{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T03:36:32Z","timestamp":1778211392846,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":67,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100010661","name":"Horizon 2020 Framework Programme","doi-asserted-by":"publisher","award":["101019206"],"award-info":[{"award-number":["101019206"]}],"id":[{"id":"10.13039\/100010661","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,7]]},"DOI":"10.1145\/3634737.3637647","type":"proceedings-article","created":{"date-parts":[[2024,6,28]],"date-time":"2024-06-28T11:51:38Z","timestamp":1719575498000},"page":"814-829","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Towards Understanding and Improving Security-Relevant Web Application Logging"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-4798-0601","authenticated-orcid":false,"given":"Merve","family":"Sahin","sequence":"first","affiliation":[{"name":"SAP Security Research, Mougins, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-2233-9752","authenticated-orcid":false,"given":"Noemi","family":"Daniele","sequence":"additional","affiliation":[{"name":"SAP Security Research, Mougins, French Guiana"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,7]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"alf.io. https:\/\/github.com\/alfio-event\/alf.io\/."},{"key":"e_1_3_2_1_2_1","unstructured":"carbon-identity-framework. https:\/\/github.com\/wso2\/carbon-identity-framework."},{"key":"e_1_3_2_1_3_1","unstructured":"coprhd-controller. https:\/\/github.com\/CoprHD\/coprhd-controller."},{"key":"e_1_3_2_1_4_1","unstructured":"jhipsterHazelcastSampleApplication. https:\/\/github.com\/jhipster\/jhipster-sample-app-hazelcast."},{"key":"e_1_3_2_1_5_1","unstructured":"Scoold - Stack Overflow in a JAR. https:\/\/github.com\/Erudika\/scoold\/."},{"key":"e_1_3_2_1_6_1","volume-title":"https:\/\/gdpr.eu\/","author":"Complete","year":"2022","unstructured":"Complete guide to GDPR compliance. https:\/\/gdpr.eu\/, 2022."},{"key":"e_1_3_2_1_7_1","unstructured":"Apache sling - bringing back the fun! https:\/\/sling.apache.org\/ 2023."},{"key":"e_1_3_2_1_8_1","volume-title":"https:\/\/vaadin.com\/","author":"Build","year":"2023","unstructured":"Build java web applications faster with vaadin. https:\/\/vaadin.com\/, 2023."},{"key":"e_1_3_2_1_9_1","volume-title":"DECEMBER","author":"Australian Cyber Security Center","year":"2021","unstructured":"Australian Cyber Security Center. Information Security Manual. https:\/\/www.cyber.gov.au\/resources-business-and-government\/essential-cyber-security\/ism, DECEMBER 2021."},{"key":"e_1_3_2_1_10_1","volume-title":"July","author":"Cloud Controls Matrix Working Group","year":"2021","unstructured":"Cloud Controls Matrix Working Group, Cloud Security Alliance. Cloud Controls Matrix v4.0.5. https:\/\/cloudsecurityalliance.org\/artifacts\/cloud-controls-matrix-v4\/, July 2021."},{"key":"e_1_3_2_1_11_1","volume-title":"April","author":"RAMP.","year":"2018","unstructured":"FedRAMP. FedRAMP Continuous Monitoring Strategy Guide Version 3.2. https:\/\/www.fedramp.gov\/assets\/resources\/documents\/CSP_Continuous_Monitoring_Strategy_Guide.pdf, April 2018."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1109\/SecDev.2016.013","volume-title":"Either: A Research Agenda for Usable Security and Privacy Research Beyond End Users. In 2016 IEEE Cybersecurity Development (SecDev)","author":"Acar Yasemin","year":"2016","unstructured":"Yasemin Acar, Sascha Fahl, and Michelle L Mazurek. You are Not Your Developer, Either: A Research Agenda for Usable Security and Privacy Research Beyond End Users. In 2016 IEEE Cybersecurity Development (SecDev), pages 3--8. IEEE, 2016."