{"id":"https://openalex.org/W7154629546","doi":"https://doi.org/10.1145/3803525.3804984","title":"The Last of the Apaches: Investigating the State of Internet-facing End-of-Life Software","display_name":"The Last of the Apaches: Investigating the State of Internet-facing End-of-Life Software","publication_year":2026,"publication_date":"2026-04-16","ids":{"openalex":"https://openalex.org/W7154629546","doi":"https://doi.org/10.1145/3803525.3804984"},"language":null,"primary_location":{"id":"doi:10.1145/3803525.3804984","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803525.3804984","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th European Workshop on Systems Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3803525.3804984","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116056962","display_name":"Ioannis Arakas","orcid":null},"institutions":[{"id":"https://openalex.org/I4210121775","display_name":"FORTH Institute of Computer Science","ror":"https://ror.org/02tf48g55","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210121775","https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Ioannis Arakas","raw_affiliation_strings":["FORTH-ICS and University of Crete, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0009-0007-7995-9108","affiliations":[{"raw_affiliation_string":"FORTH-ICS and University of Crete, Zurich, Switzerland","institution_ids":["https://openalex.org/I4210121775"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133735215","display_name":"Panagiotis Pallis","orcid":"https://orcid.org/0009-0007-6759-0235"},"institutions":[{"id":"https://openalex.org/I142617266","display_name":"University of Crete","ror":"https://ror.org/00dr28g20","country_code":"GR","type":"education","lineage":["https://openalex.org/I142617266"]},{"id":"https://openalex.org/I8901234","display_name":"Foundation for Research and Technology Hellas","ror":"https://ror.org/052rphn09","country_code":"GR","type":"facility","lineage":["https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Panagiotis Pallis","raw_affiliation_strings":["FORTH-ICS and University of Crete, Heraklion, Greece"],"raw_orcid":"https://orcid.org/0009-0007-6759-0235","affiliations":[{"raw_affiliation_string":"FORTH-ICS and University of Crete, Heraklion, Greece","institution_ids":["https://openalex.org/I142617266","https://openalex.org/I8901234"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006368259","display_name":"Evangelos P. Markatos","orcid":"https://orcid.org/0000-0003-3563-7733"},"institutions":[{"id":"https://openalex.org/I142617266","display_name":"University of Crete","ror":"https://ror.org/00dr28g20","country_code":"GR","type":"education","lineage":["https://openalex.org/I142617266"]},{"id":"https://openalex.org/I8901234","display_name":"Foundation for Research and Technology Hellas","ror":"https://ror.org/052rphn09","country_code":"GR","type":"facility","lineage":["https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Evangelos Markatos","raw_affiliation_strings":["FORTH-ICS and University of Crete, Heraklion, Greece"],"raw_orcid":"https://orcid.org/0000-0003-3563-7733","affiliations":[{"raw_affiliation_string":"FORTH-ICS and University of Crete, Heraklion, Greece","institution_ids":["https://openalex.org/I142617266","https://openalex.org/I8901234"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005247877","display_name":"Georgios Smaragdakis","orcid":"https://orcid.org/0000-0002-4127-3617"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Georgios Smaragdakis","raw_affiliation_strings":["Delft University of Technology, Delft, Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-4127-3617","affiliations":[{"raw_affiliation_string":"Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"60","last_page":"66"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.1111999973654747,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.1111999973654747,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.07850000262260437,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.07440000027418137,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.6363000273704529},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.4975999891757965},{"id":"https://openalex.org/keywords/backporting","display_name":"Backporting","score":0.4884999990463257},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.48660001158714294},{"id":"https://openalex.org/keywords/security-bug","display_name":"Security bug","score":0.48570001125335693},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4327999949455261},{"id":"https://openalex.org/keywords/software-construction","display_name":"Software construction","score":0.4327000081539154},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.40880000591278076},{"id":"https://openalex.org/keywords/software-bug","display_name":"Software