{"id":"https://openalex.org/W7165863464","doi":"https://doi.org/10.4230/darts.12.1.20","title":"Field-Sensitive Over-Tainting Reduction in IFDS Taint Analysis via CFL-Reachability (Artifact)","display_name":"Field-Sensitive Over-Tainting Reduction in IFDS Taint Analysis via CFL-Reachability (Artifact)","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7165863464","doi":"https://doi.org/10.4230/darts.12.1.20"},"language":"en","primary_location":{"id":"doi:10.4230/darts.12.1.20","is_oa":true,"landing_page_url":"https://doi.org/10.4230/darts.12.1.20","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"DataPaper"},"type":"data-paper","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.4230/darts.12.1.20","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103043369","display_name":"Yujiang Gui","orcid":"https://orcid.org/0009-0006-3999-5203"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Gui, Yujiang","raw_affiliation_strings":["University of New South Wales, Sydney, Australia"],"raw_orcid":"https://orcid.org/0009-0006-3999-5203","affiliations":[{"raw_affiliation_string":"University of New South Wales, Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069783932","display_name":"Yonggang Tao","orcid":"https://orcid.org/0009-0006-3669-2047"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Tao, Yonggang","raw_affiliation_strings":["University of New South Wales, Sydney, Australia"],"raw_orcid":"https://orcid.org/0009-0006-3669-2047","affiliations":[{"raw_affiliation_string":"University of New South Wales, Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024664385","display_name":"Jingling Xue","orcid":"https://orcid.org/0000-0003-0380-3506"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xue, Jingling","raw_affiliation_strings":["University of New South Wales, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0003-0380-3506","affiliations":[{"raw_affiliation_string":"University of New South Wales, Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I31746571"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.4413999915122986,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.4413999915122986,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.260699987411499,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.11550000309944153,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.6561999917030334},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.6262000203132629},{"id":"https://openalex.org/keywords/spurious-relationship","display_name":"Spurious relationship","score":0.5587000250816345},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.45840001106262207},{"id":"https://openalex.org/keywords/python","display_name":"Python (programming language)","score":0.4244000017642975},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.4228000044822693},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.4077000021934509},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.35260000824928284},{"id":"https://openalex.org/keywords/call-graph","display_name":"Call graph","score":0.34529998898506165}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7318000197410583},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.6561999917030334},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.6262000203132629},{"id":"https://openalex.org/C97256817","wikidata":"https://www.wikidata.org/wiki/Q1462316","display_name":"Spurious relationship","level":2,"score":0.5587000250816345},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.45840001106262207},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.45840001106262207},{"id":"https://openalex.org/C519991488","wikidata":"https://www.wikidata.org/wiki/Q28865","display_name":"Python (programming language)","level":2,"score":0.4244000017642975},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.4228000044822693},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.4077000021934509},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3982999920845032},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.38420000672340393},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.35260000824928284},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.34779998660087585},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.34529998898506165},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.33480000495910645},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.3303000032901764},{"id":"https://openalex.org/C129916263","wikidata":"https://www.wikidata.org/wiki/Q1141183","display_name":"Backward chaining","level":4,"score":0.3091000020503998},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.30559998750686646},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.30230000615119934},{"id":"https://openalex.org/C16311509","wikidata":"https://www.wikidata.org/wiki/Q4148050","display_name":"Dependency graph","level":3,"score":0.3019999861717224},{"id":"https://openalex.org/C194207283","wikidata":"https://www.wikidata.org/wiki/Q1172412","display_name":"Data field","level":3,"score":0.29120001196861267},{"id":"https://openalex.org/C16671368","wikidata":"https://www.wikidata.org/wiki/Q230885","display_name":"State diagram","level":3,"score":0.289900004863739},{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.2840000092983246},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.2777999937534332},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C459310","wikidata":"https://www.wikidata.org/wiki/Q117801","display_name":"Computational science","level":1,"score":0.2612000107765198},{"id":"https://openalex.org/C88468194","wikidata":"https://www.wikidata.org/wiki/Q1172416","display_name":"Data-flow analysis","level":3,"score":0.2581000030040741},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.2574999928474426},{"id":"https://openalex.org/C146661039","wikidata":"https://www.wikidata.org/wiki/Q2915204","display_name":"Dominating set","level":4,"score":0.25209999084472656},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.2513999938964844},{"id":"https://openalex.org/C76363472","wikidata":"https://www.wikidata.org/wiki/Q1437394","display_name":"Formal concept analysis","level":2,"score":0.2502000033855438}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.4230/darts.12.1.20","is_oa":true,"landing_page_url":"https://doi.org/10.4230/darts.12.1.20","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"DataPaper"}],"best_oa_location":{"id":"doi:10.4230/darts.12.1.20","is_oa":true,"landing_page_url":"https://doi.org/10.4230/darts.12.1.20","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"DataPaper"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Our":[0],"related":[1],"paper":[2],"presents":[3],"TnFix,":[4],"a":[5,20,51,58],"CFL":[6],"(context-free":[7],"language)-reachability-based":[8],"technique":[9],"for":[10],"mitigating":[11],"over-tainting":[12],"in":[13,111,140],"IFDS":[14],"taint":[15,67],"analysis.":[16],"The":[17],"approach":[18],"addresses":[19],"common":[21],"source":[22],"of":[23,93],"imprecision":[24],"introduced":[25],"by":[26,33],"k-limiting:":[27],"it":[28],"prunes":[29],"spurious":[30],"access":[31],"paths":[32],"checking":[34],"candidate":[35],"field":[36],"sequences":[37],"against":[38],"per-object":[39,99],"DFAs":[40,79],"(deterministic":[41],"finite":[42],"automata).":[43],"To":[44],"build":[45],"these":[46],"DFAs,":[47],"TnFix":[48,94,119],"first":[49],"solves":[50],"lightweight,":[52],"field-sensitive":[53,96],"CFL-reachability":[54,97],"problem":[55],"to":[56,83,117,126],"construct":[57],"Field":[59],"Points-to":[60],"Graph":[61],"(FPG)":[62],"that":[63],"integrates":[64],"flows":[65],"from":[66],"sources":[68],"and":[69,72,102,120,125,131],"library":[70],"summaries,":[71],"then":[73],"transforms":[74],"the":[75,91,107,112,128,135],"FPG":[76],"into":[77],"object-specific":[78],"used":[80,110,139],"during":[81],"analysis":[82],"reject":[84],"infeasible":[85],"field-access":[86],"sequences.":[87],"This":[88],"artifact":[89],"bundles":[90],"implementation":[92],"(including":[95],"solving,":[98],"DFA":[100],"construction,":[101],"DFA-based":[103],"filtering),":[104],"together":[105],"with":[106],"evaluation":[108],"harness":[109],"paper.":[113],"It":[114],"provides":[115],"scripts":[116],"run":[118],"FlowDroid":[121],"under":[122],"identical":[123],"settings":[124],"reproduce":[127],"reported":[129],"performance":[130],"precision":[132],"results":[133],"on":[134],"Android":[136],"app":[137],"set":[138],"our":[141],"evaluation.":[142]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-26T00:00:00"}