On the public citation graph
Software Security Analysis in 2030 and Beyond: A Research Roadmap
0 signed · 149 inferred · view as graph
Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.
Is this your work? Sign in with ORCID and put your name on the
claims that are yours.
Reference health. See whether every reference in this work resolves to a
known work and none has been retracted — and get a dated CiteStamped
badge you can embed.
What this work says
Outgoing claims: the papers this work cites, builds on, or argues with.
inferredcites →https://doi.org/10.1002/qre.2715openalex-snapshot
Reliability of safety‐critical systems: A state‐of‐the‐art review
inferredcites →https://doi.org/10.1007/978-3-319-17524-9_1openalex-snapshot
Moving Fast with Software Verification
inferredcites →https://doi.org/10.1007/978-3-319-68670-7openalex-snapshot
String Analysis for Software Verification and Security
inferredcites →https://doi.org/10.1007/978-3-642-22110-1openalex-snapshot
Computer aided verification : 23rd international conference, CAV 2011, Snowbird, UT, USA, July 14-20, 2011 : proceedings
inferredcites →https://doi.org/10.1007/s10009-008-0087-9openalex-snapshot
Automated verification of access control policies using a SAT solver
inferredcites →https://doi.org/10.1007/s10009-020-00570-3openalex-snapshot
KLEE symbolic execution engine in 2019
inferredcites →https://doi.org/10.1007/s10664-014-9352-6openalex-snapshot
Empirical assessment of machine learning-based malware detectors for Android
inferredcites →https://doi.org/10.1007/s10664-021-10114-1openalex-snapshot
The effects of continuous integration on software development: a systematic literature review
inferredcites →https://doi.org/10.1007/s10664-022-10131-8openalex-snapshot
Characterizing usages, updates and risks of third-party libraries in Java projects
inferredcites →https://doi.org/10.1007/s10664-023-10380-1openalex-snapshot
Is GitHub’s Copilot as bad as humans at introducing vulnerabilities in code?
inferredcites →https://doi.org/10.1007/s10877-023-01013-5openalex-snapshot
The elephant in the room: cybersecurity in healthcare
inferredcites →https://doi.org/10.1007/s11633-022-1377-5openalex-snapshot
Red Alarm for Pre-trained Models: Universal Vulnerability to Neuron-level Backdoor Attacks
inferredcites →https://doi.org/10.1007/s42979-020-00353-2openalex-snapshot
Cloud Computing Security Issues: a Stakeholder’s Perspective
inferredcites →https://doi.org/10.1016/j.cie.2018.11.030openalex-snapshot
A review of Internet of Things (IoT) embedded sustainable supply chain for industry 4.0 requirements
inferredcites →https://doi.org/10.1016/j.comnet.2020.107343openalex-snapshot
Secure over-the-air software updates in connected vehicles: A survey
inferredcites →https://doi.org/10.1016/j.cose.2018.11.001openalex-snapshot
Survey of machine learning techniques for malware analysis
inferredcites →https://doi.org/10.1016/j.cose.2021.102580openalex-snapshot
Cloud computing security: A survey of service-based models
inferredcites →https://doi.org/10.1016/j.hcc.2024.100211openalex-snapshot
A survey on large language model (LLM) security and privacy: The Good, The Bad, and The Ugly
inferredcites →https://doi.org/10.1016/j.infsof.2017.04.001openalex-snapshot
Static analysis of android apps: A systematic literature review
inferredcites →https://doi.org/10.1038/1931144a0openalex-snapshot
International Journal of Production Research
inferredcites →https://doi.org/10.1080/00207543.2017.1402140openalex-snapshot
Internet of things and supply chain management: a literature review
inferredcites →https://doi.org/10.1080/00949655.2018.1505197openalex-snapshot
Elements of causal inference: foundations and learning algorithms
