{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,13]],"date-time":"2026-08-13T22:42:48Z","timestamp":1786660968406,"version":"3.56.0"},"publisher-location":"New York, NY, USA","reference-count":75,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,5,21]],"date-time":"2022-05-21T00:00:00Z","timestamp":1653091200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Science Foundation of China","award":["61872237"],"award-info":[{"award-number":["61872237"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,5,21]]},"DOI":"10.1145\/3510003.3510150","type":"proceedings-article","created":{"date-parts":[[2022,7,5]],"date-time":"2022-07-05T22:42:59Z","timestamp":1657060979000},"page":"175-186","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":44,"title":["Automated detection of password leakage from public GitHub repositories"],"prefix":"10.1145","author":[{"given":"Runhan","family":"Feng","sequence":"first","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ziyang","family":"Yan","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shiyan","family":"Peng","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuanyuan","family":"Zhang","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,7,5]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"https:\/\/hashes.org\/public.php","author":"Linkedin","year":"2012","unstructured":"Linkedin leaked passwords. https:\/\/hashes.org\/public.php, 2012. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_2_1","volume-title":"https:\/\/it.slashdot.org\/story\/13\/01\/25\/132203\/gimub-kills-search-after-hundreds-of-private-keys-exposed","author":"Github","year":"2013","unstructured":"Github kills search after hundreds of private keys exposed. https:\/\/it.slashdot.org\/story\/13\/01\/25\/132203\/gimub-kills-search-after-hundreds-of-private-keys-exposed, 2013. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_3_1","volume-title":"https:\/\/developers.slashdot.org\/story\/14\/03\/24\/0111203\/aws-urges-devs-to-scrub-secret-keys-from-github","author":"Aws","year":"2014","unstructured":"Aws urges devs to scrub secret keys from github. https:\/\/developers.slashdot.org\/story\/14\/03\/24\/0111203\/aws-urges-devs-to-scrub-secret-keys-from-github, 2014. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_4_1","volume-title":"https:\/\/octoverse.github.com\/","author":"The","year":"2020","unstructured":"The 2020 state of the octoverse. https:\/\/octoverse.github.com\/, 2020. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_5_1","volume-title":"https:\/\/madnight.github.io\/githut\/#\/pull_requests\/2020\/1","author":"Github","year":"2020","unstructured":"Github language stats. https:\/\/madnight.github.io\/githut\/#\/pull_requests\/2020\/1, 2020. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_6_1","volume-title":"https:\/\/medium.com\/heck-the-packet\/how-i-got-my-first-big-bounty-payout-with-tesla-8d28b520162d","author":"How","year":"2020","unstructured":"How i got my first big bounty payout with tesla. https:\/\/medium.com\/heck-the-packet\/how-i-got-my-first-big-bounty-payout-with-tesla-8d28b520162d, 2020. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_7_1","volume-title":"https:\/\/www.theregister.com\/2020\/12\/16\/solarwinds_github_password\/","author":"Solarwinds","year":"2020","unstructured":"Solarwinds github password. https:\/\/www.theregister.com\/2020\/12\/16\/solarwinds_github_password\/, 2020. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_8_1","volume-title":"https:\/\/1password.com\/","year":"2022","unstructured":"1password. https:\/\/1password.com\/, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_9_1","volume-title":"https:\/\/github.com\/about","author":"About","year":"2022","unstructured":"About github. https:\/\/github.com\/about, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_10_1","volume-title":"https:\/\/docs.github.com\/en\/github\/administering-a-repository\/about-secret-scanning","author":"About","year":"2022","unstructured":"About secret scanning. https:\/\/docs.github.com\/en\/github\/administering-a-repository\/about-secret-scanning, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_11_1","volume-title":"https:\/\/source.android.com\/devices\/tech\/dalvik\/dalvik-bytecode","author":"Android","year":"2022","unstructured":"Android dalvik bytecode. https:\/\/source.android.com\/devices\/tech\/dalvik\/dalvik-bytecode, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_12_1","volume-title":"https:\/\/github.com\/PyCQA\/bandit","author":"Bandit","year":"2022","unstructured":"Bandit. https:\/\/github.com\/PyCQA\/bandit, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_13_1","volume-title":"https:\/\/github.com\/danielmiessler\/SecLists\/blob\/master\/Passwords\/Common-Credentials\/10-million-password-list-top-1000.txt","author":"Common","year":"2022","unstructured":"Common-credentials. https:\/\/github.com\/danielmiessler\/SecLists\/blob\/master\/Passwords\/Common-Credentials\/10-million-password-list-top-1000.txt, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_14_1","volume-title":"https:\/\/support.google.com\/accounts\/answer\/32040?hl=en","author":"Creating","year":"2022","unstructured":"Creating a strong