{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T22:39:27Z","timestamp":1785537567444,"version":"3.56.0"},"reference-count":81,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,10,26]],"date-time":"2023-10-26T00:00:00Z","timestamp":1698278400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,10,26]],"date-time":"2023-10-26T00:00:00Z","timestamp":1698278400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2055554"],"award-info":[{"award-number":["2055554"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,10,26]]},"DOI":"10.1109\/esem56168.2023.10304853","type":"proceedings-article","created":{"date-parts":[[2023,11,8]],"date-time":"2023-11-08T18:50:15Z","timestamp":1699469415000},"page":"1-12","source":"Crossref","is-referenced-by-count":17,"title":["A Comparative Study of Software Secrets Reporting by Secret Detection Tools"],"prefix":"10.1109","author":[{"given":"Setu Kumar","family":"Basak","sequence":"first","affiliation":[{"name":"North Carolina State University,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jamison","family":"Cox","sequence":"additional","affiliation":[{"name":"North Carolina State University,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bradley","family":"Reaves","sequence":"additional","affiliation":[{"name":"North Carolina State University,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Laurie","family":"Williams","sequence":"additional","affiliation":[{"name":"North Carolina State University,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2018.09.006"},{"key":"ref57","year":"0","journal-title":"Improving TruffleHog's Entropy Calculation"},{"key":"ref12","year":"0","journal-title":"SecretBench File Types"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1002\/j.1538-7305.1948.tb01338.x"},{"key":"ref15","year":"0","journal-title":"Springerlink"},{"key":"ref59","year":"0","journal-title":"TruffleHog Prefix Regex"},{"key":"ref14","year":"0","journal-title":"ACM Digital Library"},{"key":"ref58","year":"0","journal-title":"Repo-supervisor CSS Filters"},{"key":"ref53","year":"0","journal-title":"Kaggle's GitHub Repository Dataset"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1002\/0470011815.b2a15150"},{"key":"ref11","year":"0","journal-title":"GitHub on BigQuery Analyze all the open source code"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510150"},{"key":"ref10","year":"0","journal-title":"Google BigQuery"},{"key":"ref54","year":"0","journal-title":"Feature scaling"},{"key":"ref17","year":"0","journal-title":"Dblp"},{"key":"ref16","year":"0","journal-title":"IEEE Xplore"},{"key":"ref19","first-page":"145","author":"lounici","year":"2021","journal-title":"Optimizing leak detection in open-source platforms with machine learning techniques"},{"key":"ref18","year":"0","journal-title":"ScienceDirect"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2018.09.016"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/2652524.2652564"},{"key":"ref46","year":"0","journal-title":"Python jellyfish package"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.1989.10478785"},{"key":"ref48","year":"0","journal-title":"SequenceMatcher of difflib package"},{"key":"ref47","article-title":"Ratcliff\/obershelp pattern recognition","volume":"17","author":"black","year":"2004","journal-title":"Dictionary of Algorithms and Data Structures"},{"key":"ref42","year":"0","journal-title":"Getting started with the REST API"},{"key":"ref41","year":"0","journal-title":"Github Secret Scanner"},{"key":"ref44","author":"winkler","year":"1990","journal-title":"String Comparator Metrics and Enhanced Decision Rules in the Fellegi-Sunter Model of Record Linkage"},{"key":"ref43","year":"0","journal-title":"Spectr"},{"key":"ref49","year":"0","journal-title":"Python time package"},{"key":"ref8","first-page":"arxiv:2303.06729","author":"basak","year":"2023","journal-title":"SecretBench A Dataset of Software Secrets"},{"key":"ref7","year":"0","journal-title":"False Positive Secret Dataset"},{"key":"ref9","year":"0","journal-title":"Google Cloud Storage"},{"key":"ref4","author":"jackson","year":"0","journal-title":"Uber Breach 2022 – Everything You Need to Know"},{"key":"ref3","author":"nichols","year":"2021","journal-title":"Popular mobile apps leaking aws keys exposing user data"},{"key":"ref6","author":"hadjy","year":"0","journal-title":"What Is Alert Fatigue? 