{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,29]],"date-time":"2026-07-29T15:59:08Z","timestamp":1785340748849,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":33,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,10,13]],"date-time":"2025-10-13T00:00:00Z","timestamp":1760313600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100001659","name":"Deutsche Forschungsgemeinschaft","doi-asserted-by":"publisher","award":["160364472"],"award-info":[{"award-number":["160364472"]}],"id":[{"id":"10.13039\/501100001659","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,10,13]]},"DOI":"10.1145\/3733827.3765530","type":"proceedings-article","created":{"date-parts":[[2026,7,29]],"date-time":"2026-07-29T12:47:16Z","timestamp":1785329236000},"page":"64-73","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["A Soundness and Precision Benchmark for Java Debloating Tools"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9160-9636","authenticated-orcid":false,"given":"Jonas","family":"Klauke","sequence":"first","affiliation":[{"name":"Paderborn University, Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-0644-7895","authenticated-orcid":false,"given":"Tom","family":"Ohlmer","sequence":"additional","affiliation":[{"name":"Paderborn University, Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0644-3297","authenticated-orcid":false,"given":"Stefan","family":"Schott","sequence":"additional","affiliation":[{"name":"Paderborn University, Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6208-4743","authenticated-orcid":false,"given":"Serena Elisa","family":"Ponta","sequence":"additional","affiliation":[{"name":"SAP Labs, Mougins, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8127-8837","authenticated-orcid":false,"given":"Wolfram","family":"Fischer","sequence":"additional","affiliation":[{"name":"SAP SE, Stuttgart, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3470-3647","authenticated-orcid":false,"given":"Eric","family":"Bodden","sequence":"additional","affiliation":[{"name":"Paderborn University, Paderborn, Germany and Fraunhofer IEM, Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,7,29]]},"reference":[{"key":"e_1_3_3_2_2_2","doi-asserted-by":"publisher","DOI":"10.1145\/3689937.3695792"},{"key":"e_1_3_3_2_3_2","first-page":"1697","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Azad Babak\u00a0Amin","year":"2019","unstructured":"Babak\u00a0Amin Azad, Pierre Laperdrix, and Nick Nikiforakis. 2019. Less is More: Quantifying the Security Benefits of Debloating Web Applications. In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, Santa Clara, CA, 1697\u20131714. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/azad"},{"key":"e_1_3_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.1145\/1167473.1167488"},{"key":"e_1_3_3_2_5_2","first-page":"3927","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Brown Michael\u00a0D.","year":"2024","unstructured":"Michael\u00a0D. Brown, Adam Meily, Brian Fairservice, Akshay Sood, Jonathan Dorn, Eric Kilmer, and Ronald Eytchison. 2024. A Broad Comparative Evaluation of Software Debloating Tools. In 33rd USENIX Security Symposium (USENIX Security 24). USENIX Association, Philadelphia, PA, 3927\u20133943. https:\/\/www.usenix.org\/conference\/usenixsecurity24\/presentation\/brown"},{"key":"e_1_3_3_2_6_2","doi-asserted-by":"publisher","DOI":"10.5555\/3359012.3359017"},{"key":"e_1_3_3_2_7_2","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3409738"},{"key":"e_1_3_3_2_8_2","doi-asserted-by":"publisher","unstructured":"Andreas Dann Henrik Plate Ben Hermann Serena\u00a0Elisa Ponta and Eric Bodden. 2022. Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite. IEEE Transactions on Software Engineering 48 9 (2022) 3613\u20133625. 10.1109\/TSE.2021.3101739","DOI":"10.1109\/TSE.2021.3101739"},{"key":"e_1_3_3_2_9_2","unstructured":"Free Software Foundation Inc.2016. Coreutils - GNU core utilities. https:\/\/www.gnu.org\/software\/coreutils\/ (Accessed:2025-06-28)."},{"key":"e_1_3_3_2_10_2","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559366"},{"key":"e_1_3_3_2_11_2","unstructured":"Guardsquare nv.2025. Java Obfuscator and Android App Optimizer | ProGuard. https:\/\/www.guardsquare.com\/proguard (Accessed:2025-06-25)."