{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T17:44:30Z","timestamp":1772041470303,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":31,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,3,30]],"date-time":"2020-03-30T00:00:00Z","timestamp":1585526400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,3,30]]},"DOI":"10.1145\/3341105.3373887","type":"proceedings-article","created":{"date-parts":[[2020,3,29]],"date-time":"2020-03-29T12:13:52Z","timestamp":1585484032000},"page":"1716-1725","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["Hybrid taint analysis for Java EE"],"prefix":"10.1145","author":[{"given":"Florian D.","family":"Loch","sequence":"first","affiliation":[{"name":"SAP Security Research & Karlsruhe Institute of Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martin","family":"Johns","sequence":"additional","affiliation":[{"name":"SAP Security Research & Karlsruhe Institute of Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martin","family":"Hecker","sequence":"additional","affiliation":[{"name":"SAP Security Research & Karlsruhe Institute of Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martin","family":"Mohr","sequence":"additional","affiliation":[{"name":"SAP Security Research & Karlsruhe Institute of Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gregor","family":"Snelting","sequence":"additional","affiliation":[{"name":"SAP Security Research & Karlsruhe Institute of Technology"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,3,30]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2771783.2784768"},{"key":"e_1_3_2_1_2_1","volume-title":"Kaiser","author":"Bell Jonathan","year":"2014","unstructured":"Jonathan Bell and Gail E . Kaiser . 2014 . Phosphor: illuminating dynamic data flow in commodity jvms. In Proc. OOPSLA. 83--101. Jonathan Bell and Gail E. Kaiser. 2014. Phosphor: illuminating dynamic data flow in commodity jvms. In Proc. OOPSLA. 83--101."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-17984"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1985793.1985827"},{"key":"e_1_3_2_1_5_1","volume-title":"Proc. Principles of Security and Trust (POST)","author":"Breitner Joachim","unstructured":"Joachim Breitner , J\u00fcrgen Graf , Martin Hecker , Martin Mohr , and Gregor Snelting . 2016. On Improvements Of Low-Deterministic Security . In Proc. Principles of Security and Trust (POST) . Springer Berlin Heidelberg , 68--88. Joachim Breitner, J\u00fcrgen Graf, Martin Hecker, Martin Mohr, and Gregor Snelting. 2016. On Improvements Of Low-Deterministic Security. In Proc. Principles of Security and Trust (POST). Springer Berlin Heidelberg, 68--88."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1655121.1655125"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2494522"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"crossref","unstructured":"R. Fielding and J. Reschke. 2014. Hypertext Transfer Protocol (HTTP\/1.1): Semantics and Content. RFC 7231. http:\/\/www.rfc-editor.org\/rfc\/rfc7231.txt  R. Fielding and J. Reschke. 2014. Hypertext Transfer Protocol (HTTP\/1.1): Semantics and Content . RFC 7231. http:\/\/www.rfc-editor.org\/rfc\/rfc7231.txt","DOI":"10.17487\/rfc7231"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-014-0257-6"},{"key":"e_1_3_2_1_11_1","volume-title":"8th International Workshop on Analysis of Security APIs.","author":"Graf J\u00fcrgen","year":"2015","unstructured":"J\u00fcrgen Graf , Martin Hecker , Martin Mohr , and Gregor Snelting . 2015 . Checking Applications using Security APIs with JOANA . 8th International Workshop on Analysis of Security APIs. J\u00fcrgen Graf, Martin Hecker, Martin Mohr, and Gregor Snelting. 2015. Checking Applications using Security APIs with JOANA. 8th International Workshop on Analysis of Security APIs."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-49635-0_5"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2005.21"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1101908.1101935"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1181775.1181797"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-11747-3_4"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-009-0086-1"},{"key":"e_1_3_2_1_18_1","volume-title":"Proceedings of the 2011 Marktoberdorf Summer School","author":"Hedin Daniel","year":"2011","unstructured":"Daniel Hedin and Andrei Sabelfeld . 2011 . A Perspective on Information-Flow Control . Proceedings of the 2011 Marktoberdorf Summer School (2011). http:\/\/www.cse.chalmers.se\/{~}andrei\/mod11.pdf Daniel Hedin and Andrei Sabelfeld. 