inferredcites →https://doi.org/10.1093/cybsec/tyab023openalex-snapshot
Patching zero-day vulnerabilities: an empirical analysis
inferredcites →https://doi.org/10.1109/access.2023.3324402openalex-snapshot
Empirical Study for Open Source Libraries in Automotive Software Systems
inferredcites →https://doi.org/10.1109/apsec51365.2020.00031openalex-snapshot
Technical Lag of Dependencies in Major Package Managers
inferredcites →https://doi.org/10.1109/csf.2017.8openalex-snapshot
Synthesis of Adaptive Side-Channel Attacks
inferredcites →https://doi.org/10.1109/eurosp.2016.15openalex-snapshot
Precisely Measuring Quantitative Information Flow: 10K Lines of Code and Beyond
inferredcites →https://doi.org/10.1109/formalise58978.2023.00012openalex-snapshot
Patch Specifications via Product Programs
inferredcites →https://doi.org/10.1109/icse-seet58685.2023.00010openalex-snapshot
Training for Security: Planning the Use of a SAT in the Development Pipeline of Web Apps
inferredcites →https://doi.org/10.1109/icse-seip52600.2021.00035openalex-snapshot
Anomalicious: Automated Detection of Anomalous and Potentially Malicious Commits on GitHub
inferredcites →https://doi.org/10.1109/icsme46990.2020.00024openalex-snapshot
A First Look at the Deprecation of RESTful APIs: An Empirical Study
inferredcites →https://doi.org/10.1109/icsme58846.2023.00016openalex-snapshot
Software Bill of Materials Adoption: A Mining Study from GitHub
inferredcites →https://doi.org/10.1109/iwsc53727.2021openalex-snapshot
2021 IEEE 15th International Workshop on Software Clones (IWSC)
inferredcites →https://doi.org/10.1109/mc.2020.3011082openalex-snapshot
Free and Open Source Software License Compliance: Tools for Software Composition Analysis
inferredcites →https://doi.org/10.1109/ms.2020.3016773openalex-snapshot
Fuzzing: Challenges and Reflections
inferredcites →https://doi.org/10.1109/msec.2023.3287206openalex-snapshot
Why Is Static Application Security Testing Hard to Learn?
inferredcites →https://doi.org/10.1109/msr52588.2021.00055openalex-snapshot
Practitioners’ Perceptions of the Goals and Visual Explanations of Defect Prediction Models
inferredcites →https://doi.org/10.1109/msr52588.2021.00074openalex-snapshot
Sampling Projects in GitHub for MSR Studies
inferredcites →https://doi.org/10.1109/saner37107.2016openalex-snapshot
2016 IEEE 23rd International Conference on Software Analysis, Evolution, and Reengineering (SANER)
inferredcites →https://doi.org/10.1109/sbft59156.2023.00015openalex-snapshot
Continuous Fuzzing: A Study of the Effectiveness and Scalability of Fuzzing in CI/CD Pipelines
inferredcites →https://doi.org/10.1109/sp.2008.22openalex-snapshot
Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications
inferredcites →https://doi.org/10.1109/sp.2008.30openalex-snapshot
Preventing Memory Error Exploits with WIT
inferredcites →https://doi.org/10.1109/sp.2009.18openalex-snapshot
Automatic Discovery and Quantification of Information Leaks
inferredcites →https://doi.org/10.1109/sp12743.2007openalex-snapshot
2007 IEEE Symposium on Security and Privacy (SP '07)
inferredcites →https://doi.org/10.1109/sp40000.2020.00007openalex-snapshot
JIT Leaks: Inducing Timing Side Channels through Just-In-Time Compilation
inferredcites →https://doi.org/10.1109/sp40001.2021openalex-snapshot
2021 IEEE Symposium on Security and Privacy (SP)
inferredcites →https://doi.org/10.1109/sp46214.2022.9833571openalex-snapshot
Asleep at the Keyboard? Assessing the Security of GitHub Copilot’s Code Contributions
inferredcites →https://doi.org/10.1109/tse.1976.233817openalex-snapshot
A System to Generate Test Data and Symbolically Execute Programs
inferredcites →https://doi.org/10.1109/tse.2021.3087402openalex-snapshot
Deep Learning Based Vulnerability Detection: Are We There Yet?