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"crossref","first-page":"139","DOI":"10.1007\/978-3-662-49635-0_8","volume-title":"Principles of Security and Trust","author":"Amir-Mohammadian Sepehr","year":"2016","unstructured":"Sepehr Amir-Mohammadian, Stephen Chong, and Christian Skalka. Correct audit logging: Theory and practice. In Frank Piessens and Luca Vigan\u00f2, editors, Principles of Security and Trust, pages 139--162, Berlin, Heidelberg, 2016. Springer Berlin Heidelberg."},{"key":"e_1_3_2_1_14_1","first-page":"887","volume-title":"Proceedings of the 26th International Conference on World Wide Web, WWW '17","author":"Bates Adam","year":"2017","unstructured":"Adam Bates, Wajih Ul Hassan, Kevin Butler, Alin Dobra, Bradley Reaves, Patrick Cable, Thomas Moyer, and Nabil Schear. Transparent web service auditing via network provenance functions. In Proceedings of the 26th International Conference on World Wide Web, WWW '17, page 887--895, 2017."},{"key":"e_1_3_2_1_15_1","volume-title":"https:\/\/docs.spring.io\/spring-security\/site\/docs\/3.1.x\/reference\/springsecurity-single.html","author":"Ben Alex Luke Taylor","year":"2022","unstructured":"Luke Taylor Ben Alex. Spring Security. https:\/\/docs.spring.io\/spring-security\/site\/docs\/3.1.x\/reference\/springsecurity-single.html, 2022."},{"key":"e_1_3_2_1_16_1","volume-title":"Most popular programming languages. https:\/\/99firms.com\/blog\/most-popular-programming-languages\/#gref","author":"Blagojevi\u0107 Ivan","year":"2023","unstructured":"Ivan Blagojevi\u0107. Most popular programming languages. https:\/\/99firms.com\/blog\/most-popular-programming-languages\/#gref, 2023."},{"key":"e_1_3_2_1_17_1","volume-title":"Proceedings - 2021 IEEE\/ACM 18th International Conference on Mining Software Repositories, MSR 2021","author":"C\u00e2ndido Jeanderson","year":"2021","unstructured":"Jeanderson C\u00e2ndido, Jan Haesen, Maur\u00edcio Aniche, and Arie van Deursen. An exploratory study of log placement recommendation in an enterprise system. Proceedings - 2021 IEEE\/ACM 18th International Conference on Mining Software Repositories, MSR 2021, 2021."},{"key":"e_1_3_2_1_18_1","volume-title":"Replication package. https:\/\/www.eecs.yorku.ca\/~chenfsd\/resources\/icse2020_replication.zip","author":"Chen Boyuan","year":"2020","unstructured":"Boyuan Chen and Zhen Ming Jiang. Replication package. https:\/\/www.eecs.yorku.ca\/~chenfsd\/resources\/icse2020_replication.zip, 2020. Accessed: 02\/02\/2023."},{"key":"e_1_3_2_1_19_1","first-page":"397","volume-title":"2020 IEEE\/ACM 42nd International Conference on Software Engineering (ICSE)","author":"Chen Boyuan","year":"2020","unstructured":"Boyuan Chen and Zhen Ming Jiang. Studying the use of java logging utilities in the wild. In 2020 IEEE\/ACM 42nd International Conference on Software Engineering (ICSE), pages 397--408. IEEE, 2020."},{"issue":"1","key":"e_1_3_2_1_20_1","doi-asserted-by":"crossref","first-page":"330","DOI":"10.1007\/s10664-016-9429-5","article-title":"Characterizing logging practices in java-based open source software projects-a replication study in apache software foundation","volume":"22","author":"Chen Boyuan","year":"2017","unstructured":"Boyuan Chen and Zhen Ming Jack Jiang. Characterizing logging practices in java-based open source software projects-a replication study in apache software foundation. Empirical Software Engineering, 22(1):330--374, 2017.","journal-title":"Empirical Software Engineering"},{"key":"e_1_3_2_1_21_1","volume-title":"Logging and Log Management: The Authoritative Guide to Understanding the Concepts Surrounding Logging and Log Management","author":"Chuvakin A.","year":"2012","unstructured":"A. Chuvakin, K. Schmidt, and C. Phillips. Logging and Log Management: The Authoritative Guide to Understanding the Concepts Surrounding Logging and Log Management. Elsevier Science, 2012."