{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,29]],"date-time":"2024-09-29T19:40:12Z","timestamp":1727638812822},"reference-count":35,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2022,7,23]],"date-time":"2022-07-23T00:00:00Z","timestamp":1658534400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,7,23]],"date-time":"2022-07-23T00:00:00Z","timestamp":1658534400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Empir Software Eng"],"published-print":{"date-parts":[[2022,11]]},"DOI":"10.1007\/s10664-022-10157-y","type":"journal-article","created":{"date-parts":[[2022,7,23]],"date-time":"2022-07-23T09:13:03Z","timestamp":1658567583000},"update-policy":"http:\/\/dx.doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Predicting sensitive information leakage in IoT applications using flows-aware machine learning approach"],"prefix":"10.1007","volume":"27","author":[{"given":"Hajra","family":"Naeem","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Manar H.","family":"Alalfi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,7,23]]},"reference":[{"key":"10157_CR1","doi-asserted-by":"crossref","unstructured":"Alon U, Zilberstein M, Levy O, Yahav E (2018) Code2vec: learning distributed representations of code. CoRR, arXiv:1803.09473","DOI":"10.1145\/3290353"},{"key":"10157_CR2","unstructured":"Andersen LO (1994) Program analysis and specialization for the C programming language. Ph.D. Dissertation. University of Cophenhagen"},{"key":"10157_CR3","doi-asserted-by":"publisher","first-page":"259","DOI":"10.1145\/2666356.2594299","volume":"49","author":"S Arzt","year":"2014","unstructured":"Arzt S, Rasthofer S, Fritz C, Bodden E, Bartel A, Klein J, Yves LT, Octeau D, McDaniel P (2014) FLOWDROID: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for Android apps. ACM SIGPLAN Not 49:259\u2013269","journal-title":"ACM SIGPLAN Not"},{"key":"10157_CR4","doi-asserted-by":"crossref","unstructured":"Avdiienko V, Kuznetsov K, Gorla A, Zeller A, Arzt S, Rasthofer S, Bodden E (2015) Mining apps for abnormal usage of sensitive data. In: 37th IEEE\/ACM international conference on software engineering, ICSE 2015, Florence, Italy, vol 1, pp 426\u2013436","DOI":"10.1109\/ICSE.2015.61"},{"key":"10157_CR5","doi-asserted-by":"crossref","unstructured":"Boris C, Rakesh V (2018) Machine learning methods for software vulnerability detection, pp 31\u201339","DOI":"10.1145\/3180445.3180453"},{"key":"10157_CR6","unstructured":"Celik ZB, Babun L, Sikder AK, Aksu H, Tan G, McDaniel PD, Uluagac AS (2018) Sensitive information tracking in commodity IoT. In: 27th USENIX security symposium, USENIX security 2018, Baltimore, MD, USA, pp 1687\u20131704"},{"key":"10157_CR7","unstructured":"Dam HK, Tran T, Pham TTM, Ng SW, Grundy J, Ghose A (2018) Automatic feature learning for predicting vulnerable software components. IEEE Trans Softw Eng 1\u20131"},{"key":"10157_CR8","doi-asserted-by":"crossref","unstructured":"Dam HK, Pham T, Ng SW, Tran T, Grundy J, Ghose A, Kim T, Kim C (2019) Lessons learned from using a deep Tree-Based model for software defect prediction in practice. In: 2019 IEEE\/ACM 16th international conference on mining software repositories (MSR), pp 46\u201357","DOI":"10.1109\/MSR.2019.00017"},{"key":"10157_CR9","unstructured":"Harer JA, Kim LY, Russell RL, Ozdemir O, Kosta LR, Rangamani A, Hamilton LH, Centeno GI, Key JR, Ellingwood PM, McConley MW, Opper JM, Chin SP, Lazovich T (2018) Automated software vulnerability detection with machine learning. CoRR, arXiv:1803.04497"},{"key":"10157_CR10","doi-asserted-by":"publisher","first-page":"1031","DOI":"10.1007\/s11063-019-10125-6","volume":"51","author":"J Hassan","year":"2020","unstructured":"Hassan J, Shoaib U (2020) Multi-class review rating classification using deep recurrent neural network. Neural Process Lett 51:1031\u20131048","journal-title":"Neural Process Lett"},{"key":"10157_CR11","doi-asserted-by":"crossref","unstructured":"Irfan MN, Oriat C, Groz R (2010) Angluin style finite state machine inference with non-optimal counterexamples. In: Proceedings of the first international workshop on model inference in testing, pp 