{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T06:20:23Z","timestamp":1783059623131,"version":"3.54.6"},"reference-count":34,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T00:00:00Z","timestamp":1773705600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T00:00:00Z","timestamp":1773705600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100004807","name":"DFG","doi-asserted-by":"publisher","award":["1119-236615297"],"award-info":[{"award-number":["1119-236615297"]}],"id":[{"id":"10.13039\/100004807","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,3,17]]},"DOI":"10.1109\/saner67736.2026.00039","type":"proceedings-article","created":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T19:41:17Z","timestamp":1783021277000},"page":"287-298","source":"Crossref","is-referenced-by-count":0,"title":["From Legacy Designs to Vulnerability Fixes: Understanding SAST Adoption in Non-Technological Companies"],"prefix":"10.1109","author":[{"given":"Luis","family":"Amaral","sequence":"first","affiliation":[{"name":"University of Brasília,Department of Computer Science,Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michael","family":"Schlichtig","sequence":"additional","affiliation":[{"name":"Paderborn University and Fraunhofer IEM,Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wagner","family":"Emanuel","sequence":"additional","affiliation":[{"name":"University of Brasília,Department of Computer Science,Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joilton","family":"Almeida","sequence":"additional","affiliation":[{"name":"University of Brasília,Department of Computer Science,Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Carine","family":"Ferreira","sequence":"additional","affiliation":[{"name":"University of Brasília,Department of Computer Science,Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jerome","family":"Kempf","sequence":"additional","affiliation":[{"name":"Paderborn University,Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rodrigo","family":"Bonif\u00e1cio","sequence":"additional","affiliation":[{"name":"Federal University of Pernambuco (UFPE),Informatics Center,Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Eric","family":"Bodden","sequence":"additional","affiliation":[{"name":"Paderborn University,Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Laerte","family":"Peotta","sequence":"additional","affiliation":[{"name":"University of Brasília,Department of Computer Science,Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gustavo","family":"Pinto","sequence":"additional","affiliation":[{"name":"Federal University of Pará (UFPA) and Zup Innovation,Faculty of Computing,Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"M\u00e1rcio","family":"Ribeiro","sequence":"additional","affiliation":[{"name":"Computing Institute, Federal University of Alagoas,Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Cryptography Engineering - Design Principles and Practical Applications","author":"Ferguson","year":"2010"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884790"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516693"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382205"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382204"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/icse.2013.6606613"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2786805.2786812"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/icsme.2016.63"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2018.2810116"},{"key":"ref10","first-page":"221","article-title":"Why can\u2019t johnny fix vulnerabilities: A usability evaluation of static analysis tools for security","volume-title":"in Sixteenth Symposium on Usable Privacy and Security, SOUPS 2020","author":"Smith","year":"2020"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/sp54263.2024.00019"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2970276.2970347"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3188720"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-84800-044-5_4"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-4666-0179-6.ch013"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2021.3106280"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-60533-8"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3546943"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2023.3253145"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.4324\/9780203793206"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.4135\/9781529719000"},{"key":"ref22","volume-title":"Constructing grounded theory: A practical guide through qualitative analysis","author":"Charmaz","year":"2006"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238213"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-019-09750-5"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2023.3329667"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-024-00914-z"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/sp.2017.31"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2021.3058985"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/spw63631.2024.00014"},{"key":"ref30","doi-asserted-by":"crossref","first-page":"405","DOI":"10.5753\/sbseg_estendido.2025.12030","article-title":"Cryptographic api misuses in industry: A case study on prevalence and remediation","volume-title":"in Anais Estendidos do XXV Simp\u00f3sio Brasileiro de Ciberseguran\u00e7a. Porto Alegre","author":"Jesus","year":"2025"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534374"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/saner.2016.105"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2022.3150302"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3728875"}],"event":{"name":"2026 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)","location":"Limassol, Cyprus","start":{"date-parts":[[2026,3,17]]},"end":{"date-parts":[[2026,3,20]]}},"container-title":["2026 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11576582\/11576527\/11576537.pdf?arnumber=11576537","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T05:40:38Z","timestamp":1783057238000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11576537\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,17]]},"references-count":34,"URL":"https:\/\/doi.org\/10.1109\/saner67736.2026.00039","relation":{},"subject":[],"published":{"date-parts":[[2026,3,17]]}}}