},{"issue":"3","key":"e_1_3_2_1_22_1","doi-asserted-by":"crossref","first-page":"82","DOI":"10.1109\/MSP.2009.70","article-title":"Logging in the age of web services","volume":"7","author":"Chuvakin Anton","year":"2009","unstructured":"Anton Chuvakin and Gunnar Peterson. Logging in the age of web services. IEEE Security Privacy, 7(3):82--85, 2009.","journal-title":"IEEE Security Privacy"},{"issue":"4","key":"e_1_3_2_1_23_1","doi-asserted-by":"crossref","first-page":"82","DOI":"10.1109\/MSP.2010.127","article-title":"How to do application logging right","volume":"8","author":"Chuvakin Anton","year":"2010","unstructured":"Anton Chuvakin and Gunnar Peterson. How to do application logging right. IEEE Security Privacy, 8(4):82--85, 2010.","journal-title":"IEEE Security Privacy"},{"key":"e_1_3_2_1_24_1","volume-title":"https:\/\/guides.codepath.com\/websecurity\/Username-Enumeration","author":"Enumeration Username","year":"2023","unstructured":"CodePath. Username Enumeration. https:\/\/guides.codepath.com\/websecurity\/Username-Enumeration, 2023. Accessed: 12\/01\/2023."},{"key":"e_1_3_2_1_25_1","first-page":"24","volume-title":"Companion Proceedings of the 36th International Conference on Software Engineering","author":"Fu Qiang","year":"2014","unstructured":"Qiang Fu, Jieming Zhu, Wenlu Hu, Jian-Guang Lou, Rui Ding, Qingwei Lin, Dongmei Zhang, and Tao Xie. Where do developers log? an empirical study on logging practices in industry. In Companion Proceedings of the 36th International Conference on Software Engineering, page 24--33, New York, NY, USA, 2014."},{"key":"e_1_3_2_1_26_1","volume-title":"https:\/\/github.com\/ghaffarian\/progex","author":"Ghaffarian Seyed Mohammad","year":"2019","unstructured":"Seyed Mohammad Ghaffarian. PROGEX (Program Graph Extractor). https:\/\/github.com\/ghaffarian\/progex, 2019."},{"key":"e_1_3_2_1_27_1","volume-title":"A comprehensive survey of logging in software: From logging statements automation to log mining and analysis","author":"Gholamian Sina","year":"2022","unstructured":"Sina Gholamian and Paul Ward. A comprehensive survey of logging in software: From logging statements automation to log mining and analysis. June 2022."},{"key":"e_1_3_2_1_28_1","volume-title":"MARCH","author":"Goodspeed Lindsay","year":"2022","unstructured":"Lindsay Goodspeed. PCI DSS v4.0 Resource Hub. https:\/\/blog.pcisecuritystandards.org\/pci-dss-v4-0-resource-hub, MARCH 2022."},{"key":"e_1_3_2_1_29_1","volume-title":"NDSS","author":"Hassan Wajih Ul","year":"2020","unstructured":"Wajih Ul Hassan, Mohammad A. Noureddine, Pubali Datta, and Adam Bates. Omegalog: High-fidelity attack investigation via transparent multi-layer log analysis. In NDSS, 2020."},{"key":"e_1_3_2_1_30_1","volume-title":"July","author":"He Shilin","year":"2021","unstructured":"Shilin He, Pinjia He, Zhuangbin Chen, Tianyi Yang, Yuxin Su, and Michael R. Lyu. A survey on automated log analysis for reliability engineering. ACM Comput. Surv., 54(6), July 2021."},{"key":"e_1_3_2_1_31_1","volume-title":"iso27017https:\/\/www.iso.org\/standard\/43757.html","author":"IEC.","year":"2015","unstructured":"ISO\/IEC. ISO\/IEC 27017:2015 Information technology --- Security techniques --- Code of practice for information security controls based on ISO\/IEC 27002 for cloud services. iso27017https:\/\/www.iso.org\/standard\/43757.html, 2015. Accessed: 08\/03\/2022."