{"id":"https://openalex.org/W7164382183","doi":"https://doi.org/10.1145/3814943.3816168","title":"SymFlow: Event-Chain-Aware Symbolic Execution for Serverless Sensitive Data Flow Detection","display_name":"SymFlow: Event-Chain-Aware Symbolic Execution for Serverless Sensitive Data Flow Detection","publication_year":2026,"publication_date":"2026-06-11","ids":{"openalex":"https://openalex.org/W7164382183","doi":"https://doi.org/10.1145/3814943.3816168"},"language":null,"primary_location":{"id":"doi:10.1145/3814943.3816168","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3814943.3816168","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th ACM SIGPLAN/SIGBED International Conference on Languages, Compilers, and Tools for Embedded Systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3814943.3816168","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039746071","display_name":"Yuanpeng Wang","orcid":"https://orcid.org/0009-0003-4610-3427"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuanpeng Wang","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0003-4610-3427","affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103097140","display_name":"Zhineng Zhong","orcid":"https://orcid.org/0009-0007-2490-5671"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhineng Zhong","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0007-2490-5671","affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084611756","display_name":"Zhenkai Liang","orcid":"https://orcid.org/0000-0001-7138-5030"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Zhenkai Liang","raw_affiliation_strings":["National University of Singapore, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-7138-5030","affiliations":[{"raw_affiliation_string":"National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039182822","display_name":"Ding Li","orcid":"https://orcid.org/0000-0001-7558-9137"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ding Li","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7558-9137","affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021450973","display_name":"Yao Guo","orcid":"https://orcid.org/0000-0001-5064-5286"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yao Guo","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-5064-5286","affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101636662","display_name":"Xiangqun Chen","orcid":"https://orcid.org/0000-0002-7366-5906"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangqun Chen","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-7366-5906","affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.95177377,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"57","last_page":"69"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.5382000207901001,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.5382000207901001,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.13120000064373016,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.03420000150799751,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/flow","display_name":"Flow (mathematics)","score":0.3626999855041504},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.27480000257492065},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.27140000462532043},{"id":"https://openalex.org/keywords/data-flow-diagram","display_name":"Data flow diagram","score":0.25119999051094055}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6740000247955322},{"id":"https://openalex.org/C38349280","wikidata":"https://www.wikidata.org/wiki/Q1434290","display_name":"Flow (mathematics)","level":2,"score":0.3626999855041504},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3221000134944916},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3163999915122986},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2890999913215637},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.27480000257492065},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.27140000462532043},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2563000023365021},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.25119999051094055},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.2508000135421753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3814943.3816168","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3814943.3816168","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th ACM SIGPLAN/SIGBED International Conference on Languages, Compilers, and Tools for Embedded Systems","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3814943.3816168","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3814943.3816168","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th ACM SIGPLAN/SIGBED International Conference on Languages, Compilers, and Tools for Embedded Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W1970005004","https://openalex.org/W2016449454","https://openalex.org/W2034527657","https://openalex.org/W2101512909","https://openalex.org/W2347205253","https://openalex.org/W2574017551","https://openalex.org/W2606589758","https://openalex.org/W2626970695","https://openalex.org/W2735574181","https://openalex.org/W2893249073","https://openalex.org/W2894833359","https://openalex.org/W2905507405","https://openalex.org/W2911351991","https://openalex.org/W2930508541","https://openalex.org/W2962955124","https://openalex.org/W2966746471","https://openalex.org/W2996705685","https://openalex.org/W3012914409","https://openalex.org/W3022319379","https://openalex.org/W3082879526","https://openalex.org/W3111862628","https://openalex.org/W3158207578","https://openalex.org/W3178064249","https://openalex.org/W3179934812","https://openalex.org/W3181998714","https://openalex.org/W4205761438","https://openalex.org/W4247072206","https://openalex.org/W4283278745","https://openalex.org/W4285134228","https://openalex.org/W4309554176","https://openalex.org/W4312337390","https://openalex.org/W4312790396","https://openalex.org/W4313148063","https://openalex.org/W4313889498","https://openalex.org/W4368407258","https://openalex.org/W4372263930","https://openalex.org/W4384154469","https://openalex.org/W4387027529","https://openalex.org/W4387937102","https://openalex.org/W4388188464","https://openalex.org/W4388857323","https://openalex.org/W4390742564","https://openalex.org/W4396735064","https://openalex.org/W4400681479","https://openalex.org/W4405314990","https://openalex.org/W4408750010","https://openalex.org/W4409195213","https://openalex.org/W4412788536","https://openalex.org/W4412846081","https://openalex.org/W4413430342"],"related_works":[],"abstract_inverted_index":{"Serverless":[0],"applications":[1],"are":[2,24],"widely":[3],"adopted":[4],"for":[5],"their":[6,14],"scalability,":[7],"cost-efficiency,":[8],"and":[9,33,57,77,85],"elastic":[10],"resource":[11],"management.":[12],"However,":[13],"event-driven":[15],"nature":[16],"introduces":[17],"complex":[18],"event":[19],"chains":[20],"whose":[21],"trigger-handler":[22],"relationships":[23],"often":[25,68],"determined":[26],"dynamically":[27],"by":[28],"conditional":[29],"logic,":[30],"asynchronous":[31],"callbacks,":[32],"resource-state":[34],"dependencies.":[35],"Existing":[36],"security":[37],"analysis":[38],"tools,":[39],"such":[40],"as":[41],"CloudFlow,":[42],"mainly":[43],"rely":[44],"on":[45],"static":[46],"analysis,":[47],"making":[48],"it":[49],"difficult":[50],"to":[51,70,81],"capture":[52],"these":[53],"dynamic":[54],"event-chain":[55],"interactions":[56],"the":[58,72],"semantics":[59],"of":[60],"coarse-grained":[61],"cloud":[62],"APIs.":[63],"As":[64],"a":[65],"result,":[66],"they":[67],"fail":[69],"bridge":[71],"gap":[73],"between":[74],"architectural":[75],"reachability":[76],"semantic":[78],"feasibility,":[79],"leading":[80],"both":[82],"false":[83,86],"positives":[84],"negatives.":[87]},"counts_by_year":[],"updated_date":"2026-06-13T06:13:01.061226","created_date":"2026-06-12T00:00:00"}