{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:08:50Z","timestamp":1750306130128,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":69,"publisher":"ACM","license":[{"start":{"date-parts":[[2017,5,7]],"date-time":"2017-05-07T00:00:00Z","timestamp":1494115200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"VMware"},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1405641, CNS-1161541"],"award-info":[{"award-number":["CNS-1405641, CNS-1161541"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2017,5,7]]},"DOI":"10.1145\/3102980.3102991","type":"proceedings-article","created":{"date-parts":[[2017,7,20]],"date-time":"2017-07-20T17:51:38Z","timestamp":1500573098000},"page":"62-68","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["A Clairvoyant Approach to Evaluating Software (In)Security"],"prefix":"10.1145","author":[{"given":"Bhushan","family":"Jain","sequence":"first","affiliation":[{"name":"The University of North Carolina at Chapel Hill"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chia-Che","family":"Tsai","sequence":"additional","affiliation":[{"name":"Stony Brook University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Donald E.","family":"Porter","sequence":"additional","affiliation":[{"name":"The University of North Carolina at Chapel Hill"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2017,5,7]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"CCCC - C and C++ code counter. http:\/\/cccc.sourceforge.net\/.  CCCC - C and C++ code counter. http:\/\/cccc.sourceforge.net\/."},{"key":"e_1_3_2_1_2_1","unstructured":"Chromium - the chromium projects. https:\/\/www.chromium.org\/Home.  Chromium - the chromium projects. https:\/\/www.chromium.org\/Home."},{"key":"e_1_3_2_1_3_1","unstructured":"Common vulnerability scoring system v3.0: Specification document. https:\/\/www.first.org\/cvss\/specification-document.  Common vulnerability scoring system v3.0: Specification document. https:\/\/www.first.org\/cvss\/specification-document."},{"key":"e_1_3_2_1_4_1","unstructured":"Common weakness enumeration (CWE). https:\/\/cwe.mitre.org\/data\/index.html.  Common weakness enumeration (CWE). https:\/\/cwe.mitre.org\/data\/index.html."},{"key":"e_1_3_2_1_5_1","unstructured":"CVE - common vulnerabilities and exposures. https:\/\/cve.mitre.org\/.  CVE - common vulnerabilities and exposures. https:\/\/cve.mitre.org\/."},{"key":"e_1_3_2_1_6_1","unstructured":"CWE-121: Stack-based buffer overflow. https:\/\/cwe.mitre.org\/data\/definitions\/121.html.  CWE-121: Stack-based buffer overflow. https:\/\/cwe.mitre.org\/data\/definitions\/121.html."},{"key":"e_1_3_2_1_7_1","unstructured":"E.W. Dijkstra archive: On the reliability of programs. https:\/\/www.cs.utexas.edu\/users\/EWD\/transcriptions\/EWD03xx\/EWD303.html.  E.W. Dijkstra archive: On the reliability of programs. https:\/\/www.cs.utexas.edu\/users\/EWD\/transcriptions\/EWD03xx\/EWD303.html."},{"key":"e_1_3_2_1_8_1","unstructured":"ISO\/IEC 27004:2016: Monitoring measurement analysis and evaluation. http:\/\/www.iso27001security.com\/html\/27004.html.  ISO\/IEC 27004:2016: Monitoring measurement analysis and evaluation. http:\/\/www.iso27001security.com\/html\/27004.html."},{"key":"e_1_3_2_1_9_1","unstructured":"JLint. Online at http:\/\/artho.com\/jlint\/.  JLint. Online at http:\/\/artho.com\/jlint\/."},{"key":"e_1_3_2_1_10_1","unstructured":"Metrix++ project. metrixplusplus.sourceforge.net\/.  Metrix++ project. metrixplusplus.sourceforge.net\/."},{"key":"e_1_3_2_1_11_1","unstructured":"PMD. Online at https:\/\/pmd.github.io\/.  PMD. Online at https:\/\/pmd.github.io\/."},{"key":"e_1_3_2_1_12_1","unstructured":"Weka 3: Data mining software in java. http:\/\/www.cs.waikato.ac.nz\/ml\/weka\/.  Weka 3: Data mining software in java. http:\/\/www.cs.waikato.ac.nz\/ml\/weka\/."},{"key":"e_1_3_2_1_13_1","unstructured":"Chrome owned by exploits in hacker contests but google's $1m purse still safe | wired. March 2012.  Chrome owned by exploits in hacker contests but google's $1m purse still safe | wired. March 2012."},{"key":"e_1_3_2_1_14_1","unstructured":"Pwn2Own 2016: Windows OS X Chrome Edge Safari all hacked - gHacks tech news. March 2016. (Accessed on 04\/25\/2017).  Pwn2Own 2016: Windows OS X Chrome Edge Safari all hacked - gHacks tech news. March 2016. (Accessed on 04\/25\/2017)."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/800028.808479"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/QSIC.2009.11"},{"key":"e_1_3_2_1_17_1","unstructured":"F. ans Kunst. Lint a c program checker. 1988.  F. ans Kunst. Lint a c program checker. 1988."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2008.130"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/508791.508839"},{"volume-title":"Texts in Theoretical Computer Science. An EATCS Series. Springer Berlin Heidelberg","year":"2013","author":"Bertot Y.","key":"e_1_3_2_1_20_1"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2004.1317470"},{"key":"e_1_3_2_1_22_1","first-page":"209","volume-title":"OSDI","volume":"8","author":"Cadar C.","year":"2008"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2015.32"},{"key":"e_1_3_2_1_24_1","first-page":"171","volume-title":"NDSS","volume":"4","author":"Chen H.","year":"2004"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586142"},{"key":"e_1_3_2_1_26_1","first-page":"439","volume-title":"Software Engineering, 2000. Proceedings of the 2000 International Conference on","author":"Corbett J. C.","year":"2000"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/512950.512973"},{"volume-title":"Brazilian Conference on Software: Theory and Practice (CBSoft'13)","year":"2013","author":"Couto C.","key":"e_1_3_2_1_28_1"},{"key":"e_1_3_2_1_29_1","unstructured":"A. Danial. cloc. https:\/\/github.com\/AlDanial\/cloc.  