{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T14:51:54Z","timestamp":1742914314198,"version":"3.40.3"},"publisher-location":"Cham","reference-count":16,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783031105470"},{"type":"electronic","value":"9783031105487"}],"license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022]]},"DOI":"10.1007\/978-3-031-10548-7_31","type":"book-chapter","created":{"date-parts":[[2022,7,25]],"date-time":"2022-07-25T12:04:01Z","timestamp":1658750641000},"page":"422-435","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Security Evaluation Criteria of Open-Source Libraries"],"prefix":"10.1007","author":[{"given":"Vivian","family":"Mills","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sergey","family":"Butakov","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,7,26]]},"reference":[{"key":"31_CR1","unstructured":"Roth, E.: Open source developer corrupts widely-used libraries, affecting tons of projects - The Verge, The Verge, 9 January 2022. https:\/\/www.theverge.com\/2022\/1\/9\/22874949\/developer-corrupts-open-source-libraries-projects-affected. Accessed 18 Jan 2022"},{"key":"31_CR2","unstructured":"Martin, B.: AccessPress Themes Hit with Targeted Supply Chain Attack, Sucuri, 20 January 2022. https:\/\/blog.sucuri.net\/2022\/01\/accesspress-themes-hit-with-targeted-supply-chain-attack.html. Accessed 9 Feb 2022"},{"key":"31_CR3","unstructured":"Microsoft: Third-party notices|Microsoft Legal, Microsoft (2022). https:\/\/www.microsoft.com\/en-us\/legal\/third-party-notices. Accessed 18 Jan 2022"},{"key":"31_CR4","unstructured":"Microsoft: \u201cOpen Source|Microsoft Legal,\u201d Microsoft (2022). https:\/\/www.microsoft.com\/en-us\/legal\/intellectualproperty\/open-source. Accessed 18 Jan 2022"},{"key":"31_CR5","unstructured":"An update from the Faker team, 14 January 2022. https:\/\/fakerjs.dev\/update.html. Accessed 8 Mar 2022"},{"key":"31_CR6","unstructured":"Eckert, J.: The Ultimate WordPress Security Guide for 2022, Parachute Design, 14 January 2022. Accessed April 2022"},{"key":"31_CR7","doi-asserted-by":"crossref","unstructured":"Koskinen, T., Ihantola, P., Karavirta, P.: Quality of WordPress Plug-Ins: an overview of security and user ratings. In: 2012 International Conference on Privacy, Security, Risk and Trust and 2012 International Conference on Social Computing (2012)","DOI":"10.1109\/SocialCom-PASSAT.2012.31"},{"key":"31_CR8","doi-asserted-by":"crossref","unstructured":"Souppaya, M., Scarfone, K., Dodson, D.: SP 800-218, Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities, February 2022. https:\/\/nvlpubs.nist.gov\/nistpubs\/SpecialPublications\/NIST.SP.800-218.pdf. Accessed 22 Feb 2022","DOI":"10.6028\/NIST.SP.800-218"},{"key":"31_CR9","unstructured":"NIST Joint Task Force: SP 800-53, Security and Privacy Controls for Information Systems and Organizations, September 2020. https:\/\/nvlpubs.nist.gov\/nistpubs\/SpecialPublications\/NIST.SP.800-53r5.pdf. Accessed 22 Feb 2022"},{"key":"31_CR10","doi-asserted-by":"crossref","unstructured":"Thompson, C., Wager, D.: A large-scale study of modern code review and security in open source projects. In: 13th International Conference on Predictive Models and Data Analytics in Software Engineering (PROMISE), New York (2017)","DOI":"10.1145\/3127005.3127014"},{"issue":"0164\u20131212","key":"31_CR11","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2021.110951","volume":"177","author":"N Davila","year":"2021","unstructured":"Davila, N., Nunes, I.: A systematic literature review and taxonomy of modern code review. J. Syst. Softw. 177(0164\u20131212), 110951 (2021)","journal-title":"J. Syst. Softw."},{"key":"31_CR12","unstructured":"Ozment, A., Schechter, S.E.: Milk or wine: does software security improve with age? In: 15th USENIX Security Symposium (USENIX Security 06), Vancouver (2006)"},{"key":"31_CR13","doi-asserted-by":"crossref","unstructured":"Nagappan, N., Ball, T.: Use of relative code churn measures to predict system defect density. In: 2005 Proceedings. 27th International Conference on Software Engineering, ICSE 2005 (2005)","DOI":"10.1145\/1062455.1062514"},{"key":"31_CR14","doi-asserted-by":"crossref","unstructured":"Aljedaani, W., Javed, Y., Alenezi, M.: Open source systems bug reports: meta-analysis. In: Proceedings of the 2020 the 3rd International Conference on Big Data and Education (ICBDE 2020), New York (2020)","DOI":"10.1145\/3396452.3396459"},{"issue":"1","key":"31_CR15","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s40064-016-3612-4","volume":"5","author":"A Adewumi","year":"2016","unstructured":"Adewumi, A., Misra, S., Omoregbe, N., Crawford, B., Soto, R.: A systematic literature review of open source software quality assessment models. Springerplus 5(1), 1\u201313 (2016). https:\/\/doi.org\/10.1186\/s40064-016-3612-4","journal-title":"Springerplus"},{"issue":"5","key":"31_CR16","doi-asserted-by":"publisher","first-page":"780","DOI":"10.1002\/spe.2682","volume":"49","author":"A Adewumi","year":"2019","unstructured":"Adewumi, A., Misra, S., Omoregbe, N., Sanz, L.F.: FOSSES: framework for open-source software evaluation and selection. Softw. Pract. Experience 49(5), 780\u2013812 (2019)","journal-title":"Softw. Pract. Experience"}],"container-title":["Lecture Notes in Computer Science","Computational Science and Its Applications \u2013 ICCSA 2022 Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-10548-7_31","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,25]],"date-time":"2022-07-25T12:09:26Z","timestamp":1658750966000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-10548-7_31"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"ISBN":["9783031105470","9783031105487"],"references-count":16,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-10548-7_31","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2022]]},"assertion":[{"value":"26 July 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICCSA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Computational Science and Its Applications","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Malaga","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Spain","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 July 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"7 July 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iccsa2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/iccsa.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"CyberChair 4","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"279","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"57","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"24","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"20% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.6","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"8.7","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"285 Workshop submission accepted out of 815 submissions","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}