},{"key":"e_1_3_2_1_32_1","volume-title":"cybersecurity and privacy protection --- Information security controls. https:\/\/www.iso.org\/standard\/75652.html","author":"IEC.","year":"2022","unstructured":"ISO\/IEC. ISO\/IEC 27002:2022 Information security, cybersecurity and privacy protection --- Information security controls. https:\/\/www.iso.org\/standard\/75652.html, 2022. Accessed: 15\/05\/2022."},{"key":"e_1_3_2_1_33_1","volume-title":"Mod Security Handbook: Getting Started - Audit Log. https:\/\/www.feistyduck.com\/library\/modsecurity-handbook-free\/online\/ch04-logging.html","author":"Risti\u0107 Ivan","year":"2017","unstructured":"Ivan Risti\u0107. Mod Security Handbook: Getting Started - Audit Log. https:\/\/www.feistyduck.com\/library\/modsecurity-handbook-free\/online\/ch04-logging.html, 2017. Accessed: 05\/01\/2023."},{"key":"e_1_3_2_1_34_1","volume-title":"NIST SP 800-92 guide to computer security log management. https:\/\/csrc.nist.gov\/publications\/detail\/sp\/800-92\/final","author":"Karen Kent Murugiah Souppaya","year":"2006","unstructured":"Murugiah Souppaya Karen Kent. NIST SP 800-92 guide to computer security log management. https:\/\/csrc.nist.gov\/publications\/detail\/sp\/800-92\/final, 2006. Accessed: 15\/05\/2022."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"crossref","first-page":"1419","DOI":"10.1109\/ICSE.2013.6606732","volume-title":"2013 35th International Conference on Software Engineering (ICSE)","author":"King Jason","year":"2013","unstructured":"Jason King. Measuring the forensic-ability of audit logs for nonrepudiation. In 2013 35th International Conference on Software Engineering (ICSE), pages 1419--1422, 2013."},{"key":"e_1_3_2_1_36_1","first-page":"1","volume-title":"Proceedings of the 2015 Symposium and Bootcamp on the Science of Security","author":"King Jason","year":"2015","unstructured":"Jason King, Rahul Pandita, and Laurie Williams. Enabling forensics by proposing heuristics to identify mandatory log events. In Proceedings of the 2015 Symposium and Bootcamp on the Science of Security, pages 1--11, 2015."},{"key":"e_1_3_2_1_37_1","volume-title":"2013 USENIX Workshop on Health Information Technologies (HealthTech 13)","author":"King Jason","year":"2013","unstructured":"Jason King and Laurie Williams. Cataloging and comparing logging mechanism specifications for electronic health record systems. In 2013 USENIX Workshop on Health Information Technologies (HealthTech 13), Washington, D.C., August 2013. USENIX Association."},{"key":"e_1_3_2_1_38_1","first-page":"1","volume-title":"Proceedings of the 2014 Symposium and Bootcamp on the Science of Security","author":"King Jason","year":"2014","unstructured":"Jason King and Laurie Williams. Log your crud: design principles for software logging mechanisms. In Proceedings of the 2014 Symposium and Bootcamp on the Science of Security, pages 1--10, 2014."},{"key":"e_1_3_2_1_39_1","volume-title":"Understanding logging levels: What they are & how to use them. https:\/\/sematext.com\/blog\/logging-levels\/","author":"Ku\u0107 Rafal","year":"2022","unstructured":"Rafal Ku\u0107. Understanding logging levels: What they are & how to use them. https:\/\/sematext.com\/blog\/logging-levels\/, 2022."},{"key":"e_1_3_2_1_40_1","volume-title":"FedRAMP Weekly Tips And Cues -","author":"Raulston-Sloderbeck LaTisha","year":"2018","unstructured":"LaTisha Raulston-Sloderbeck. FedRAMP Weekly Tips And Cues - November 14, 2018. https:\/\/cfocussoftware.com\/office-365-government\/fedramp-weekly-tipscues-november-14-2018\/, November 2018."