11\u201319","DOI":"10.1145\/1868044.1868046"},{"key":"10157_CR12","doi-asserted-by":"publisher","first-page":"89","DOI":"10.1016\/B978-0-12-408094-2.00003-5","volume":"89","author":"M-N Irfan","year":"2013","unstructured":"Irfan M -N, Oriat C, Groz R (2013) Model inference and testing. Adv Comput 89:89\u2013139","journal-title":"Adv Comput"},{"key":"10157_CR13","doi-asserted-by":"crossref","unstructured":"Kim H, Choi T, Jung S, Kim H, Lee O, Doh K (2008) Applying dataflow analysis to detecting software vulnerability. In: 2008 10th International conference on advanced communication technology, pp 255\u2013258","DOI":"10.1109\/ICACT.2008.4493756"},{"key":"10157_CR14","doi-asserted-by":"publisher","first-page":"113","DOI":"10.1016\/j.ins.2013.07.007","volume":"250","author":"V L\u00f3pez","year":"2013","unstructured":"L\u00f3pez V, Fern\u00e1ndez A, Garc\u00eda S, Palade V, Herrera F (2013) An insight into classification with imbalanced data: empirical results and current trends on using data intrinsic characteristics. Inf Sci 250:113\u2013141","journal-title":"Inf Sci"},{"key":"10157_CR15","doi-asserted-by":"crossref","unstructured":"Medeiros I, Neves NF, Correia M (2016) DEKANT: a static analysis tool that learns to detect web application vulnerabilitiess. In: Proceedings of the 25th international symposium on software testing and analysis, ISSTA 2016, Saarbr\u00fccken, Germany, pp 1\u201311","DOI":"10.1145\/2931037.2931041"},{"key":"10157_CR16","unstructured":"Mikolov T, Chen K, Corrado G, Dean J (2013a) Efficient estimation of word representations in vector space. In: 1st International conference on learning representations, ICLR 2013, Scottsdale, Arizona, USA, May 2\u20134, 2013, Workshop Track Proceedings"},{"key":"10157_CR17","doi-asserted-by":"crossref","unstructured":"Naeem H, Alalfi MH (2020) Identifying vulnerable IoT applications using deep learning. In: 27th IEEE international conference on software analysis, evolution and reengineering, SANER 2020, London, ON, Canada, pp 582\u2013586","DOI":"10.1109\/SANER48275.2020.9054817"},{"key":"10157_CR18","doi-asserted-by":"crossref","unstructured":"Parveen S, Alalfi MH (2020) A mutation framework for evaluating security analysis tools in IoT applications. In: 27th IEEE international conference on software analysis, evolution and reengineering, SANER 2020, London, ON, Canada, pp 587\u2013591","DOI":"10.1109\/SANER48275.2020.9054853"},{"key":"10157_CR19","first-page":"2825","volume":"12","author":"F Pedregosa","year":"2011","unstructured":"Pedregosa F, Varoquaux G, Gramfort A, Michel V, Thirion B, Grisel O, Blondel M, Prettenhofer P, Weiss R, Dubourg V, Vanderplas J, Passos A, Cournapeau D, Brucher M, Perrot M, Duchesnay E (2011) Scikit-learn: machine Learning in Python. J Mach Learn Res 12:2825\u20132830","journal-title":"J Mach Learn Res"},{"key":"10157_CR20","doi-asserted-by":"crossref","unstructured":"Sadeghi A, Bagheri H, Malek S (2015) Analysis of android Inter-App security vulnerabilities using COVERT. In: 2015 IEEE\/ACM 37th IEEE international conference on software engineering, vol 2, pp 725\u2013728","DOI":"10.1109\/ICSE.2015.233"},{"key":"10157_CR21","doi-asserted-by":"publisher","first-page":"993","DOI":"10.1109\/TSE.2014.2340398","volume":"40","author":"R Scandariato","year":"2014","unstructured":"Scandariato R, Walden J, Hovsepyan A, Joosen W (2014) Predicting vulnerable software components via text mining. IEEE Trans Softw Eng 40:993\u20131006","journal-title":"IEEE Trans Softw Eng"},{"key":"10157_CR22","doi-asserted-by":"crossref","unstructured":"Schmeidl F, Nazzal B, Alalfi MH (2019) Security analysis for SmartThings IoT applications. In: Proceedings of the 6th international conference on mobile software engineering and systems, MOBILESoft@ICSE, Montreal, QC, Canada, pp 25\u201329","DOI":"10.1109\/MOBILESoft.2019.00013"},{"key":"10157_CR23","doi-asserted-by":"crossref","unstructured":"Shar LK, Tan HBK (2012) Mining input sanitization patterns for predicting SQL injection and cross site scripting vulnerabilities. In: 34th International conference on software engineering, ICSE 2012, Zurich, Switzerland, pp 1293\u20131296","DOI":"10.1109\/ICSE.2012.6227096"},{"key":"10157_CR24","doi-asserted-by":"crossref","unstructured":"Shar LK, Tan