},{"key":"e_1_3_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243838"},{"key":"e_1_3_3_2_13_2","unstructured":"Kihong Heo and Pardis Pashakhanloo. 2020. ChiselBench. https:\/\/github.com\/aspire-project\/chisel-bench (Accessed:2025-06-28)."},{"key":"e_1_3_3_2_14_2","unstructured":"Marc\u00a0R. Hoffmann and Cay\u00a0S. Horstmann. 2025. The Java Version Almanac. https:\/\/javaalmanac.io\/ (Accessed:2025-06-28)."},{"key":"e_1_3_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623208"},{"key":"e_1_3_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.5220\/0007929201170128"},{"key":"e_1_3_3_2_17_2","doi-asserted-by":"publisher","DOI":"10.1145\/3338906.3338956"},{"key":"e_1_3_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-57246-3_13"},{"key":"e_1_3_3_2_19_2","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639113"},{"key":"e_1_3_3_2_20_2","doi-asserted-by":"publisher","DOI":"10.1145\/2695664.2695751"},{"key":"e_1_3_3_2_21_2","doi-asserted-by":"publisher","unstructured":"Jorge\u00a0A. Navas and Ashish Gehani. 2022. OCCAM-v2: Combining Static and Dynamic Analysis for Effective and Efficient Whole-program Specialization: Leveraging scalable pointer analysis value analysis and dynamic analysis. Queue 20 5 (Nov. 2022) 58\u201385. 10.1145\/3570922","DOI":"10.1145\/3570922"},{"key":"e_1_3_3_2_22_2","unstructured":"OWASP Foundation Inc. 2025. Deserialization of untrusted data. https:\/\/owasp.org\/www-community\/vulnerabilities\/Deserialization_of_untrusted_data (Accessed:2025-06-25)."},{"key":"e_1_3_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME52107.2021.00056"},{"key":"e_1_3_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2019.00064"},{"key":"e_1_3_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.1145\/3293882.3330555"},{"key":"e_1_3_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.1145\/3236454.3236503"},{"key":"e_1_3_3_2_27_2","doi-asserted-by":"publisher","unstructured":"C\u00e9sar Soto-Valero Nicolas Harrand Martin Monperrus and Benoit Baudry. 2021. A comprehensive study of bloated dependencies in the Maven ecosystem. 26 3 (2021) 45. 10.1007\/s10664-020-09914-8","DOI":"10.1007\/s10664-020-09914-8"},{"key":"e_1_3_3_2_28_2","doi-asserted-by":"publisher","unstructured":"C\u00e9sar Soto-Valero Deepika Tiwari Tim Toady and Benoit Baudry. 2023. Automatic Specialization of Third-Party Java Dependencies. IEEE Transactions on Software Engineering 49 11 (2023) 5027\u20135045. 10.1109\/TSE.2023.3324950","DOI":"10.1109\/TSE.2023.3324950"},{"key":"e_1_3_3_2_29_2","unstructured":"Standard Performance Evaluation Corporation. 2006. SPEC CPU\u00ae 2006 benchmark (Retired: January 2018). https:\/\/www.spec.org\/cpu2006\/ (Accessed:2025-06-28)."},{"key":"e_1_3_3_2_30_2","unstructured":"Standard Performance Evaluation Corporation. 2017. SPEC CPU\u00ae 2017 benchmark. https:\/\/www.spec.org\/cpu2017\/ (Accessed:2025-06-28)."},{"key":"e_1_3_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-02768-1_4"},{"key":"e_1_3_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380441"},{"key":"e_1_3_3_2_33_2","doi-asserted-by":"publisher","DOI":"10.1145\/3611643.3616274"},{"key":"e_1_3_3_2_34_2","doi-asserted-by":"publisher","unstructured":"Ryan Williams Tongwei Ren Lorenzo De\u00a0Carli Long Lu and Gillian Smith. 2021. Guided Feature Identification and Removal for Resource-constrained Firmware. ACM Trans. Softw. Eng. Methodol. 31 2 Article 28 (Dec. 2021) 25\u00a0pages. 10.1145\/3487568","DOI":"10.1145\/3487568"}],"event":{"name":"SCORED '25: Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses","location":"Taipei , Taiwan","acronym":"SCORED '25","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2025 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3733827.3765530","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,29]],"date-time":"2026-07-29T15:12:27Z","timestamp":1785337947000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3733827.3765530"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,13]]},"references-count":33,"alternative-id":["10.1145\/3733827.3765530","10.1145\/3733827"],"URL":"https:\/\/doi.org\/10.1145\/3733827.3765530","relation":{},"subject":[],"published":{"date-parts":[[2025,10,13]]},"assertion":[{"value":"2026-07-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}