org/0000-0001-9696-3626"},"institutions":[{"id":"https://openalex.org/I4210102982","display_name":"Centre for Research in Engineering Surface Technology","ror":"https://ror.org/018q3fa22","country_code":"IE","type":"other","lineage":["https://openalex.org/I4210102982"]},{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU","IE"],"is_corresponding":false,"raw_author_name":"Muhammad Ali Babar","raw_affiliation_strings":["Centre for Research on Engineering Software Technologies (CREST) & Adelaide University","Centre for Research on Engineering Software Technologies (CREST) & Adelaide University,  Adelaide, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9696-3626","affiliations":[{"raw_affiliation_string":"Centre for Research on Engineering Software Technologies (CREST) & Adelaide University","institution_ids":["https://openalex.org/I4210102982"]},{"raw_affiliation_string":"Centre for Research on Engineering Software Technologies (CREST) & Adelaide University,  Adelaide, Australia","institution_ids":["https://openalex.org/I5681781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086357020","display_name":"Alsharif Abuadbba","orcid":"https://orcid.org/0000-0001-9695-7947"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Alsharif Abuadbba","raw_affiliation_strings":["CSIRO's Data61","CSIRO, Data61,  Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9695-7947","affiliations":[{"raw_affiliation_string":"CSIRO's Data61","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]},{"raw_affiliation_string":"CSIRO, Data61,  Sydney, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037106850","display_name":"Kristen Moore","orcid":"https://orcid.org/0000-0002-9962-5080"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Kristen Moore","raw_affiliation_strings":["CSIRO's Data61","Data61, CSIRO, Melbourne, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9962-5080","affiliations":[{"raw_affiliation_string":"CSIRO's Data61","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]},{"raw_affiliation_string":"Data61, CSIRO, Melbourne, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.0645,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.9047619,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"57","issue":"12","first_page":"1","last_page":"39"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8549610376358032},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4966779351234436}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8549610376358032},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4966779351234436}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3735968","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3735968","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},{"id":"pmh:oai:ro.ecu.edu.au:ecuworks2022-2026-7632","is_oa":true,"landing_page_url":"https://ro.ecu.edu.au/ecuworks2022-2026/6632","pdf_url":null,"source":{"id":"https://openalex.org/S2765015692","display_name":"Australasian Journal of Paramedicine","issn_l":"2202-7270","issn":["2202-7270"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research outputs 2022 to 2026","raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/3735968","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3735968","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":56,"referenced_works":["https://openalex.org/W1197495329","https://openalex.org/W1857692135","https://openalex.org/W1975675278","https://openalex.org/W1979290264","https://openalex.org/W2007121005","https://openalex.org/W2008810193","https://openalex.org/W2011565494","https://openalex.org/W2101512909","https://openalex.org/W2112995928","https://openalex.org/W2138645518","https://openalex.org/W2145994642","https://openalex.org/W2146773231","https://openalex.org/W2257242910","https://openalex.org/W2274779708","https://openalex.org/W2405678927","https://openalex.org/W2407313496","https://openalex.org/W2541261609","https://openalex.org/W2600871181","https://openalex.org/W2759023773","https://openalex.org/W2770623724","https://openalex.org/W2793937183","https://openalex.org/W2885790134","https://openalex.org/W2914982603","https://openalex.org/W2916399511","https://openalex.org/W2929275958","https://openalex.org/W2964144088","https://openalex.org/W2973035781","https://openalex.org/W2980753794","https://openalex.org/W2985320478","https://openalex.org/W2998879240","https://openalex.org/W3033777149","https://openalex.org/W3047879062","https://openalex.org/W3048278527","https://openalex.org/W3113176721","https://openalex.org/W3132608613","https://openalex.org/W3133930529","https://openalex.org/W3136232714","https://openalex.org/W3137106894","https://openalex.org/W3161804663","https://openalex.org/W3184339106","https://openalex.org/W3199693282","https://openalex.org/W3204578495","https://openalex.org/W4211072556","https://openalex.org/W4244726870","https://openalex.org/W4284669642","https://openalex.org/W4307533935","https://openalex.org/W4321013654","https://openalex.org/W4380994038","https://openalex.org/W4384345708","https://openalex.org/W4388440664","https://openalex.org/W4392941225","https://openalex.org/W4394745126","https://openalex.org/W4394745299","https://openalex.org/W4394745423","https://openalex.org/W4400121384","https://openalex.org/W4402665833"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Security":[0],"Application":[1],"Programming":[2],"Interfaces":[3],"(APIs)":[4],"are":[5],"crucial":[6],"for":[7,197],"ensuring":[8],"software":[9,43],"security.":[10],"However,":[11],"their":[12],"misuse":[13,39,56,70],"introduces":[14],"vulnerabilities,":[15],"potentially":[16],"leading":[17],"to":[18,37,52,57,74,86,108],"severe":[19],"data":[20],"breaches":[21],"and":[22,31,48,60,88,97,151,154,161,192],"substantial":[23],"financial":[24],"loss.":[25],"Complex":[26],"API":[27,55,91,136,187],"design,":[28],"inadequate":[29],"documentation,":[30],"insufficient":[32],"security":[33,44,54,72,90,135,186],"training":[34],"often":[35],"lead":[36],"unintentional":[38],"by":[40],"developers.":[41],"The":[42,165],"community":[45],"has":[46,129],"devised":[47],"evaluated":[49],"several":[50,176],"approaches":[51,95,174],"detecting":[53,69],"help":[58],"developers":[59],"organizations.":[61],"This":[62],"study":[63],"rigorously":[64],"reviews":[65],"the":[66,93,98,104,110,116],"literature":[67,118],"on":[68,184],"of":[71,79,133,140,146,157,170,172],"APIs":[73],"gain":[75],"a":[76,168],"comprehensive":[77],"understanding":[78],"this":[80,113],"critical":[81],"domain.":[82],"Our":[83,127],"goal":[84],"is":[85],"identify":[87],"analyze":[89],"misuses,":[92],"detection":[94,147,173,198],"developed,":[96],"evaluation":[99,163,195],"methodologies":[100],"employed":[101],"along":[102],"with":[103,189],"open":[105],"research":[106,125],"avenues":[107],"advance":[109],"state-of-the-art":[111],"in":[112,175],"area.":[114],"Employing":[115],"systematic":[117],"review":[119,128,166],"(SLR)":[120],"methodology,":[121],"we":[122],"analyzed":[123],"69":[124],"articles.":[126],"yielded":[130],"(a)":[131],"identification":[132,156],"6":[134],"types;":[137],"(b)":[138],"classification":[139],"30":[141],"distinct":[142],"misuses;":[143],"(c)":[144],"categorization":[145],"techniques":[148],"into":[149],"heuristic-based":[150],"ML-based":[152],"approaches;":[153],"(d)":[155],"10":[158],"performance":[159],"measures":[160],"9":[162],"benchmarks.":[164],"reveals":[167],"lack":[169],"coverage":[171],"areas.":[177],"We":[178],"recommend":[179],"that":[180],"future":[181],"efforts":[182],"focus":[183],"aligning":[185],"development":[188],"developers\u2019":[190],"needs":[191],"advancing":[193],"standardized":[194],"methods":[196],"technologies.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":7}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}