2011. A Perspective on Information-Flow Control. Proceedings of the 2011 Marktoberdorf Summer School (2011). http:\/\/www.cse.chalmers.se\/{~}andrei\/mod11.pdf"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-54792-8_12"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2015.28"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516703"},{"key":"e_1_3_2_1_22_1","volume-title":"Juturna: Lightweight, Pluggable and Selective Taint Tracking for Java. Master's Thesis, KIT, Fakult\u00e4t f\u00fcr Informatik.","author":"Loch Florian","year":"2018","unstructured":"Florian Loch . 2018 . Juturna: Lightweight, Pluggable and Selective Taint Tracking for Java. Master's Thesis, KIT, Fakult\u00e4t f\u00fcr Informatik. Florian Loch. 2018. Juturna: Lightweight, Pluggable and Selective Taint Tracking for Java. Master's Thesis, KIT, Fakult\u00e4t f\u00fcr Informatik."},{"key":"e_1_3_2_1_23_1","volume-title":"Proc. Software Engineering (CEUR Workshop Proceedings)","volume":"1337","author":"Mohr Martin","year":"2015","unstructured":"Martin Mohr , J\u00fcrgen Graf , and Martin Hecker . 2015 . JoDroid: Adding Android Support to a Static Information Flow Control Tool . In Proc. Software Engineering (CEUR Workshop Proceedings) , Vol. 1337 . 140--145. Martin Mohr, J\u00fcrgen Graf, and Martin Hecker. 2015. JoDroid: Adding Android Support to a Static Information Flow Control Tool. In Proc. Software Engineering (CEUR Workshop Proceedings), Vol. 1337. 140--145."},{"key":"e_1_3_2_1_24_1","volume-title":"Proc. 30th ACM Symposium on Applied Computing. 1573--1579","author":"Mongiovi M.","unstructured":"M. Mongiovi , G. Giannone , A. Fornaia , G. Pappalardo , and E. Tramontana . 2015. Combining static and dynamic data flow analysis: a hybrid approach for detecting data leaks in Java applications . In Proc. 30th ACM Symposium on Applied Computing. 1573--1579 . M. Mongiovi, G. Giannone, A. Fornaia, G. Pappalardo, and E. Tramontana. 2015. Combining static and dynamic data flow analysis: a hybrid approach for detecting data leaks in Java applications. In Proc. 30th ACM Symposium on Applied Computing. 1573--1579."},{"key":"e_1_3_2_1_25_1","unstructured":"The Open Web Application Security Project (OWASP). 2017. OWASP Top 10 - 2017 RC2. https:\/\/github.com\/OWASP\/Top10\/raw\/master\/2017\/OWASP%20Top%2010%202017%20RC2%20Final.pdf  The Open Web Application Security Project (OWASP). 2017. OWASP Top 10 - 2017 RC2. https:\/\/github.com\/OWASP\/Top10\/raw\/master\/2017\/OWASP%20Top%2010%202017%20RC2%20Final.pdf"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/222124.222138"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2002.806121"},{"key":"e_1_3_2_1_28_1","volume-title":"Checking Probabilistic Noninterference Using JOANA. it - Information Technology 56 (Nov","author":"Snelting Gregor","year":"2014","unstructured":"Gregor Snelting , Dennis Giffhorn , J\u00fcrgen Graf , Christian Hammer , Martin Hecker , Martin Mohr , and Daniel Wasserrab . 2014. Checking Probabilistic Noninterference Using JOANA. it - Information Technology 56 (Nov . 2014 ), 280--287. Gregor Snelting, Dennis Giffhorn, J\u00fcrgen Graf, Christian Hammer, Martin Hecker, Martin Mohr, and Daniel Wasserrab. 2014. Checking Probabilistic Noninterference Using JOANA. it - Information Technology 56 (Nov. 2014), 280--287."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37057-1_15"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542486"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1554339.1554345"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/IMIS.2016.46"}],"event":{"name":"SAC '20: The 35th ACM\/SIGAPP Symposium on Applied Computing","location":"Brno Czech Republic","acronym":"SAC '20","sponsor":["SIGAPP ACM Special Interest Group on Applied Computing"]},"container-title":["Proceedings of the 35th Annual ACM Symposium on Applied Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3341105.3373887","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3341105.3373887","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:54:11Z","timestamp":1750204451000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3341105.3373887"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,3,30]]},"references-count":31,"alternative-id":["10.1145\/3341105.3373887","10.1145\/3341105"],"URL":"https:\/\/doi.org\/10.1145\/3341105.3373887","relation":{},"subject":[],"published":{"date-parts":[[2020,3,30]]},"assertion":[{"value":"2020-03-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}