{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T01:56:50Z","timestamp":1760234210327,"version":"build-2065373602"},"reference-count":67,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T00:00:00Z","timestamp":1757289600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T00:00:00Z","timestamp":1757289600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,9,8]]},"DOI":"10.1109\/scam67354.2025.00014","type":"proceedings-article","created":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T17:35:14Z","timestamp":1760117714000},"page":"66-77","source":"Crossref","is-referenced-by-count":0,"title":["Smelling Secrets: Leveraging Machine Learning and Language Models for Sensitive Parameter Detection in Ansible Security Analysis"],"prefix":"10.1109","author":[{"given":"Ruben","family":"Opdebeeck","sequence":"first","affiliation":[{"name":"Vrije Universiteit,Software Languages Lab,Brussel,Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Valeria","family":"Pontillo","sequence":"additional","affiliation":[{"name":"Vrije Universiteit,Software Languages Lab,Brussel,Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Camilo","family":"Vel\u00e1zquez-Rodr\u00edguez","sequence":"additional","affiliation":[{"name":"Vrije Universiteit,Software Languages Lab,Brussel,Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wolfgang","family":"De Meuter","sequence":"additional","affiliation":[{"name":"Vrije Universiteit,Software Languages Lab,Brussel,Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Coen","family":"De Roover","sequence":"additional","affiliation":[{"name":"Vrije Universiteit,Software Languages Lab,Brussel,Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"volume-title":"Infrastructure as Code: Managing Servers in the Cloud","year":"2016","author":"Morris","key":"ref1"},{"volume-title":"2023 annual StackOverflow developer survey","year":"2023","key":"ref2"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2019.00092"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00033"},{"volume-title":"CVE-2020-1716","key":"ref5"},{"volume-title":"CVE-2019-10217","key":"ref6"},{"volume-title":"CVE-2020-25646","key":"ref7"},{"volume-title":"CVE-2021-3447","key":"ref8"},{"volume-title":"CVE-2021-20180","key":"ref9"},{"volume-title":"CVE-2021-20191","key":"ref10"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/MSR59073.2023.00079"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3408897"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3556945"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2023.3291998"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3293882.3330556"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.03762"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.18653\/vl\/N19-142"},{"key":"ref18","first-page":"1877","article-title":"Language Models are Few-Shot Learners","volume":"33","author":"Brown","year":"2020","journal-title":"Advances in neural information processing systems"},{"volume-title":"Replication package for Ansible sensitive parameter prediction study","author":"Opdebeeck","key":"ref19"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3689799"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SANER64311.2025.00025"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1023\/A:1022643204877"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/1007730.1007735"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1111\/j.2517-6161.1974.tb00994.x"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1002\/smr.2480"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3051492"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2018.8330206"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2018.00014"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2019.04.013"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1038\/nbt1206-1565"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.29172\/7c2a6982-6d72-4cd8-bba6-2fccb06a7011"},{"article-title":"BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehension","year":"2019","author":"Lewis","key":"ref32"},{"key":"ref33","doi-asserted-by":"crossref","DOI":"10.18653\/v1\/N18-1101","article-title":"A broad-coverage challenge corpus for sentence understanding through inference","author":"Williams","year":"2018"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-acl.137"},{"article-title":"Building Efficient Universal Classifiers with Natural Language Inference","year":"2023","author":"Laurer","key":"ref35"},{"article-title":"DeBERTa: Decoding-Enhanced BERT with Disentangled Attention","volume-title":"International Conference on Learning Representations","author":"He","key":"ref36"},{"key":"ref37","first-page":"809","article-title":"FEVER: a Large-scale Dataset for Fact Extraction and VERification","volume-title":"Proceedings of the 2018 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long Papers)","author":"Thorne"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.acl-main.441"},{"article-title":"Text embeddings by weakly-supervised contrastive pretraining","year":"2022","author":"Wang","key":"ref39"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-016-0043-6"},{"key":"ref41","first-page":"3320","article-title":"How transferable are features in deep neural networks?","volume-title":"Advances in Neural Information Processing Systems","volume":"27","author":"Yosinski","year":"2014"},{"issue":"59","key":"ref42","first-page":"1","article-title":"Domain-adversarial training of neural networks","volume-title":"Journal of Machine Learning Research","volume":"17","author":"Ganin","year":"2016"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS48256.2020.9027350"},{"article-title":"Secret breach detection in source code with large language models","year":"2025","author":"Rahman","key":"ref44"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3623312"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-29044-2"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/s11135-006-9018-6"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2018.12.004"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ICSA-C54293.2022.00049"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3556945"},{"key":"ref51","first-page":"100","article-title":"Fine-grained just-in-time defect prediction at the block level in infrastructure-as-code (IaC)","volume-title":"Proceedings of the 21st International Conference on Mining Software Repositories","author":"Begoug"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1002\/smr.2533"},{"key":"ref53","first-page":"2148","article-title":"Ansible Lightspeed: A code generation service for IT automation","volume-title":"Proceedings of the 39th IEEE\/ACM International Conference on Automated Software Engineering.","author":"Sahoo"},{"key":"ref54","first-page":"1","article-title":"An empirical comparison of code generation approaches for Ansible","volume-title":"Proceedings of the ACM\/IEEE 2nd International Workshop on Interpretability, Robustness, and Benchmarking in Neural Software Engineering.","author":"Darnell"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3643788.3648014"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-022-10215-5"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3416504.3424334"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3660790"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2015.48"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/ESEM56168.2023.10304853"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00122"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510150"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23039"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/SCAM.2018.00019"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3569936"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3409678"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2019.8667979"}],"event":{"name":"2025 IEEE International Conference on Source Code Analysis & Manipulation (SCAM)","start":{"date-parts":[[2025,9,8]]},"location":"Auckland, New Zealand","end":{"date-parts":[[2025,9,9]]}},"container-title":["2025 IEEE International Conference on Source Code Analysis & Manipulation (SCAM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11190090\/11189990\/11190293.pdf?arnumber=11190293","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T05:43:49Z","timestamp":1760161429000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11190293\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,8]]},"references-count":67,"URL":"https:\/\/doi.org\/10.1109\/scam67354.2025.00014","relation":{},"subject":[],"published":{"date-parts":[[2025,9,8]]}}}