},{"key":"e_1_3_2_1_41_1","volume-title":"20th Annual Network and Distributed System Security Symposium, NDSS 2013","author":"Lee Kyu Hyung","year":"2013","unstructured":"Kyu Hyung Lee, Xiangyu Zhang, and Dongyan Xu. High accuracy attack provenance via binary-based execution partition. In 20th Annual Network and Distributed System Security Symposium, NDSS 2013, San Diego, California, USA, February 24-27, 2013. The Internet Society, 2013."},{"issue":"5","key":"e_1_3_2_1_42_1","doi-asserted-by":"crossref","first-page":"2655","DOI":"10.1007\/s10664-018-9595-8","article-title":"Studying software logging using topic models","volume":"23","author":"Li Heng","year":"2018","unstructured":"Heng Li, Tse-Hsun Peter Chen, Weiyi Shang, and Ahmed E Hassan. Studying software logging using topic models. Empirical Software Engineering, 23(5):2655--2694, 2018.","journal-title":"Empirical Software Engineering"},{"key":"e_1_3_2_1_43_1","volume-title":"23rd Annual Network and Distributed System Security Symposium, NDSS 2016","author":"Ma Shiqing","year":"2016","unstructured":"Shiqing Ma, Xiangyu Zhang, and Dongyan Xu. Protracer: Towards practical provenance tracing by alternating between logging and tainting. In 23rd Annual Network and Distributed System Security Symposium, NDSS 2016, San Diego, California, USA, February 21-24, 2016. The Internet Society, 2016."},{"key":"e_1_3_2_1_44_1","volume-title":"NIST special publication 800-series general information. https:\/\/www.nist.gov\/itl\/publications-0\/nist-special-publication-800-series-general-information","author":"NIST.","year":"2018","unstructured":"NIST. NIST special publication 800-series general information. https:\/\/www.nist.gov\/itl\/publications-0\/nist-special-publication-800-series-general-information, 2018. Accessed: 15\/05\/2022."},{"key":"e_1_3_2_1_45_1","volume-title":"NIST SP 800-53 rev.5 security and privacy controls for information systems and organizations. https:\/\/csrc.nist.gov\/publications\/detail\/sp\/800-53\/rev-5\/final","author":"NIST Joint Task Force","year":"2020","unstructured":"NIST Joint Task Force. NIST SP 800-53 rev.5 security and privacy controls for information systems and organizations. https:\/\/csrc.nist.gov\/publications\/detail\/sp\/800-53\/rev-5\/final, 2020. Accessed: 15\/05\/2022."},{"key":"e_1_3_2_1_46_1","volume-title":"2021. https:\/\/owasp.org\/Top10\/","author":"OWASP. OWASP","year":"2021","unstructured":"OWASP. OWASP Top 10:2021. https:\/\/owasp.org\/Top10\/, 2021. Accessed: 15\/02\/2022."},{"key":"e_1_3_2_1_47_1","volume-title":"OWASP ModSecurity Core Rule Set. https:\/\/coreruleset.org\/","author":"OWASP.","year":"2023","unstructured":"OWASP. OWASP ModSecurity Core Rule Set. https:\/\/coreruleset.org\/, 2023. Accessed: 05\/01\/2023."},{"key":"e_1_3_2_1_48_1","volume-title":"Web Parameter Tampering. https:\/\/owasp.org\/www-community\/attacks\/Web_Parameter_Tampering","author":"OWASP.","year":"2023","unstructured":"OWASP. Web Parameter Tampering. https:\/\/owasp.org\/www-community\/attacks\/Web_Parameter_Tampering, 2023. Accessed: 12\/01\/2023."},{"key":"e_1_3_2_1_49_1","volume-title":"Logging Cheat Sheet. https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/Logging_Cheat_Sheet.html","author":"CheatSheets Series Team OWASP","year":"2021","unstructured":"OWASP CheatSheets Series Team. Logging Cheat Sheet. https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/Logging_Cheat_Sheet.html, 2021. Accessed: 04\/07\/2022."},{"key":"e_1_3_2_1_50_1","volume-title":"https:\/\/owasp.org\/Top10\/A03_2021-Injection\/","author":"Team OWASP","year":"2021","unstructured":"OWASP Top 10 Team. A03:2021 - Injection. https:\/\/owasp.org\/Top10\/A03_2021-Injection\/, 2021. Accessed: 04\/07\/2022."