password. https:\/\/support.google.com\/accounts\/answer\/32040?hl=en, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_15_1","volume-title":"https:\/\/secdevtools.azurewebsites.net\/helpcredscan.html","author":"Credscan","year":"2022","unstructured":"Credscan. https:\/\/secdevtools.azurewebsites.net\/helpcredscan.html, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_16_1","volume-title":"https:\/\/www.csdn.net\/","year":"2022","unstructured":"csdn. https:\/\/www.csdn.net\/, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_17_1","volume-title":"https:\/\/github.com\/Yelp\/detect-secrets\/releases","author":"Detect","year":"2022","unstructured":"Detect-secrets release version. https:\/\/github.com\/Yelp\/detect-secrets\/releases, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_18_1","volume-title":"https:\/\/github.com\/awslabs\/git-secrets","year":"2022","unstructured":"git-secrets. https:\/\/github.com\/awslabs\/git-secrets, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_19_1","volume-title":"https:\/\/docs.github.com\/en\/github\/searching-for-information-on-github","author":"Github","year":"2022","unstructured":"Github search api. https:\/\/docs.github.com\/en\/github\/searching-for-information-on-github, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_20_1","volume-title":"https:\/\/github.com\/zricethezav\/gitleaks","year":"2022","unstructured":"gitleaks. https:\/\/github.com\/zricethezav\/gitleaks, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_21_1","volume-title":"https:\/\/cloud.google.com\/bigquery","author":"Google","year":"2022","unstructured":"Google bigquery. https:\/\/cloud.google.com\/bigquery, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_22_1","volume-title":"https:\/\/www.keepassx.org\/","author":"Keepassx","year":"2022","unstructured":"Keepassx. https:\/\/www.keepassx.org\/, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_23_1","volume-title":"https:\/\/github.com\/Aoa0\/PassFinder","author":"Passfinder","year":"2022","unstructured":"Passfinder dataset. https:\/\/github.com\/Aoa0\/PassFinder, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_24_1","volume-title":"https:\/\/github.com\/PyGithub\/PyGithub","year":"2022","unstructured":"pygithub. https:\/\/github.com\/PyGithub\/PyGithub, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_25_1","volume-title":"https:\/\/github.com\/eth0izzle\/shhgit","year":"2022","unstructured":"shhgit. https:\/\/github.com\/eth0izzle\/shhgit, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_26_1","volume-title":"https:\/\/github.com\/dxa4481\/truffleHog","author":"Trufflehog","year":"2022","unstructured":"Trufflehog. https:\/\/github.com\/dxa4481\/truffleHog, 2022. [Online; Accessed on 02\/04\/2022]."},{"key":"e_1_3_2_1_27_1","volume-title":"A survey of machine learning for big code and naturalness. ACM Computing Surveys (CSUR) 51, 4","author":"Allamanis M.","year":"2018","unstructured":"Allamanis, M., Barr, E. T., Devanbu, P., and Sutton, C. A survey of machine learning for big code and naturalness. ACM Computing Surveys (CSUR) 51, 4 (2018), 1--37."},{"key":"e_1_3_2_1_28_1","first-page":"2091","volume-title":"International conference on machine learning","author":"Allamanis M.","year":"2016","unstructured":"Allamanis, M., Peng, H., and Sutton, C. A convolutional attention network for extreme summarization of source code. In International conference on machine learning (2016), pp. 2091--2100."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3296979.3192412"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3290353"},{"key":"e_1_3_2_1_31_1","volume-title":"Context2name: A deep learning-based approach to infer natural variable names from usage contexts. arXiv preprint arXiv:1809.05193","author":"Bavishi R.","year":"2018","unstructured":"Bavishi, R., Pradel, M., and Sen, K. Context2name: A deep learning-based approach to infer natural variable names from usage contexts. arXiv preprint arXiv:1809.05193 (2018)."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"crossref","first-page":"343","DOI":"10.1145\/2976749.2978422","volume-title":"Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security","author":"Bich SEL, B.","year":"2016","unstructured":"BichSEL, B., Raychev, V., Tsankov, P., and Vechev, M. Statistical deobfuscation of android applications. In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (2016), pp. 343--355."},{"key":"e_1_3_2_1_33_1","first-page":"2933","volume-title":"International Conference on Machine Learning","author":"Bielik P.","year":"2016","unstructured":"Bielik, P., Raychev, V., and Vechev, M. Phog: probabilistic model for code. In International Conference on Machine Learning (2016), PMLR, pp. 2933--2942."},{"key":"e_1_3_2_1_34_1","volume-title":"Natural language processing with Python: analyzing text with the natural language toolkit. \"O'Reilly Media","author":"Bird S.","year":"2009","unstructured":"Bird, S., Klein, E., and Loper, E. Natural language processing with Python: analyzing text with the natural language toolkit. \"O'Reilly Media, Inc.\", 2009."},{"key":"e_1_3_2_1_35_1","volume-title":"Alternative structures for character-level rnns. arXiv preprint arXiv:1511.06303","author":"Bojanowski P.","year":"2015","unstructured":"Bojanowski, P., Joulin, A., and Mikolov, T. Alternative structures for character-level rnns. arXiv preprint arXiv:1511.06303 (2015)."