{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,26]],"date-time":"2026-04-26T04:41:25Z","timestamp":1777178485656,"version":"3.51.4"},"reference-count":39,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2025,3,14]],"date-time":"2025-03-14T00:00:00Z","timestamp":1741910400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2025,3,14]],"date-time":"2025-03-14T00:00:00Z","timestamp":1741910400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2022YFB3104300"],"award-info":[{"award-number":["2022YFB3104300"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2022YFB3104300"],"award-info":[{"award-number":["2022YFB3104300"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2022YFB3104300"],"award-info":[{"award-number":["2022YFB3104300"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2022YFB3104300"],"award-info":[{"award-number":["2022YFB3104300"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2022YFB3104300"],"award-info":[{"award-number":["2022YFB3104300"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2022YFB3104300"],"award-info":[{"award-number":["2022YFB3104300"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2022YFB3104300"],"award-info":[{"award-number":["2022YFB3104300"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Cloud Comp"],"DOI":"10.1186\/s13677-025-00740-1","type":"journal-article","created":{"date-parts":[[2025,3,14]],"date-time":"2025-03-14T07:48:49Z","timestamp":1741938529000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Enhancing configuration security with heterogeneous read points"],"prefix":"10.1186","volume":"14","author":[{"given":"Xianglong","family":"Kong","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qiyu","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei","family":"Huang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiayu","family":"Du","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hongfa","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wen","family":"Ji","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fan","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,3,14]]},"reference":[{"issue":"1","key":"740_CR1","doi-asserted-by":"publisher","first-page":"249","DOI":"10.1007\/s12650-022-00868-1","volume":"26","author":"D Limberger","year":"2023","unstructured":"Limberger D, Scheibel W, D\u00f6llner J, Trapp M (2023) Visual variables and configuration of software maps. J Vis 26(1):249\u2013274","journal-title":"J Vis"},{"issue":"3","key":"740_CR2","doi-asserted-by":"publisher","first-page":"4:1","DOI":"10.5381\/jot.2021.20.3.a4","volume":"20","author":"E Ferko","year":"2021","unstructured":"Ferko E, Bucaioni A, Carlson J, Haider Z (2021) Automatic generation of configuration files: an experience report from the railway domain. J Object Technol 20(3):4:1\u20134:15","journal-title":"J Object Technol"},{"issue":"3","key":"740_CR3","first-page":"1","volume":"32","author":"T Chen","year":"2023","unstructured":"Chen T, Li M (2023) Do performance aspirations matter for guiding software configuration tuning? an empirical investigation under dual performance objectives. ACM Trans Softw Eng Methodol 32(3):1\u201341","journal-title":"ACM Trans Softw Eng Methodol"},{"key":"740_CR4","doi-asserted-by":"publisher","first-page":"111028","DOI":"10.1016\/j.jss.2021.111028","volume":"180","author":"G Cheng","year":"2021","unstructured":"Cheng G, Ying S, Wang B (2021) Tuning configuration of apache spark on public clouds by combining multi-objective optimization and performance prediction model. J Syst Softw 180:111028","journal-title":"J Syst Softw"},{"key":"740_CR5","doi-asserted-by":"publisher","first-page":"106813","DOI":"10.1016\/j.infsof.2021.106813","volume":"145","author":"R Mahdavi-Hezaveh","year":"2022","unstructured":"Mahdavi-Hezaveh R, Ajmeri N, Williams LA (2022) Feature toggles as code: Heuristics and metrics for structuring feature toggles. Inf Softw Technol 145:106813","journal-title":"Inf Softw Technol"},{"key":"740_CR6","doi-asserted-by":"crossref","unstructured":"Chen