inferredcites →https://doi.org/10.1109/tse.2021.3101739openalex-snapshot
Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite
inferredcites →https://doi.org/10.1109/tse.2021.3112204openalex-snapshot
Back to the Past – Analysing Backporting Practices in Package Dependency Networks
inferredcites →https://doi.org/10.1145/1323293.1294283openalex-snapshot
Staged deployment in mirage, an integrated software upgrade testing and distribution system
inferredcites →https://doi.org/10.1145/1609956.1609960openalex-snapshot
Control-flow integrity principles, implementations, and applications
inferredcites →https://doi.org/10.1145/1985793openalex-snapshot
Proceedings of the 33rd International Conference on Software Engineering
inferredcites →https://doi.org/10.1145/1985793.1985995openalex-snapshot
Symbolic execution for software testing in practice
inferredcites →https://doi.org/10.1145/1993498openalex-snapshot
Proceedings of the 32nd ACM SIGPLAN Conference on Programming Language Design and Implementation
inferredcites →https://doi.org/10.1145/1993498.1993532openalex-snapshot
Finding and understanding bugs in C compilers
inferredcites →https://doi.org/10.1145/1995376.1995394openalex-snapshot
Satisfiability modulo theories
inferredcites →https://doi.org/10.1145/2351676openalex-snapshot
Proceedings of the 27th IEEE/ACM International Conference on Automated Software Engineering
inferredcites →https://doi.org/10.1145/2408776.2408795openalex-snapshot
Symbolic execution for software testing
inferredcites →https://doi.org/10.1145/2483760openalex-snapshot
Proceedings of the 2013 International Symposium on Software Testing and Analysis
inferredcites →https://doi.org/10.1145/2568225openalex-snapshot
Proceedings of the 36th International Conference on Software Engineering
inferredcites →https://doi.org/10.1145/2568225.2568243openalex-snapshot
Reviser: efficiently updating IDE-/IFDS-based data-flow analyses in response to incremental program changes
inferredcites →https://doi.org/10.1145/2594291.2594334openalex-snapshot
Compiler validation via equivalence modulo inputs
inferredcites →https://doi.org/10.1145/2610384.2610401openalex-snapshot
Semantic differential repair for input validation and sanitization
inferredcites →https://doi.org/10.1145/3182657openalex-snapshot
A Survey of Symbolic Execution Techniques
inferredcites →https://doi.org/10.1145/3236024.3236029openalex-snapshot
Do Android taint analysis tools keep their promises?
inferredcites →https://doi.org/10.1145/3243734openalex-snapshot
Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security
inferredcites →https://doi.org/10.1145/3293882openalex-snapshot
Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis
inferredcites →https://doi.org/10.1145/3293882.3330556openalex-snapshot
Codebase-adaptive detection of security-relevant methods
inferredcites →https://doi.org/10.1145/3293882.3339002openalex-snapshot
JQF: coverage-guided property-based testing in Java
inferredcites →https://doi.org/10.1145/3314221.3314610openalex-snapshot
Computing summaries of string loops in C for better testing and refactoring
inferredcites →https://doi.org/10.1145/3338906openalex-snapshot
Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering
inferredcites →https://doi.org/10.1145/3357384openalex-snapshot
Proceedings of the 28th ACM International Conference on Information and Knowledge Management
inferredcites →https://doi.org/10.1145/3357384.3357971openalex-snapshot
Detecting Malicious Accounts in Online Developer Communities Using Deep Learning
inferredcites →https://doi.org/10.1145/3368089.3409738openalex-snapshot
JShrink: in-depth investigation into debloating modern Java applications
inferredcites →https://doi.org/10.1145/3372297.3417232openalex-snapshot
A Qualitative Study of Dependency Management and Its Security Implications
inferredcites →https://doi.org/10.1145/3377813openalex-snapshot
Proceedings of the ACM/IEEE 42nd International Conference on Software Engineering: Software Engineering in Practice
inferredcites →https://doi.org/10.1145/3377813.3381360openalex-snapshot