bug","score":0.4000000059604645}],"concepts":[{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.6363000273704529},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5745999813079834},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.4975999891757965},{"id":"https://openalex.org/C21491501","wikidata":"https://www.wikidata.org/wiki/Q430253","display_name":"Backporting","level":5,"score":0.4884999990463257},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.48660001158714294},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.48570001125335693},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.47589999437332153},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4327999949455261},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.4327000081539154},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.40880000591278076},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.4000000059604645},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.37950000166893005},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.3765999972820282},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.3718000054359436},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.367000013589859},{"id":"https://openalex.org/C123551368","wikidata":"https://www.wikidata.org/wiki/Q7122888","display_name":"Package development process","level":5,"score":0.3652999997138977},{"id":"https://openalex.org/C202105479","wikidata":"https://www.wikidata.org/wiki/Q265013","display_name":"Software evolution","level":5,"score":0.32030001282691956},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.30559998750686646},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.30329999327659607},{"id":"https://openalex.org/C101317890","wikidata":"https://www.wikidata.org/wiki/Q940053","display_name":"Software maintenance","level":4,"score":0.2971999943256378},{"id":"https://openalex.org/C74579156","wikidata":"https://www.wikidata.org/wiki/Q7554342","display_name":"Software peer review","level":5,"score":0.29660001397132874},{"id":"https://openalex.org/C182500959","wikidata":"https://www.wikidata.org/wiki/Q7551380","display_name":"Social software engineering","level":5,"score":0.2892000079154968},{"id":"https://openalex.org/C174683762","wikidata":"https://www.wikidata.org/wiki/Q609588","display_name":"Component-based software engineering","level":4,"score":0.27489998936653137},{"id":"https://openalex.org/C171981572","wikidata":"https://www.wikidata.org/wiki/Q7554239","display_name":"Software analytics","level":5,"score":0.27059999108314514},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.26980000734329224},{"id":"https://openalex.org/C117447612","wikidata":"https://www.wikidata.org/wiki/Q1412670","display_name":"Software quality","level":4,"score":0.2667999863624573},{"id":"https://openalex.org/C46110900","wikidata":"https://www.wikidata.org/wiki/Q11702993","display_name":"Software walkthrough","level":5,"score":0.2632000148296356},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.2621000111103058},{"id":"https://openalex.org/C175133352","wikidata":"https://www.wikidata.org/wiki/Q1254596","display_name":"Software as a service","level":4,"score":0.2563999891281128},{"id":"https://openalex.org/C2984499602","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Computer software","level":2,"score":0.2547999918460846}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3803525.3804984","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803525.3804984","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th European Workshop on Systems Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3803525.3804984","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803525.3804984","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th European Workshop on Systems Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.5608491897583008,"display_name":"Responsible consumption and production","id":"https://metadata.un.org/sdg/12"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W2001637908","https://openalex.org/W2981181114","https://openalex.org/W3008262913","https://openalex.org/W4290973756","https://openalex.org/W4318275388","https://openalex.org/W4388755575","https://openalex.org/W4389109216","https://openalex.org/W4403980999"],"related_works":[],"abstract_inverted_index":{"In":[0,69],"the":[1,74,94],"software":[2,6,38,50,57,78,118],"development":[3],"life-cycle,":[4],"new":[5],"packages":[7],"are":[8,13,24,40,44,65,103],"deployed":[9],"while":[10],"older":[11,56],"ones":[12],"phased":[14],"out":[15,92],"as":[16,55],"they":[17],"reach":[18],"their":[19],"\u201cEnd":[20],"of":[21,31,34,76,93,110],"Life\u201d":[22],"and":[23,43,121],"no":[25,66],"longer":[26,67],"supported.":[27],"Despite":[28],"this":[29,70],"lack":[30],"support,":[32],"some":[33],"these":[35],"End-of-Life":[36],"(EoL)":[37],"distributions":[39],"still":[41],"popular":[42,112],"being":[45],"used.":[46],"However,":[47],"running":[48,104],"EoL":[49,77,108],"poses":[51],"massive":[52],"security":[53,63],"risks":[54],"may":[58],"contain":[59],"vulnerabilities":[60],"for":[61],"which":[62],"updates":[64],"available.":[68],"paper":[71],"we":[72,85,98],"investigate":[73],"prevalence":[75],"in":[79,100],"Internet-facing":[80],"devices.":[81],"To":[82],"our":[83,101],"surprise,":[84],"find":[86],"that":[87],"more":[88],"than":[89],"6":[90],"million":[91,96],"44.3":[95],"hosts":[97],"consider":[99],"study":[102],"at":[105],"least":[106],"one":[107],"version":[109],"very":[111],"software,":[113,117],"including":[114],"web":[115],"server":[116],"libraries,":[119],"databases,":[120],"scripting":[122],"languages.":[123]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-04-17T00:00:00"}