A. Danial. cloc. https:\/\/github.com\/AlDanial\/cloc."},{"key":"e_1_3_2_1_30_1","unstructured":"D. Dean S. Gaurino L. Eusebi A. Keplinger T. Pavlik R. Watro A. Cammarata J. Murray K. McLaughlin J. Cheng etal Lessons learned in game development for crowdsourced software formal verification. 2015 USENIX Summit on Gaming Games and Gamification in Security Education (3GSE 15) 2015.  D. Dean S. Gaurino L. Eusebi A. Keplinger T. Pavlik R. Watro A. Cammarata J. Murray K. McLaughlin J. Cheng et al. Lessons learned in game development for crowdsourced software formal verification. 2015 USENIX Summit on Gaming Games and Gamification in Security Education (3GSE 15) 2015."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1287624.1287653"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/298595.298598"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/502034.502041"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/543552.512558"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-34892-6_1"},{"volume-title":"Cambridge University Press","year":"1993","author":"Gordon M. J. C.","key":"e_1_3_2_1_36_1"},{"volume-title":"Elsevier New York","year":"1977","author":"Halstead M. H.","key":"e_1_3_2_1_37_1"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815400.2815428"},{"key":"e_1_3_2_1_39_1","first-page":"165","volume-title":"OSDI","author":"Hawblitzel C.","year":"2014"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/1052883.1052895"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-24006-3_8"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/1345169.1345177"},{"volume-title":"Springer Science & Business Media","year":"2013","author":"Kaufmann M.","key":"e_1_3_2_1_43_1"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629596"},{"key":"e_1_3_2_1_45_1","first-page":"77","volume-title":"ICSM (Industrial and Tool Volume","author":"Marinescu C.","year":"2005"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2004.31"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1976.233837"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/1842752.1842797"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/1321631.1321727"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2004.11"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45949-9"},{"volume-title":"CreateSpace","year":"2012","author":"Aroms E.","key":"e_1_3_2_1_52_1"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/SCAM.2006.6"},{"key":"e_1_3_2_1_54_1","unstructured":"S. C. P. Profile. Common criteria for information technology security evaluation. 2001.  S. C. P. Profile. Common criteria for information technology security evaluation. 2001."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1002\/smr.1737"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/199448.199462"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815400.2815411"},{"volume-title":"California State University","year":"2009","author":"Roperia N.","key":"e_1_3_2_1_58_1"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2004.1"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2002.1004377"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2010.81"},{"volume-title":"OSDI","year":"2016","author":"Sigurbjarnarson H.","key":"e_1_3_2_1_62_1"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813608"},{"key":"e_1_3_2_1_64_1","unstructured":"S. Slinger D. Ing L. M. F. Moonen S. Slinger S. Dr and I. L. M. F. Moonen. Title: Code Smell Detection in Eclipse. 2005.  S. Slinger D. Ing L. M. F. Moonen S. Slinger S. Dr and I. L. M. F. Moonen. Title: Code Smell Detection in Eclipse. 2005."},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSMR.2008.4493342"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/1167253.1167295"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/1566445.1566509"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/1852786.1852865"},{"key":"e_1_3_2_1_69_1","unstructured":"F. Zeng. A machine learning approach to finding bugs.  F. Zeng. A machine learning approach to finding bugs."}],"event":{"name":"HotOS '17: Workshop on Hot Topics in Operating Systems","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"],"location":"Whistler BC Canada","acronym":"HotOS '17"},"container-title":["Proceedings of the 16th Workshop on Hot Topics in Operating Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3102980.3102991","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3102980.3102991","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3102980.3102991","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:37:06Z","timestamp":1750217826000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3102980.3102991"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,5,7]]},"references-count":69,"alternative-id":["10.1145\/3102980.3102991","10.1145\/3102980"],"URL":"https:\/\/doi.org\/10.1145\/3102980.3102991","relation":{},"subject":[],"published":{"date-parts":[[2017,5,7]]},"assertion":[{"value":"2017-05-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}