{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,13]],"date-time":"2026-05-13T17:44:29Z","timestamp":1778694269202,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":36,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,11,8]],"date-time":"2020-11-08T00:00:00Z","timestamp":1604793600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,11,8]]},"DOI":"10.1145\/3368089.3417059","type":"proceedings-article","created":{"date-parts":[[2020,12,11]],"date-time":"2020-12-11T00:45:01Z","timestamp":1607647501000},"page":"1477-1486","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":20,"title":["Scaling static taint analysis to industrial SOA applications: a case study at Alibaba"],"prefix":"10.1145","author":[{"given":"Jie","family":"Wang","sequence":"first","affiliation":[{"name":"Peking University, China \/ Ant Group, China \/ Alibaba Group, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yunguang","family":"Wu","sequence":"additional","affiliation":[{"name":"Ant Group, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gang","family":"Zhou","sequence":"additional","affiliation":[{"name":"Ant Group, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yiming","family":"Yu","sequence":"additional","affiliation":[{"name":"Ant Group, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhenyu","family":"Guo","sequence":"additional","affiliation":[{"name":"Ant Group, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yingfei","family":"Xiong","sequence":"additional","affiliation":[{"name":"Peking University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,11,8]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"2020. aliflow micro bench. https:\/\/github.com\/af-static-toolchains\/aliflow-microbenchmark.  2020. aliflow micro bench. https:\/\/github.com\/af-static-toolchains\/aliflow-microbenchmark."},{"key":"e_1_3_2_2_2_1","unstructured":"2020. Aspect-oriented_programming. https:\/\/en.wikipedia.org\/wiki\/Aspectoriented_programming.  2020. Aspect-oriented_programming. https:\/\/en.wikipedia.org\/wiki\/Aspectoriented_programming."},{"key":"e_1_3_2_2_3_1","unstructured":"2020. Camel 3.0. https:\/\/camel.apache.org\/.  2020. Camel 3.0. https:\/\/camel.apache.org\/."},{"key":"e_1_3_2_2_4_1","unstructured":"2020. Class_hierarchy. https:\/\/en.wikipedia.org\/wiki\/Class_hierarchy.  2020. Class_hierarchy. https:\/\/en.wikipedia.org\/wiki\/Class_hierarchy."},{"key":"e_1_3_2_2_5_1","unstructured":"2020. Data access object. https:\/\/en.wikipedia.org\/wiki\/Data_access_object.  2020. Data access object. https:\/\/en.wikipedia.org\/wiki\/Data_access_object."},{"key":"e_1_3_2_2_6_1","unstructured":"2020. Data breach. https:\/\/en.wikipedia.org\/wiki\/Data_breach.  2020. Data breach. https:\/\/en.wikipedia.org\/wiki\/Data_breach."},{"key":"e_1_3_2_2_7_1","unstructured":"2020. Datalog. https:\/\/en.wikipedia.org\/wiki\/Datalog.  2020. Datalog. https:\/\/en.wikipedia.org\/wiki\/Datalog."},{"key":"e_1_3_2_2_8_1","unstructured":"2020. Plain old Java object. https:\/\/en.wikipedia.org\/wiki\/Plain_old_Java_object.  2020. Plain old Java object. https:\/\/en.wikipedia.org\/wiki\/Plain_old_Java_object."},{"key":"e_1_3_2_2_9_1","unstructured":"2020. Program Slicing. https:\/\/en.wikipedia.org\/wiki\/Program_slicing.  2020. Program Slicing. https:\/\/en.wikipedia.org\/wiki\/Program_slicing."},{"key":"e_1_3_2_2_10_1","unstructured":"2020. securitystatistics. https:\/\/www.varonis.com\/blog\/cybersecurity-statistics\/.  2020. securitystatistics. https:\/\/www.varonis.com\/blog\/cybersecurity-statistics\/."},{"key":"e_1_3_2_2_11_1","unstructured":"2020. SOFARPC. https:\/\/github.com\/sofastack\/sofa-rpc.  2020. SOFARPC. https:\/\/github.com\/sofastack\/sofa-rpc."},{"key":"e_1_3_2_2_12_1","unstructured":"2020. Spring cloud. https:\/\/spring.io\/projects\/spring-cloud.  2020. Spring cloud. https:\/\/spring.io\/projects\/spring-cloud."},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"crossref","first-page":"794","DOI":"10.1145\/3385412.3386026","volume-title":"Proceedings of the 41st ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI '20)","author":"Anastasios Antoniadis","year":"2020","unstructured":"Antoniadis Anastasios , Filippakis Nikos , Krishnan Paddy , Ramesh Raghavendra , Allen Nicholas , Allen Nicholas , and Yannis Smaragdakis . 2020 . Static analysis of Java enterprise applications: frameworks and caches, the elephants in the room . In Proceedings of the 41st ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI '20) . 794 - 807 . Antoniadis Anastasios, Filippakis Nikos, Krishnan Paddy, Ramesh Raghavendra, Allen Nicholas, Allen Nicholas, and Yannis Smaragdakis. 2020. Static analysis of Java enterprise applications: frameworks and caches, the elephants in the room. In Proceedings of the 41st ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI '20). 794-807."