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23357"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.5555\/648054.743935"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813607"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2012.6224294"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/2902362"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-21568-2_11"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58951-6_34"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2017.7953252"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P16-1195"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380342"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/1143120.1143129"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1177\/0278364904045481"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991102"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.50"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23418"},{"key":"e_1_3_2_1_51_1","first-page":"175","volume-title":"25th USENIX Security Symposium (USENIX Security 16)","author":"Melicher W.","year":"2016","unstructured":"Melicher, W., Ur, B., Segreti, S. M., Komanduri, S., Bauer, L., Christin, N., and Cranor, L. F. Fast, lean, and accurate: Modeling password guessability using neural networks. In 25th USENIX Security Symposium (USENIX Security 16) (2016), pp. 175--191."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/359168.359172"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23092"},{"key":"e_1_3_2_1_54_1","volume-title":"Proc. of USENIX Security Symp","author":"Oesch S.","year":"2020","unstructured":"Oesch, S., and Ruoti, S. That was then, this is now: A security evaluation of password generation, storage, and autofill in browser-based password managers. In Proc. of USENIX Security Symp (2020)."},{"key":"e_1_3_2_1_55_1","volume-title":"Popular ensemble methods: An empirical study. Journal of artificial intelligence research 11","author":"Opitz D.","year":"1999","unstructured":"Opitz, D., and Maclin, R. Popular ensemble methods: An empirical study. Journal of artificial intelligence research 11 (1999), 169--198."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00056"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58951-6_25"},{"key":"e_1_3_2_1_58_1","volume-title":"NIPS-W","author":"Paszke A.","year":"2017","unstructured":"Paszke, A., Gross, S., Chintala, S., Chanan, G., Yang, E., DeVito, Z., Lin, Z., Desmaison, A., Antiga, L., and Lerer, A. Automatic differentiation in pytorch. In NIPS-W (2017)."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133973"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.5555\/1953048.2078195"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/3395363.3397356"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00033"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2019.00087"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3022671.2984041"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/2914770.2837671"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/3306204"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2015.48"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106289"},{"key":"e_1_3_2_1_69_1","first-page":"1537","volume-title":"28th USENIX Security Symposium","author":"Wang D.","year":"2019","unstructured":"Wang, D., Wang, P., He, D., and Tian, Y. Birthday, name and bifacial-security: understanding passwords of chinese web users. In 28th USENIX Security Symposium (2019), pp. 1537--1555."},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866327"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.8"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i01.5466"},{"key":"e_1_3_2_1_73_1","first-page":"33","article-title":"Codecmr: Cross-modal retrieval for function-level binary source code matching","author":"Yu Z.","year":"2020","unstructured":"Yu, Z., Zheng, W., Wang, J., Tang, Q., Nie, S., and Wu, S. Codecmr: Cross-modal retrieval for function-level binary source code matching. Advances in Neural Information Processing Systems 33 (2020).","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_74_1","volume-title":"Character-level convolutional networks for text classification. arXiv preprint arXiv:1509.01626","author":"Zhang X.","year":"2015","unstructured":"Zhang, X., Zhao, J., and LeCun, Y. Character-level convolutional networks for text classification. arXiv preprint arXiv:1509.01626 (2015)."},{"key":"e_1_3_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.1145\/2766498.2766499"}],"event":{"name":"ICSE '22: 44th International Conference on Software Engineering","location":"Pittsburgh Pennsylvania","acronym":"ICSE '22","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS"]},"container-title":["Proceedings of the 44th International Conference on Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3510003.3510150","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3510003.3510150","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:10:24Z","timestamp":1750183824000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3510003.3510150"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5,21]]},"references-count":75,"alternative-id":["10.1145\/3510003.3510150","10.1145\/3510003"],"URL":"https:\/\/doi.org\/10.1145\/3510003.3510150","relation":{},"subject":[],"published":{"date-parts":[[2022,5,21]]},"assertion":[{"value":"2022-07-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}