T, Li M (2021) Multi-objectivizing software configuration tuning. In: Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering. Athens, Greece. ACM 453\u201365","DOI":"10.1145\/3468264.3468555"},{"key":"740_CR7","doi-asserted-by":"crossref","unstructured":"St\u00f6ckle P, Wasserer T, Grobauer B, Pretschner A (2022) Automated identification of security-relevant configuration settings using NLP. In: 37th International Conference on Automated Software Engineering. Rochester, MI, USA. ACM 131:1\u2013131:5","DOI":"10.1145\/3551349.3559499"},{"key":"740_CR8","doi-asserted-by":"crossref","unstructured":"Minna F, Massacci F, Tuma K (2022) Towards a security stress-test for cloud configurations. In: 15th International Conference on Cloud Computing. Hawaii, USA. IEEE 191\u20136","DOI":"10.1109\/CLOUD55607.2022.00038"},{"key":"740_CR9","doi-asserted-by":"crossref","unstructured":"Dong Z, Andrzejak A, Shao K (2015) Practical and accurate pinpointing of configuration errors using static analysis. In: International Conference on Software Maintenance and Evolution. Bremen, Germany. IEEE 171\u201380","DOI":"10.1109\/ICSM.2015.7332463"},{"key":"740_CR10","doi-asserted-by":"crossref","unstructured":"Dong Z, Andrzejak A, Lo D, Costa D (2016) Orplocator: Identifying read points of configuration options via static analysis. In: 27th International Symposium on Software Reliability Engineering. Ontario, Canada. IEEE 185\u201395","DOI":"10.1109\/ISSRE.2016.37"},{"issue":"10","key":"740_CR11","doi-asserted-by":"publisher","first-page":"10044","DOI":"10.1016\/j.jksuci.2022.10.004","volume":"34","author":"J Wang","year":"2022","unstructured":"Wang J, Baker T, Zhou Y, Awad AI, Wang B, Zhu Y (2022) Automatic mapping of configuration options in software using static analysis. J King Saud Univ-Comput Inf Sci 34(10):10044\u201310055","journal-title":"J King Saud Univ-Comput Inf Sci"},{"key":"740_CR12","doi-asserted-by":"crossref","unstructured":"Andrzejak A, Iacsa M (2018) Confguru-a system for fully automated debugging of configuration errors. In: International Symposium on Software Reliability Engineering Workshops. Tennessee, USA. IEEE 224\u201331","DOI":"10.1109\/ISSREW.2018.00010"},{"key":"740_CR13","doi-asserted-by":"crossref","unstructured":"Zhang J, Piskac R, Zhai E, Xu T (2021) Static detection of silent misconfigurations with deep interaction analysis. Proc ACM Program Lang 5(OOPSLA) 1\u201330","DOI":"10.1145\/3485517"},{"key":"740_CR14","doi-asserted-by":"publisher","first-page":"102638","DOI":"10.1016\/j.cose.2022.102638","volume":"116","author":"A Paya","year":"2022","unstructured":"Paya A, Cotarelo A, Redondo JM (2022) Egida: Automated security configuration deployment systems with early error detection. Comput Secur 116:102638","journal-title":"Comput Secur"},{"key":"740_CR15","doi-asserted-by":"publisher","first-page":"106369","DOI":"10.1016\/j.infsof.2020.106369","volume":"127","author":"L Wang","year":"2020","unstructured":"Wang L, Li B, Kong X (2020) Type slicing: An accurate object oriented slicing based on sub-statement level dependence graph. Inf Softw Technol 127:106369","journal-title":"Inf Softw Technol"},{"key":"740_CR16","doi-asserted-by":"crossref","unstructured":"Chinchilla R, Hespanha JP (2022) Stochastic programming using expected value bounds. IEEE Trans Autom Control 68(6):3241\u201356","DOI":"10.1109\/TAC.2022.3184389"},{"key":"740_CR17","doi-asserted-by":"crossref","unstructured":"Quinn S, Waltermire D, Johnson C, Scarfone K, Banghart J (2009) The technical specification for the security content automation protocol (scap): Scap version 1.0. https:\/\/csrc.nist.gov\/pubs\/sp\/800\/126\/final. Accessed 4 Jan 2023","DOI":"10.6028\/NIST.SP.800-126"},{"key":"740_CR18","doi-asserted-by":"crossref","unstructured":"Waltermire DA, Fitzgerald-McKay J (2018) Transitioning to the security content automation protocol (scap) version 2. https:\/\/www.nist.gov\/publications\/transitioning-security-content-automation-protocol-scap-version-2. Accessed 