{"id":"https://openalex.org/W7117129027","doi":"https://doi.org/10.1145/3756681.3756959","title":"On the Prevalence and Usage of Commit Signing on GitHub","display_name":"On the Prevalence and Usage of Commit Signing on GitHub","publication_year":2025,"publication_date":"2025-06-17","ids":{"openalex":"https://openalex.org/W7117129027","doi":"https://doi.org/10.1145/3756681.3756959"},"language":null,"primary_location":{"id":"doi:10.1145/3756681.3756959","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3756681.3756959","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th International Conference on Evaluation and Assessment in Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3756681.3756959","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Anupam Sharma","orcid":"https://orcid.org/0000-0002-3443-4646"},"institutions":[{"id":"https://openalex.org/I27674431","display_name":"Indian Institute of Technology Gandhinagar","ror":"https://ror.org/0036p5w23","country_code":"IN","type":"education","lineage":["https://openalex.org/I27674431"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Anupam Sharma","raw_affiliation_strings":["Indian Institute of Technology Gandhinagar, Gandhinagar, Gujarat, India"],"raw_orcid":"https://orcid.org/0000-0002-3443-4646","affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Gandhinagar, Gandhinagar, Gujarat, India","institution_ids":["https://openalex.org/I27674431"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072533695","display_name":"Sreyashi Karmakar","orcid":"https://orcid.org/0000-0002-5578-0396"},"institutions":[{"id":"https://openalex.org/I27674431","display_name":"Indian Institute of Technology Gandhinagar","ror":"https://ror.org/0036p5w23","country_code":"IN","type":"education","lineage":["https://openalex.org/I27674431"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sreyashi Karmakar","raw_affiliation_strings":["Indian Institute of Technology Gandhinagar, Gandhinagar, Gujarat, India"],"raw_orcid":"https://orcid.org/0000-0002-5578-0396","affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Gandhinagar, Gandhinagar, Gujarat, India","institution_ids":["https://openalex.org/I27674431"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028817422","display_name":"Gayatri Priyadarsini Kancherla","orcid":"https://orcid.org/0000-0002-1842-9353"},"institutions":[{"id":"https://openalex.org/I27674431","display_name":"Indian Institute of Technology Gandhinagar","ror":"https://ror.org/0036p5w23","country_code":"IN","type":"education","lineage":["https://openalex.org/I27674431"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Gayatri Priyadarsini Kancherla","raw_affiliation_strings":["Indian Institute of Technology Gandhinagar, Gandhinagar, Gujarat, India"],"raw_orcid":"https://orcid.org/0000-0002-1842-9353","affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Gandhinagar, Gandhinagar, Gujarat, India","institution_ids":["https://openalex.org/I27674431"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022695129","display_name":"Abhishek Bichhawat","orcid":"https://orcid.org/0000-0002-3075-2743"},"institutions":[{"id":"https://openalex.org/I27674431","display_name":"Indian Institute of Technology Gandhinagar","ror":"https://ror.org/0036p5w23","country_code":"IN","type":"education","lineage":["https://openalex.org/I27674431"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Abhishek Bichhawat","raw_affiliation_strings":["Indian Institute of Technology Gandhinagar, Gandhinagar, Gujarat, India"],"raw_orcid":"https://orcid.org/0000-0002-3075-2743","affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Gandhinagar, Gandhinagar, Gujarat, India","institution_ids":["https://openalex.org/I27674431"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I27674431"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.5535546,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"360","last_page":"370"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.3312999904155731,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.3312999904155731,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.12139999866485596,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.08299999684095383,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/commit","display_name":"Commit","score":0.9812999963760376},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6183000206947327},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5922999978065491},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.4853000044822693},{"id":"https://openalex.org/keywords/compensating-transaction","display_name":"Compensating transaction","score":0.47119998931884766},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.42649999260902405}],"concepts":[{"id":"https://openalex.org/C153180980","wikidata":"https://www.wikidata.org/wiki/Q19776675","display_name":"Commit","level":2,"score":0.9812999963760376},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7049999833106995},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6183000206947327},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5985000133514404},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5922999978065491},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.4853000044822693},{"id":"https://openalex.org/C155951066","wikidata":"https://www.wikidata.org/wiki/Q5156254","display_name":"Compensating transaction","level":5,"score":0.47119998931884766},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.42649999260902405},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.41940000653266907},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.40880000591278076},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2946000099182129},{"id":"https://openalex.org/C2777179996","wikidata":"https://www.wikidata.org/wiki/Q911222","display_name":"Mistake","level":2,"score":0.25780001282691956},{"id":"https://openalex.org/C2983583741","wikidata":"https://www.wikidata.org/wiki/Q16785388","display_name":"Third party","level":2,"score":0.2524999976158142},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3756681.3756959","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3756681.3756959","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th International Conference on Evaluation and Assessment in Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3756681.3756959","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3756681.3756959","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th International Conference on Evaluation and Assessment in Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7056220173835754}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W2067276312","https://openalex.org/W2134075554","https://openalex.org/W2146649871","https://openalex.org/W2153847933","https://openalex.org/W2753203013","https://openalex.org/W2805110658","https://openalex.org/W2947593054","https://openalex.org/W2981018312","https://openalex.org/W2982321410","https://openalex.org/W3162344723","https://openalex.org/W4284664377","https://openalex.org/W4321383456"],"related_works":[],"abstract_inverted_index":{"GitHub":[0,58],"is":[1,20,60,71],"one":[2],"of":[3,63],"the":[4,13,18,36,40,46,61,80,84],"most":[5],"widely":[6],"used":[7],"public":[8],"code":[9,14,32,47],"development":[10],"platform.":[11],"However,":[12],"hosted":[15],"publicly":[16],"on":[17,79],"platform":[19],"vulnerable":[21],"to":[22,29,43],"commit":[23,41,64,70],"spoofing":[24,39],"that":[25,45,57],"allows":[26],"an":[27],"adversary":[28],"introduce":[30],"malicious":[31],"or":[33,76],"commits":[34],"into":[35],"repository":[37],"by":[38,50,83],"metadata":[42],"indicate":[44],"was":[48],"added":[49],"a":[51,69,73],"legitimate":[52],"user.":[53],"The":[54],"only":[55],"defense":[56],"employs":[59],"process":[62],"signing,":[65],"which":[66],"indicates":[67],"whether":[68],"from":[72],"valid":[74],"source":[75],"not":[77],"based":[78],"keys":[81],"registered":[82],"users.":[85]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-12-24T00:00:00"}