Automated identification of libraries from vulnerability data
inferredcites →https://doi.org/10.1145/3382494openalex-snapshot
Proceedings of the 14th ACM / IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)
inferredcites →https://doi.org/10.1145/3387940openalex-snapshot
Proceedings of the IEEE/ACM 42nd International Conference on Software Engineering Workshops
inferredcites →https://doi.org/10.1145/3387940.3392202openalex-snapshot
Characterizing outdateness with technical lag
inferredcites →https://doi.org/10.1145/3395363.3397360openalex-snapshot
Running symbolic execution forever
inferredcites →https://doi.org/10.1145/3460120.3484594openalex-snapshot
Facilitating Vulnerability Assessment through PoC Migration
inferredcites →https://doi.org/10.1145/3475716.3475769openalex-snapshot
A comparative study of vulnerability reporting by software composition analysis tools
inferredcites →https://doi.org/10.1145/3485447openalex-snapshot
Proceedings of the ACM Web Conference 2022
inferredcites →https://doi.org/10.1145/3510003openalex-snapshot
Proceedings of the 44th International Conference on Software Engineering
inferredcites →https://doi.org/10.1145/3510003.3510142openalex-snapshot
Demystifying the vulnerability propagation and its evolution via dependency trees in the NPM ecosystem
inferredcites →https://doi.org/10.1145/3510455.3512796openalex-snapshot
Statistical reasoning about programs
inferredcites →https://doi.org/10.1145/3510457openalex-snapshot
Proceedings of the 44th International Conference on Software Engineering: Software Engineering in Practice
inferredcites →https://doi.org/10.1145/3510457.3513044openalex-snapshot
What are weak links in the npm supply chain?
inferredcites →https://doi.org/10.1145/3551349.3556915openalex-snapshot
Auto Off-Target: Enabling Thorough and Scalable Testing for Complex Software Systems
inferredcites →https://doi.org/10.1145/3551349.3556956openalex-snapshot
Has My Release Disobeyed Semantic Versioning? Static Detection Based on Semantic Differencing
inferredcites →https://doi.org/10.1145/3560835.3564547openalex-snapshot
An Empirical Study of Artifacts and Security Risks in the Pre-trained Model Supply Chain
inferredcites →https://doi.org/10.1145/3571156openalex-snapshot
A Comprehensive Review of the State-of-the-Art on Security and Privacy Issues in Healthcare
inferredcites →https://doi.org/10.1145/3576915.3623157openalex-snapshot
Do Users Write More Insecure Code with AI Assistants?
inferredcites →https://doi.org/10.1145/3585004openalex-snapshot
Modern Code Reviews—Survey of Literature and Practice
inferredcites →https://doi.org/10.1145/3597926.3598143openalex-snapshot
Third-Party Library Dependency for Large-Scale SCA in the C/C++ Ecosystem: How Far Are We?
inferredcites →https://doi.org/10.1145/360248.360252openalex-snapshot
Symbolic execution and program testing
inferredcites →https://doi.org/10.1145/3611643.3616268openalex-snapshot
Statistical Reachability Analysis
inferredcites →https://doi.org/10.1145/3611643.3616270openalex-snapshot
Demystifying the Composition and Code Reuse in Solidity Smart Contracts
inferredcites →https://doi.org/10.1145/3611643.3617845openalex-snapshot
Detecting Overfitting of Machine Learning Techniques for Automatic Vulnerability Detection
inferredcites →https://doi.org/10.1145/3639474openalex-snapshot
Proceedings of the 46th International Conference on Software Engineering: Software Engineering Education and Training
inferredcites →https://doi.org/10.1145/3639474.3640073openalex-snapshot
Training for Security: Results from Using a Static Analysis Tool in the Development Pipeline of Web Apps
inferredcites →https://doi.org/10.1145/3643916openalex-snapshot
Proceedings of the 32nd IEEE/ACM International Conference on Program Comprehension
inferredcites →https://doi.org/10.1145/3643916.3644416openalex-snapshot
Vulnerabilities in AI Code Generators: Exploring Targeted Data Poisoning Attacks
inferredcites →https://doi.org/10.1145/3650212.3680384openalex-snapshot