},{"key":"e_1_3_2_2_14_1","volume-title":"StubDroid: Automatic Inference of Precise Data-Flow Summaries for the Android Framework. In 2016 IEEE\/ACM 38th International Conference on Software Engineering (ICSE). 725-735","author":"Arzt S.","unstructured":"S. Arzt and E. Bodden . 2016 . StubDroid: Automatic Inference of Precise Data-Flow Summaries for the Android Framework. In 2016 IEEE\/ACM 38th International Conference on Software Engineering (ICSE). 725-735 . S. Arzt and E. Bodden. 2016. StubDroid: Automatic Inference of Precise Data-Flow Summaries for the Android Framework. In 2016 IEEE\/ACM 38th International Conference on Software Engineering (ICSE). 725-735."},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594299"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/2771284.2771288"},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/2259051.2259052"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1321631.1321673"},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1926385.1926407"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133892"},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1218063.1217939"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2771783.2771803"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/1765931.1765948"},{"key":"e_1_3_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.48"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382223"},{"key":"e_1_3_2_2_27_1","volume-title":"15th International Symposium on Software Reliability Engineering. 198-209","author":"Masri W.","unstructured":"W. Masri , A. Podgurski , and D. Leon . 2004. Detecting and debugging insecure information flows . In 15th International Symposium on Software Reliability Engineering. 198-209 . W. Masri, A. Podgurski, and D. Leon. 2004. Detecting and debugging insecure information flows. In 15th International Symposium on Software Reliability Engineering. 198-209."},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2007.1020"},{"key":"e_1_3_2_2_29_1","volume-title":"Securibench micro","author":"Livshits B.","year":"2013","unstructured":"B. Livshits . Securibench micro . 2013 . securibench-micro. http:\/\/suif.stanford.edu\/ livshits\/work\/securibench-micro\/. B. Livshits. Securibench micro. 2013. securibench-micro. http:\/\/suif.stanford.edu\/ livshits\/work\/securibench-micro\/."},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/292540.292561"},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/199448.199462"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1178625.1178628"},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3212480.3212506"},{"key":"e_1_3_2_2_34_1","volume-title":"Andromeda: Accurate and Scalable Security Analysis of Web Applications. In Fundamental Approaches to Software Engineering","author":"Tripp Omer","year":"2013","unstructured":"Omer Tripp , Marco Pistoia , Patrick Cousot , Radhia Cousot , and Salvatore Guarnieri . 2013 . Andromeda: Accurate and Scalable Security Analysis of Web Applications. In Fundamental Approaches to Software Engineering . Springer Berlin Heidelberg , Berlin, Heidelberg , 210-225. Omer Tripp, Marco Pistoia, Patrick Cousot, Radhia Cousot, and Salvatore Guarnieri. 2013. Andromeda: Accurate and Scalable Security Analysis of Web Applications. In Fundamental Approaches to Software Engineering. Springer Berlin Heidelberg, Berlin, Heidelberg, 210-225."},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1543135.1542486"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2483760.2483788"},{"key":"e_1_3_2_2_37_1","volume-title":"LeakMiner: Detect Information Leakage on Android with Static Taint Analysis. In 2012 Third World Congress on Software Engineering. 101-104","author":"Yang Z.","unstructured":"Z. Yang and M. Yang . 2012 . LeakMiner: Detect Information Leakage on Android with Static Taint Analysis. In 2012 Third World Congress on Software Engineering. 101-104 . Z. Yang and M. Yang. 2012. LeakMiner: Detect Information Leakage on Android with Static Taint Analysis. In 2012 Third World Congress on Software Engineering. 101-104."}],"event":{"name":"ESEC\/FSE '20: 28th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering","location":"Virtual Event USA","acronym":"ESEC\/FSE '20","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering"]},"container-title":["Proceedings of the 28th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3368089.3417059","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3368089.3417059","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:01:58Z","timestamp":1750197718000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3368089.3417059"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,11,8]]},"references-count":36,"alternative-id":["10.1145\/3368089.3417059","10.1145\/3368089"],"URL":"https:\/\/doi.org\/10.1145\/3368089.3417059","relation":{},"subject":[],"published":{"date-parts":[[2020,11,8]]},"assertion":[{"value":"2020-11-08","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}