{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,23]],"date-time":"2026-04-23T04:39:41Z","timestamp":1776919181655,"version":"3.51.2"},"reference-count":58,"publisher":"IEEE","license":[{"start":{"date-parts":[[2021,10,1]],"date-time":"2021-10-01T00:00:00Z","timestamp":1633046400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,10,1]],"date-time":"2021-10-01T00:00:00Z","timestamp":1633046400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,10]]},"DOI":"10.1109\/issre52982.2021.00055","type":"proceedings-article","created":{"date-parts":[[2022,2,12]],"date-time":"2022-02-12T01:01:25Z","timestamp":1644627685000},"page":"468-475","source":"Crossref","is-referenced-by-count":5,"title":["PyGuard: Finding and Understanding Vulnerabilities in Python Virtual Machines"],"prefix":"10.1109","author":[{"given":"Chengman","family":"Jiang","sequence":"first","affiliation":[{"name":"School of Software Engineering, University of Science and Technology of China,Suzhou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Baojian","family":"Hua","sequence":"additional","affiliation":[{"name":"School of Software Engineering, University of Science and Technology of China,Suzhou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wanrong","family":"Ouyang","sequence":"additional","affiliation":[{"name":"School of Software Engineering, University of Science and Technology of China,Suzhou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qiliang","family":"Fan","sequence":"additional","affiliation":[{"name":"School of Software Engineering, University of Science and Technology of China,Suzhou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhizhong","family":"Pan","sequence":"additional","affiliation":[{"name":"School of Software Engineering, University of Science and Technology of China,Suzhou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-92432-8_3"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.23919\/MIPRO.2019.8756844"},{"key":"ref33","year":"0","journal-title":"Fortify"},{"key":"ref32","year":"0","journal-title":"Checkmarx"},{"key":"ref31","year":"0","journal-title":"Coverity"},{"key":"ref30","year":"0","journal-title":"Tencent TscanCode"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1002\/cae.22147"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2754169.2754185"},{"key":"ref35","author":"davis","year":"2015","journal-title":"Automatic memory management techniques for the go programming language"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3062341.3062376"},{"key":"ref28","author":"wheeler","year":"0","journal-title":"Flawfinder"},{"key":"ref27","year":"0","journal-title":"Python Developers Survey 2020 Results"},{"key":"ref29","author":"marjam?ki","year":"0","journal-title":"Cppcheck"},{"key":"ref2","first-page":"18","author":"blandy","year":"0","journal-title":"Programming-Rust Chapter 1 Why Rust?-Type Safety"},{"key":"ref1","year":"0","journal-title":"Type system"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653716"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.scico.2014.01.018"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2048066.2048095"},{"key":"ref24","first-page":"80","article-title":"Finding Reference-Counting Errors in Python\/C Programs with Affine Analysis","author":"li","year":"2014","journal-title":"ECOOP"},{"key":"ref23","first-page":"365","article-title":"An Empirical Security Study of the Native Code in the JDK","author":"tan","year":"0","journal-title":"USENIX Security Symposium"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SANER48275.2020.9054835"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2872362.2872389"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.23919\/MIPRO48935.2020.9245083"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3351556.3351585"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/1297027.1297051"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/512529.512531"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/1060289.1060297"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/2502508.2502520"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/586139.586142"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/378795.378846"},{"key":"ref52","first-page":"77","article-title":"Jaint: A Framework for User-Defined Dynamic Taint-Analyses based on Dynamic Symbolic Execution of Java Programs","author":"mues","year":"2021","journal-title":"Software Engineering"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2018.00035"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1587\/transinf.2018EDP7192"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3203217.3203274"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1155\/2019\/8391425"},{"key":"ref13","article-title":"Stack-based Buffer Overflow Detection using Recurrent Neural Networks","volume":"abs 2012 15116","author":"dahl","year":"2020","journal-title":"CoRR"},{"key":"ref14","article-title":"EffectiveSan: Type and Memory Error Detection using Dynamically Typed C\/C++","volume":"abs 1710 6125","author":"duck","year":"2017","journal-title":"CoRR"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICCT50939.2020.9295756"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-019-0035-x"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065019"},{"key":"ref18","first-page":"309","article-title":"Polymorphic Type Inference for the JNI","author":"furr","year":"2006","journal-title":"ESOP"},{"key":"ref19","first-page":"97","article-title":"Safe Java Native Interface","author":"tan","year":"0","journal-title":"IEEE International Symposium on Secure Software Engineering"},{"key":"ref4","year":"0","journal-title":"CVE-2021-23336"},{"key":"ref3","article-title":"What Are The Most Secure Programming Languages","year":"2019","journal-title":"WhiteSource"},{"key":"ref6","year":"0","journal-title":"CVE-2017-1000158"},{"key":"ref5","year":"0","journal-title":"CVE-2018-1000117"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/1065887.1065892"},{"key":"ref7","year":"0","journal-title":"CVE-2016-5636"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1002\/stvr.1716"},{"key":"ref9","first-page":"275","author":"jim","year":"0","journal-title":"Cyclone A Safe Dialect of C USENIX Annual Technical Conference General Track"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-24268-8_29"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-65610-2_6"},{"key":"ref48","article-title":"Automated software vulnerability detection with machine learning","volume":"abs 1803 4497","author":"harer","year":"2018","journal-title":"CoRR"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3180445.3180453"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2743019"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99498-7_19"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/BigData50022.2020.9377753"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3016774"}],"event":{"name":"2021 IEEE 32nd International Symposium on Software Reliability Engineering (ISSRE)","location":"Wuhan, China","start":{"date-parts":[[2021,10,25]]},"end":{"date-parts":[[2021,10,28]]}},"container-title":["2021 IEEE 32nd International Symposium on Software Reliability Engineering (ISSRE)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9700160\/9700163\/09700331.pdf?arnumber=9700331","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,6,13]],"date-time":"2022-06-13T21:07:16Z","timestamp":1655154436000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9700331\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,10]]},"references-count":58,"URL":"https:\/\/doi.org\/10.1109\/issre52982.2021.00055","relation":{},"subject":[],"published":{"date-parts":[[2021,10]]}}}