{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,18]],"date-time":"2026-03-18T14:17:36Z","timestamp":1773843456748,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":46,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,8,18]],"date-time":"2021-08-18T00:00:00Z","timestamp":1629244800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,8,20]]},"DOI":"10.1145\/3468264.3473934","type":"proceedings-article","created":{"date-parts":[[2021,8,19]],"date-time":"2021-08-19T01:40:20Z","timestamp":1629337220000},"page":"1416-1426","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":12,"title":["RAPID: checking API usage for the cloud in the cloud"],"prefix":"10.1145","author":[{"given":"Michael","family":"Emmi","sequence":"first","affiliation":[{"name":"Amazon Web Services, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Liana","family":"Hadarean","sequence":"additional","affiliation":[{"name":"Amazon Web Services, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ranjit","family":"Jhala","sequence":"additional","affiliation":[{"name":"Amazon Web Services, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lee","family":"Pike","sequence":"additional","affiliation":[{"name":"Amazon Web Services, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nicol\u00e1s","family":"Rosner","sequence":"additional","affiliation":[{"name":"Amazon Web Services, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martin","family":"Sch\u00e4f","sequence":"additional","affiliation":[{"name":"Amazon Web Services, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Aritra","family":"Sengupta","sequence":"additional","affiliation":[{"name":"Amazon Web Services, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Willem","family":"Visser","sequence":"additional","affiliation":[{"name":"Amazon Web Services, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2021,8,18]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"[n.d.]. Amazon CodeGuru. https:\/\/aws.amazon.com\/codeguru  [n.d.]. Amazon CodeGuru. https:\/\/aws.amazon.com\/codeguru"},{"key":"e_1_3_2_1_2_1","unstructured":"[n.d.]. Amazon CodeGuru Reviewer. https:\/\/docs.aws.amazon.com\/codeguru\/latest\/reviewer-ug\/welcome.html  [n.d.]. Amazon CodeGuru Reviewer. https:\/\/docs.aws.amazon.com\/codeguru\/latest\/reviewer-ug\/welcome.html"},{"key":"e_1_3_2_1_3_1","unstructured":"[n.d.]. Amazon S3 PutObject API. https:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/API\/API_PutObject.html  [n.d.]. Amazon S3 PutObject API. https:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/API\/API_PutObject.html"},{"key":"e_1_3_2_1_4_1","unstructured":"[n.d.]. Amazon Simple Storage Service (Amazon S3). https:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/userguide\/Welcome.html  [n.d.]. Amazon Simple Storage Service (Amazon S3). https:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/userguide\/Welcome.html"},{"key":"e_1_3_2_1_5_1","unstructured":"[n.d.]. Cross Site Scripting (XSS). https:\/\/owasp.org\/www-community\/attacks\/xss\/  [n.d.]. Cross Site Scripting (XSS). https:\/\/owasp.org\/www-community\/attacks\/xss\/"},{"key":"e_1_3_2_1_6_1","unstructured":"[n.d.]. CWE-244: Improper Clearing of Heap Memory Before Release (\u2019Heap Inspection\u2019). https:\/\/cwe.mitre.org\/data\/definitions\/244.html  [n.d.]. CWE-244: Improper Clearing of Heap Memory Before Release (\u2019Heap Inspection\u2019). https:\/\/cwe.mitre.org\/data\/definitions\/244.html"},{"key":"e_1_3_2_1_7_1","unstructured":"[n.d.]. CWE: Common Weakness Enumeration. https:\/\/cwe.mitre.org  [n.d.]. CWE: Common Weakness Enumeration. https:\/\/cwe.mitre.org"},{"key":"e_1_3_2_1_8_1","unstructured":"[n.d.]. Denial of Service (DoS) attack. https:\/\/owasp.org\/www-community\/attacks\/Denial_of_Service  [n.d.]. Denial of Service (DoS) attack. https:\/\/owasp.org\/www-community\/attacks\/Denial_of_Service"},{"key":"e_1_3_2_1_9_1","unstructured":"[n.d.]. Error Prone. https:\/\/errorprone.info\/  [n.d.]. Error Prone. https:\/\/errorprone.info\/"},{"key":"e_1_3_2_1_10_1","unstructured":"[n.d.]. Heros IFDS\/IDE Solver. https:\/\/github.com\/Sable\/heros  [n.d.]. Heros IFDS\/IDE Solver. https:\/\/github.com\/Sable\/heros"},{"key":"e_1_3_2_1_11_1","unstructured":"[n.d.]. Maven Central Repository. https:\/\/maven.apache.org\/  [n.d.]. Maven Central Repository. https:\/\/maven.apache.org\/"},{"key":"e_1_3_2_1_12_1","unstructured":"[n.d.]. OpenAPI Specification. https:\/\/swagger.io\/specification\/  [n.d.]. OpenAPI Specification. https:\/\/swagger.io\/specification\/"},{"key":"e_1_3_2_1_13_1","unstructured":"[n.d.]. OWASP Benchmark: The OWASP Benchmark Project. https:\/\/owasp.org\/www-project-benchmark  [n.d.]. OWASP Benchmark: The OWASP Benchmark Project. https:\/\/owasp.org\/www-project-benchmark"},{"key":"e_1_3_2_1_14_1","unstructured":"[n.d.]. OWASP Benchmark: Trust Boundary Violation (CWE 501) Not Exploitable. https:\/\/github.com\/OWASP\/Benchmark\/issues\/43  [n.d.]