4 Jan 2023","DOI":"10.6028\/NIST.CSWP.7"},{"key":"740_CR19","doi-asserted-by":"crossref","unstructured":"St\u00f6ckle P, Pruteanu I, Grobauer B, Pretschner A (2022) Hardening with scapolite: A devops-based approach for improved authoring and testing of security-configuration guides in large-scale organizations. In: 12th ACM Conference on Data and Application Security and Privacy. Baltimore, MD, USA. ACM 137\u201342","DOI":"10.1145\/3508398.3511525"},{"key":"740_CR20","doi-asserted-by":"crossref","unstructured":"Liu Y, Wang X, Xian L, Guo Z, Zuo J (2019) Which classes can be configured as beans in spring xml files? In: 5th International Conference on Big Data Computing and Communications. Qingdao, China. IEEE 59\u201363","DOI":"10.1109\/BIGCOM.2019.00018"},{"key":"740_CR21","doi-asserted-by":"crossref","unstructured":"Zhou S, Al-Kofahi J, Nguyen TN, K\u00e4stner C, Nadi S (2015) Extracting configuration knowledge from build files with symbolic analysis. In: IEEE\/ACM 3rd International Workshop on Release Engineering. Florence, Italy. IEEE 20\u201323","DOI":"10.1109\/RELENG.2015.15"},{"key":"740_CR22","doi-asserted-by":"crossref","unstructured":"Fischer S (2021) A case study on the evolution of configuration options of a highly-configurable software system. In: 28th IEEE International Conference on Software Analysis, Evolution and Reengineering. CA, USA. IEEE 630\u20135","DOI":"10.1109\/SANER50967.2021.00079"},{"key":"740_CR23","doi-asserted-by":"crossref","unstructured":"Gong J, Chen T (2022) Does configuration encoding matter in learning software performance? an empirical study on encoding schemes. In: Proceedings of the 19th International Conference on Mining Software Repositories. Pittsburgh, Pennsylvania. ACM 482\u201394","DOI":"10.1145\/3524842.3528431"},{"key":"740_CR24","doi-asserted-by":"crossref","unstructured":"Randrianaina GA, T\u00ebrnava X, Khelladi DE, Acher M (2022) On the benefits and limits of incremental build of software configurations: an exploratory study. In: Proceedings of the 44th International Conference on Software Engineering. Pittsburgh, Pennsylvania. ACM 1584\u201396","DOI":"10.1145\/3510003.3510190"},{"issue":"12","key":"740_CR25","doi-asserted-by":"publisher","first-page":"2907","DOI":"10.1109\/TSE.2020.2973997","volume":"47","author":"M Sayagh","year":"2021","unstructured":"Sayagh M, Hassan AE (2021) Configminer: Identifying the appropriate configuration options for config-related user questions by mining online forums. IEEE Trans Software Eng 47(12):2907\u20132918","journal-title":"IEEE Trans Software Eng"},{"key":"740_CR26","doi-asserted-by":"crossref","unstructured":"Zhou S, Liu X, Li S, Jia Z, Zhang Y, Wang T, Li W, Liao X (2021) Confinlog: Leveraging software logs to infer configuration constraints. In: IEEE\/ACM 29th International Conference on Program Comprehension. CA, USA. IEEE 94\u2013105","DOI":"10.1109\/ICPC52881.2021.00018"},{"key":"740_CR27","doi-asserted-by":"crossref","unstructured":"Li K, Xue Y, Shao Y, Su B, Tan Ya, Hu J (2021) Software misconfiguration troubleshooting based on state analysis. In: 6th International Conference on Data Science in Cyberspace. Guangzhou, China. IEEE 361\u20136","DOI":"10.1109\/DSC53577.2021.00057"},{"key":"740_CR28","doi-asserted-by":"crossref","unstructured":"Kuhlenkamp J, Werner S, Tran CH, Tai S (2022) Synthesizing configuration tactics for exercising hidden options in serverless systems. In: Intelligent Information Systems - CAiSE Forum. Lecture Notes in Business Information Processing, Leuven, Belgiumvol. 