HBK, Briand LC (2013) Mining SQL injection and cross site scripting vulnerabilities using hybrid program analysis. In: 35th International conference on software engineering, ICSE \u201913, San Francisco, CA, USA, pp 642\u2013651","DOI":"10.1109\/ICSE.2013.6606610"},{"key":"10157_CR25","doi-asserted-by":"publisher","first-page":"2300","DOI":"10.1016\/j.eswa.2013.09.027","volume":"41","author":"U Shoaib","year":"2014","unstructured":"Shoaib U, Ahmad N, Prinetto P, Tiotto G (2014) Integrating MultiWordNet with Italian Sign Language lexical resources. Expert Syst Appl 41:2300\u20132308","journal-title":"Expert Syst Appl"},{"key":"10157_CR26","unstructured":"SmartThings Classic Developer Documentation (2019) https:\/\/buildmedia.readthedocs.org\/media\/pdf\/smartthings\/latest\/smartthings.pdf"},{"issue":"OOPSLA","key":"10157_CR27","doi-asserted-by":"publisher","first-page":"233:1","DOI":"10.1145\/3428301","volume":"4","author":"Y Sui","year":"2020","unstructured":"Sui Y, Cheng X, Zhang G, Wang H (2020) Flow2vec: value-flow-based precise code embedding. Proc ACM Program Lang 4(OOPSLA):233:1-233:27","journal-title":"Proc ACM Program Lang"},{"key":"10157_CR28","doi-asserted-by":"crossref","unstructured":"Tai KS, Socher R, Manning CD (2015) Improved semantic representations from Tree-Structured long Short-Term memory networks. CoRR, arXiv:1503.00075","DOI":"10.3115\/v1\/P15-1150"},{"key":"10157_CR29","volume-title":"Pandas-dev\/pandas","author":"The Pandas Development Team","year":"2020","unstructured":"The Pandas Development Team (2020) Pandas-dev\/pandas. Pandas, Zenodo"},{"key":"10157_CR30","unstructured":"Towards a definition of the Internet of Things (IoT) (2015) IEEE Internet Initiative and others"},{"key":"10157_CR31","doi-asserted-by":"crossref","unstructured":"Walden J, Stuckman J, Scandariato R (2014) Predicting vulnerable components: software metrics vs text mining. In: 25th IEEE International symposium on software reliability engineering, ISSRE 2014, naples, Italy, pp 23\u201333","DOI":"10.1109\/ISSRE.2014.32"},{"key":"10157_CR32","doi-asserted-by":"crossref","unstructured":"Wang S, Liu T, Tan L (2016) Automatically learning semantic features for defect prediction, pp 297\u2013308","DOI":"10.1145\/2884781.2884804"},{"key":"10157_CR33","doi-asserted-by":"crossref","unstructured":"Zhao K, Zhang D, Su X, Li W (2015) Fest: a feature extraction and selection tool for Android malware detection. In: 2015 IEEE Symposium on computers and communication, ISCC 2015, Larnaca, Cyprus, pp 714\u2013720","DOI":"10.1109\/ISCC.2015.7405598"},{"key":"10157_CR34","doi-asserted-by":"crossref","unstructured":"Zheng W, Gao J, Wu X, Xun Y, Liu G, Chen X (2020) An empirical study of high-impact factors for machine Learning-Based vulnerability detection. In: 2020 IEEE 2nd International workshop on intelligent bug fixing (IBF), pp 26\u201334","DOI":"10.1109\/IBF50092.2020.9034888"},{"key":"10157_CR35","unstructured":"Zhu D, Jin H, Yang Y, Wu D, Chen W (2017) Deepflow: deep learning-based malware detection by mining Android application for abnormal usage of sensitive data. In: 2017 IEEE Symposium on computers and communications (ISCC), pp 438\u2013443"}],"container-title":["Empirical Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-022-10157-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10664-022-10157-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-022-10157-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,29]],"date-time":"2024-09-29T19:05:47Z","timestamp":1727636747000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10664-022-10157-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,7,23]]},"references-count":35,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2022,11]]}},"alternative-id":["10157"],"URL":"https:\/\/doi.org\/10.1007\/s10664-022-10157-y","relation":{},"ISSN":["1382-3256","1573-7616"],"issn-type":[{"type":"print","value":"1382-3256"},{"type":"electronic","value":"1573-7616"}],"subject":[],"published":{"date-parts":[[2022,7,23]]},"assertion":[{"value":"22 March 2022","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"23 July 2022","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}],"article-number":"137"}}