. OWASP Benchmark: Trust Boundary Violation (CWE 501) Not Exploitable. https:\/\/github.com\/OWASP\/Benchmark\/issues\/43"},{"key":"e_1_3_2_1_15_1","unstructured":"[n.d.]. OWASP XXE: OWASP Cheat Sheet Series. https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/XML_External_Entity_Prevention_Cheat_Sheet.html  [n.d.]. OWASP XXE: OWASP Cheat Sheet Series. https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/XML_External_Entity_Prevention_Cheat_Sheet.html"},{"key":"e_1_3_2_1_16_1","unstructured":"[n.d.]. SWAMP: Software Assurance Marketplace. https:\/\/continuousassurance.org\/swamp-in-a-box\/  [n.d.]. SWAMP: Software Assurance Marketplace. https:\/\/continuousassurance.org\/swamp-in-a-box\/"},{"key":"e_1_3_2_1_17_1","unstructured":"[n.d.]. The Checker Framework. https:\/\/checkerframework.org\/  [n.d.]. The Checker Framework. https:\/\/checkerframework.org\/"},{"key":"e_1_3_2_1_18_1","unstructured":"[n.d.]. T.J. Watson Libraries for Analysis. http:\/\/wala.sourceforge.net\/wiki\/index.php\/Main_Page  [n.d.]. T.J. Watson Libraries for Analysis. http:\/\/wala.sourceforge.net\/wiki\/index.php\/Main_Page"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3385412.3386026"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2666356.2594299"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24756-2_1"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-27864-1_2"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/2259051.2259052"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1640089.1640108"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1002\/(SICI)1097-024X(200006)30:7<775::AID-SPE309>3.0.CO;2-H"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-20398-5_33"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2049697.2049700"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-2009-0393"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.5555\/646153.679523"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3338112"},{"key":"e_1_3_2_1_31_1","volume-title":"Programmer-Written Compiler Extensions. In 4th Symposium on Operating System Design and Implementation (OSDI 2000","author":"Engler Dawson R.","year":"2000","unstructured":"Dawson R. Engler , Benjamin Chelf , Andy Chou , and Seth Hallem . 2000 . Checking System Rules Using System-Specific , Programmer-Written Compiler Extensions. In 4th Symposium on Operating System Design and Implementation (OSDI 2000 ), San Diego, California, USA , October 23-25, 2000, Michael B. Jones and M. Frans Kaashoek (Eds.). USENIX Association, 1\u201316. http:\/\/dl.acm.org\/citation.cfm?id=1251230 Dawson R. Engler, Benjamin Chelf, Andy Chou, and Seth Hallem. 2000. Checking System Rules Using System-Specific, Programmer-Written Compiler Extensions. In 4th Symposium on Operating System Design and Implementation (OSDI 2000), San Diego, California, USA, October 23-25, 2000, Michael B. Jones and M. Frans Kaashoek (Eds.). USENIX Association, 1\u201316. http:\/\/dl.acm.org\/citation.cfm?id=1251230"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/195274.195297"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028664.1028717"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2017.8115707"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.4230\/LIPIcs.ECOOP.2018.10"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1094811.1094840"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.5555\/2818754.2818828"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1016\/0304-3975(96)00072-2"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3290361"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.4230\/LIPIcs.ECOOP.2016.22"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1986.6312929"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37057-1_15"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542486"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.5555\/781995.782008"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.5555\/647476.727758"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/996841.996859"}],"event":{"name":"ESEC\/FSE '21: 29th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering","location":"Athens Greece","acronym":"ESEC\/FSE '21","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering"]},"container-title":["Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3468264.3473934","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3468264.3473934","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:17:23Z","timestamp":1750191443000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3468264.3473934"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,8,18]]},"references-count":46,"alternative-id":["10.1145\/3468264.3473934","10.1145\/3468264"],"URL":"https:\/\/doi.org\/10.1145\/3468264.3473934","relation":{},"subject":[],"published":{"date-parts":[[2021,8,18]]},"assertion":[{"value":"2021-08-18","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}