452. Springer 36\u201344","DOI":"10.1007\/978-3-031-07481-3_5"},{"key":"740_CR29","doi-asserted-by":"crossref","unstructured":"Inam MA, Ul W (2022) Forensic analysis of configuration-based attacks. In: Proceedings of the 2022 Network and Distributed System Security Symposium. San Diego, CA, USA. The Internet Society 1\u201317","DOI":"10.14722\/ndss.2022.23057"},{"key":"740_CR30","doi-asserted-by":"crossref","unstructured":"Iganibo I, Albanese M, Mosko M, Bier E, Brito AE (2021) Vulnerability metrics for graph-based configuration security. In: Proceedings of the 18th International Conference on Security and Cryptography. New York, USA. SCITEPRESS 259\u201370","DOI":"10.5220\/0010559402590270"},{"key":"740_CR31","doi-asserted-by":"crossref","unstructured":"Rabkin A, Katz R (2011) Static extraction of program configuration options. In: Proceedings of the 33rd International Conference on Software Engineering. Waikiki, Honolulu HI, USA. ACM 131\u201340","DOI":"10.1145\/1985793.1985812"},{"key":"740_CR32","doi-asserted-by":"crossref","unstructured":"Behrang F, Cohen MB, Orso A (2015) Users beware: Preference inconsistencies ahead. In: The 10th Joint Meeting on Foundations of Software Engineering. Bergamo, Italy. ACM 295\u2013306","DOI":"10.1145\/2786805.2786869"},{"key":"740_CR33","doi-asserted-by":"crossref","unstructured":"Lengauer T, Tarjan RE (1979) A fast algorithm for finding dominators in a flowgraph. ACM Trans Program Lang Syst 1(1):121\u201341","DOI":"10.1145\/357062.357071"},{"key":"740_CR34","doi-asserted-by":"crossref","unstructured":"Costantini G, Ferrara P, Cortesi A (2011) Static analysis of string values. In: 13th International Conference on Formal Engineering Methods. Durban, South Africa. Springer 505\u201321","DOI":"10.1007\/978-3-642-24559-6_34"},{"key":"740_CR35","doi-asserted-by":"crossref","unstructured":"Sherman E, Dwyer MB (2018) Structurally defined conditional data-flow static analysis. In: Beyer D, Huisman M (eds) Tools and Algorithms for the Construction and Analysis of Systems. Lecture Notes in Computer Science, vol 10806. Thessaloniki, Greece. Springer 249\u201365","DOI":"10.1007\/978-3-319-89963-3_15"},{"key":"740_CR36","unstructured":"Brengel M, Rossow C (2021) YARIX: Scalable YARA-based malware intelligence. In: 30th USENIX Security Symposium. USA. USENIX Association 3541\u201358"},{"issue":"1","key":"740_CR37","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1007\/s10515-021-00317-7","volume":"29","author":"C Zhi","year":"2022","unstructured":"Zhi C, Deng S, Han J, Yin J (2022) Towards automatic detection and prioritization of pre-logging overhead: a case study of hadoop ecosystem. Autom Softw Eng 29(1):11","journal-title":"Autom Softw Eng"},{"issue":"1","key":"740_CR38","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1109\/MS.2020.3044598","volume":"39","author":"D Chen","year":"2020","unstructured":"Chen D, Zhang R (2020) An open source project for tuning and analyzing mapreduce performance in hadoop and spark. IEEE Softw 39(1):61\u201369","journal-title":"IEEE Softw"},{"key":"740_CR39","doi-asserted-by":"crossref","unstructured":"Nakagami M, Fortes JA, Yamaguchi S (2019) Job-aware optimization of file placement in hadoop. In: 43rd annual computer software and applications conference, vol 2. Wisconsin, USA. IEEE 664\u20139","DOI":"10.1109\/COMPSAC.2019.10284"}],"container-title":["Journal of Cloud Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13677-025-00740-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s13677-025-00740-1\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13677-025-00740-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,14]],"date-time":"2025-03-14T07:49:07Z","timestamp":1741938547000},"score":1,"resource":{"primary":{"URL":"https:\/\/journalofcloudcomputing.springeropen.com\/articles\/10.1186\/s13677-025-00740-1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,3,14]]},"references-count":39,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,12]]}},"alternative-id":["740"],"URL":"https:\/\/doi.org\/10.1186\/s13677-025-00740-1","relation":{},"ISSN":["2192-113X"],"issn-type":[{"value":"2192-113X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,3,14]]},"assertion":[{"value":"12 June 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"1 March 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 March 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"16"}}