AutoCodeRover: Autonomous Program Improvement
inferredcites →https://doi.org/10.1145/3658644openalex-snapshot
Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security
inferredcites →https://doi.org/10.1145/3691620.3695271openalex-snapshot
Models Are Codes: Towards Measuring Malicious Code Poisoning Attacks on Pre-trained Model Hubs
inferredcites →https://doi.org/10.1145/581339openalex-snapshot
Proceedings of the 24th international conference on Software engineering - ICSE '02
inferredcites →https://doi.org/10.1371/journal.pone.0228439openalex-snapshot
FastEmbed: Predicting vulnerability exploitation possibility based on ensemble machine learning algorithm
inferredcites →https://doi.org/10.21275/sr23626155823openalex-snapshot
Optimizing Cloud - Based Manufacturing: A Study on Service and Development Models
inferredcites →https://doi.org/10.3390/s20247160openalex-snapshot
Security Issues and Software Updates Management in the Industrial Internet of Things (IIoT) Era
inferredcites →https://doi.org/10.34727/2020/isbn.978-3-85448-042-6openalex-snapshot
Proceedings of the 20th Conference on Formal Methods in Computer-Aided Design – FMCAD 2020
inferredcites →https://doi.org/10.34727/2020/isbn.978-3-85448-042-6_20openalex-snapshot
Parallelization Techniques for Verifying Neural Networks
inferredcites →https://doi.org/10.48550/arxiv.1909.03496openalex-snapshot
Devign: Effective Vulnerability Identification by Learning Comprehensive Program Semantics via Graph Neural Networks
inferredcites →https://doi.org/10.48550/arxiv.2108.09293openalex-snapshot
Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributions
inferredcites →https://doi.org/10.5555/2486788.2486869openalex-snapshot
Safe software updates via multi-version execution
inferredcites →https://doi.org/10.9734/jerr/2023/v25i8965openalex-snapshot
Risk Management in Medical Device Industry
What points at this work
Incoming claims: where this work appears in other papers’ reference lists and arguments.
inferred← citeshttps://doi.org/10.1007/978-3-032-05188-2_21openalex-snapshot
Tracing Vulnerability Propagation Across Open Source Software Ecosystems
inferred← citeshttps://doi.org/10.1016/j.procs.2026.03.047openalex-snapshot
Digital Fortresses: Software Security Practices in Healthcare Settings
inferred← citeshttps://doi.org/10.1109/access.2026.3672671openalex-snapshot
A Semantic Approximation Technique for Automated Detection of Illicit Information Flows in Web-Based Systems
inferred← citeshttps://doi.org/10.1109/icsa-c68850.2026.00051openalex-snapshot
Digital Twins for Security-Based Assurance of Edge-Cloud Software - a Data Platform Approach
inferred← citeshttps://doi.org/10.1109/jsac.2025.3643844openalex-snapshot
Advancing LLM-Based Security Automation With Customized Group Relative Policy Optimization for Zero-Touch Networks
inferred← citeshttps://doi.org/10.1109/msec.2025.3551590openalex-snapshot
How to Solve Cybersecurity Once and For All
inferred← citeshttps://doi.org/10.1109/sist61674.2026.11596367openalex-snapshot
Customizable Methodology for Structured Analysis of Software with in Isolated Computational Environments to Secure Critical IT Infrastructures
inferred← citeshttps://doi.org/10.1109/trustcom66490.2025.00025openalex-snapshot
VarAgent: LLM-Enhanced Variable Name Recovery in Binaries via Reinforcement Learning and Semantic Fusion
inferred← citeshttps://doi.org/10.1145/3718346openalex-snapshot
Visualization Task Taxonomy to Understand the Fuzzing Internals
inferred← citeshttps://doi.org/10.1145/3731559openalex-snapshot
A 2030 Roadmap for Software Engineering
inferred← citeshttps://doi.org/10.54660/.ijmrge.2025.6.2.1861-1872openalex-snapshot
Scalable Data Validation Strategies for Big Data and Analytics on Google Cloud Platform (GCP)
Editorial review for independent work. ICSAC — the Institute for Complexity
Science and Advanced Computing — runs a structured editorial panel for researchers
publishing outside journals, and publishes on CiteStamp rails. Submission is free
and goes through ORCID: icsacinstitute.org/submit.