4 Ways to Mitigate It and Prevent Burnout"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2004.111"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom56396.2022.00028"},{"key":"ref40","year":"0","journal-title":"py-gitguardian GitGuardian API Client"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-021-10109-y"},{"key":"ref35","year":"0","journal-title":"Truffle Security"},{"key":"ref79","first-page":"arxiv:2301.12377","author":"basak","year":"2023","journal-title":"What Challenges Do Developers Face About Checked-in Secrets in Software Artifacts?"},{"key":"ref34","year":"0","journal-title":"Trufflehog"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/SecDev53368.2022.00026"},{"key":"ref37","year":"0","journal-title":"ggshield"},{"key":"ref36","year":"0","journal-title":"Whispers"},{"key":"ref31","year":"0","journal-title":"Amazon Web Services - Labs"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2019.00087"},{"key":"ref30","year":"0","journal-title":"git-secrets"},{"key":"ref74","author":"hercz","year":"0","journal-title":"What happens when you leak AWS credentials and how AWS minimizes the damage"},{"key":"ref33","year":"0","journal-title":"Repo-Supervisor"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2021.3065190"},{"key":"ref32","year":"0","journal-title":"gitleaks"},{"key":"ref76","first-page":"2747","article-title":"Characterizing the security of github CI workflows","author":"koishybayev","year":"2022","journal-title":"31st USENIX Security Symposium (USENIX Security 22)"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23418"},{"key":"ref1","year":"0","journal-title":"The State of Secrets Sprawl 2023"},{"key":"ref39","year":"0","journal-title":"GitGuardian API"},{"key":"ref38","year":"0","journal-title":"GitGuardian Git Security Scanning & Secrets Detection"},{"key":"ref71","year":"0","journal-title":"GitHub Secret scanning partner program"},{"key":"ref70","year":"0","journal-title":"TruffleHog Verified secrets - unreachable website"},{"key":"ref73","year":"0","journal-title":"BFG Repo Cleaner"},{"key":"ref72","year":"0","journal-title":"GitHub Secret scanning patterns"},{"key":"ref24","year":"0","journal-title":"git-hound"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00033"},{"key":"ref23","year":"0","journal-title":"git-all-secrets"},{"key":"ref67","year":"0","journal-title":"TruffleHog AWS Detector"},{"key":"ref26","year":"0","journal-title":"Gittyleaks"},{"key":"ref25","year":"0","journal-title":"gitrob"},{"key":"ref69","year":"0","journal-title":"2022 State of APIs"},{"key":"ref20","year":"0","journal-title":"Credscan"},{"key":"ref64","year":"0","journal-title":"Github actions"},{"key":"ref63","year":"0","journal-title":"DevOps tech Shifting left on security"},{"key":"ref22","year":"0","journal-title":"detect-secrets"},{"key":"ref66","year":"0","journal-title":"Circlecircleintersection"},{"key":"ref21","year":"0","journal-title":"Cycode The Application Security Platform"},{"key":"ref65","year":"0","journal-title":"Travis CI"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom56396.2022.00028"},{"key":"ref27","year":"0","journal-title":"repo-security-scanner"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS48256.2020.9027350"},{"key":"ref60","year":"0","journal-title":"GitGuardian Secrets Detection Engine"},{"key":"ref62","year":"0","journal-title":"Mashape API Documentation"},{"key":"ref61","year":"0","journal-title":"IGDB API Docs Getting Started"}],"event":{"name":"2023 ACM\/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)","location":"New Orleans, LA, USA","start":{"date-parts":[[2023,10,26]]},"end":{"date-parts":[[2023,10,27]]}},"container-title":["2023 ACM\/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10304838\/10304789\/10304853.pdf?arnumber=10304853","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,12,11]],"date-time":"2023-12-11T19:19:22Z","timestamp":1702322362000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10304853\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,26]]},"references-count":81,"URL":"https:\/\/doi.org\/10.1109\/esem56168.2023.10304853","relation":{},"subject":[],"published":{"date-parts":[[2023,10,26]]}}}