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"crossref","first-page":"9","DOI":"10.1145\/3183399.3183426","volume-title":"Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results, ICSE-NIER '18","author":"Pasquale Liliana","year":"2018","unstructured":"Liliana Pasquale, Dalal Alrajeh, Claudia Peersman, Thein Tun, Bashar Nuseibeh, and Awais Rashid. Towards forensic-ready software systems. In Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results, ICSE-NIER '18, page 9--12. Association for Computing Machinery, 2018."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"crossref","first-page":"169","DOI":"10.1109\/ICSE.2015.145","volume-title":"2015 IEEE\/ACM 37th IEEE International Conference on Software Engineering","volume":"2","author":"Pecchia Antonio","year":"2015","unstructured":"Antonio Pecchia, Marcello Cinque, Gabriella Carrozza, and Domenico Cotroneo. Industry practices and event logging: Assessment of a critical software development process. In 2015 IEEE\/ACM 37th IEEE International Conference on Software Engineering, volume 2, pages 169--178, 2015."},{"key":"e_1_3_2_1_53_1","volume-title":"Access control vulnerabilities and privilege escalation. https:\/\/portswigger.net\/web-security\/access-control","year":"2023","unstructured":"PortSwigger. Access control vulnerabilities and privilege escalation. https:\/\/portswigger.net\/web-security\/access-control, 2023. Accessed: 02\/01\/2023."},{"key":"e_1_3_2_1_54_1","volume-title":"Business logic vulnerabilities. https:\/\/portswigger.net\/web-security\/logic-flaws","year":"2023","unstructured":"PortSwigger. Business logic vulnerabilities. https:\/\/portswigger.net\/web-security\/logic-flaws, 2023. Accessed: 02\/01\/2023."},{"key":"e_1_3_2_1_55_1","volume-title":"XML external entity (XXE) injection. https:\/\/portswigger.net\/web-security\/xxe","year":"2023","unstructured":"PortSwigger. XML external entity (XXE) injection. https:\/\/portswigger.net\/web-security\/xxe, 2023. Accessed: 02\/01\/2023."},{"key":"e_1_3_2_1_56_1","unstructured":"QOS.CH. Simple Logging Facade for Java (SLF4J). https:\/\/www.slf4j.org\/."},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"crossref","first-page":"183","DOI":"10.1109\/RE.2014.6912260","volume-title":"2014 IEEE 22nd International Requirements Engineering Conference (RE)","author":"Riaz Maria","year":"2014","unstructured":"Maria Riaz, Jason King, John Slankas, and Laurie Williams. Hidden in plain sight: Automatically identifying security requirements from natural language artifacts. In 2014 IEEE 22nd International Requirements Engineering Conference (RE), pages 183--192, 2014."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"crossref","first-page":"157","DOI":"10.1109\/REW.2019.00033","volume-title":"2019 IEEE 27th International Requirements Engineering Conference Workshops (REW)","author":"Rivera-Ortiz Fanny","year":"2019","unstructured":"Fanny Rivera-Ortiz and Liliana Pasquale. Towards automated logging for forensic-ready software systems. In 2019 IEEE 27th International Requirements Engineering Conference Workshops (REW), pages 157--163, 2019."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"crossref","first-page":"855","DOI":"10.1109\/ICSE48619.2023.00080","volume-title":"2023 IEEE\/ACM 45th International Conference on Software Engineering (ICSE)","author":"Rong Guoping","year":"2023","unstructured":"Guoping Rong, Shenghui Gu, Haifeng Shen, He Zhang, and Hongyu Kuang. How do developers' profiles and experiences influence their logging practices? an empirical study of industrial practitioners. In 2023 IEEE\/ACM 45th International Conference on Software Engineering (ICSE), pages 855--867, 2023."},{"key":"e_1_3_2_1_60_1","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Shen Bingyu","year":"2023","unstructured":"Bingyu Shen, Tianyi Shan, and Yuanyuan Zhou. Improving logging to reduce permission over-granting mistakes. In 32nd USENIX Security Symposium (USENIX Security 23). USENIX Association, August 2023."},{"key":"e_1_3_2_1_61_1","volume-title":"Top Programming Languages","author":"Stephen Cass Erico Guizzo","year":"2022","unstructured":"Erico Guizzo Stephen Cass, Preeti Kulkarni. Top Programming Languages 2022. https:\/\/spectrum.ieee.org\/top-programming-languages-2022\/, 2022."},{"key":"e_1_3_2_1_62_1","volume-title":"Tiobe index for march","author":"TIOBE.","year":"2023","unstructured":"TIOBE. Tiobe index for march 2023. https:\/\/www.tiobe.com\/tiobe-index\/, 2023."},{"key":"e_1_3_2_1_63_1","volume-title":"Jan","author":"U.S. Department of Health & Human Services.","year":"2013","unstructured":"U.S. Department of Health & Human Services. The HIPAA The Security Rule. https:\/\/www.hhs.gov\/hipaa\/for-professionals\/security\/index.html, Jan 2013."},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"crossref","first-page":"102","DOI":"10.1109\/ICSE.2012.6227202","volume-title":"2012 34th International Conference on Software Engineering (ICSE)","author":"Yuan Ding","year":"2012","unstructured":"Ding Yuan, Soyeon Park, and Yuanyuan Zhou. Characterizing logging practices in open-source software. In 2012 34th International Conference on Software Engineering (ICSE), pages 102--112, 2012."},{"key":"e_1_3_2_1_65_1","volume-title":"NDSS","author":"Zeng Jun","year":"2021","unstructured":"Jun Zeng, Zheng Leong Chua, Yinfang Chen, Kaihang Ji, Zhenkai Liang, and Jian Mao. Watson: Abstracting behaviors from audit logs via aggregation of contextual semantics. In NDSS, 2021."},{"key":"e_1_3_2_1_66_1","volume-title":"Proceedings of the Second Asia-Pacific Workshop on Systems, APSys '11","author":"Zhang Cheng","year":"2011","unstructured":"Cheng Zhang, Zhenyu Guo, Ming Wu, Longwen Lu, Yu Fan, Jianjun Zhao, and Zheng Zhang. Autolog: Facing log redundancy and insufficiency. In Proceedings of the Second Asia-Pacific Workshop on Systems, APSys '11. Association for Computing Machinery, 2011."},{"key":"e_1_3_2_1_67_1","first-page":"415","volume-title":"2015 IEEE\/ACM 37th IEEE International Conference on Software Engineering","volume":"1","author":"Zhu Jieming","year":"2015","unstructured":"Jieming Zhu, Pinjia He, Qiang Fu, Hongyu Zhang, Michael R. Lyu, and Dongmei Zhang. Learning to log: Helping developers make informed logging decisions. In 2015 IEEE\/ACM 37th IEEE International Conference on Software Engineering, volume 1, pages 415--425, 2015."}],"event":{"name":"ASIA CCS '24: 19th ACM Asia Conference on Computer and Communications Security","location":"Singapore Singapore","acronym":"ASIA CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 19th ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3637647","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T23:44:05Z","timestamp":1750290245000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3637647"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7]]},"references-count":67,"alternative-id":["10.1145\/3634737.3637647","10.1145\/3634737"],"URL":"https:\/\/doi.org\/10.1145\/3634737.3637647","relation":{},"subject":[],"published":{"date-parts":[[2024,7]]},"assertion":[{"value":"2024-07-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}