{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,7]],"date-time":"2024-09-07T02:54:25Z","timestamp":1725677665666},"publisher-location":"New York, NY, USA","reference-count":85,"publisher":"ACM","funder":[{"name":"National Science Foundation","award":["CCF-2008056"]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,5,23]]},"DOI":"10.1145\/3524842.3528463","type":"proceedings-article","created":{"date-parts":[[2022,10,18]],"date-time":"2022-10-18T00:08:36Z","timestamp":1666051716000},"page":"744-756","update-policy":"http:\/\/dx.doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["A deep study of the effects and fixes of server-side request races in web applications"],"prefix":"10.1145","author":[{"given":"Zhengyi","family":"Qiu","sequence":"first","affiliation":[{"name":"North Carolina State University"}]},{"given":"Shudi","family":"Shao","sequence":"additional","affiliation":[{"name":"North Carolina State University"}]},{"given":"Qi","family":"Zhao","sequence":"additional","affiliation":[{"name":"North Carolina State University"}]},{"given":"Hassan Ali","family":"Khan","sequence":"additional","affiliation":[{"name":"North Carolina State University"}]},{"given":"Xinning","family":"Hui","sequence":"additional","affiliation":[{"name":"North Carolina State University"}]},{"given":"Guoliang","family":"Jin","sequence":"additional","affiliation":[{"name":"North Carolina State University"}]}],"member":"320","published-online":{"date-parts":[[2022,10,17]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"AlchemyCMS - AlchemyCMS is a Rails CMS engine. https:\/\/github.com\/AlchemyCMS\/alchemy_cms. AlchemyCMS - AlchemyCMS is a Rails CMS engine. https:\/\/github.com\/AlchemyCMS\/alchemy_cms."},{"key":"e_1_3_2_1_2_1","unstructured":"Broadleaf Commerce - Enterprise eCommerce framework based on Spring. https:\/\/github.com\/BroadleafCommerce\/BroadleafCommerce. Broadleaf Commerce - Enterprise eCommerce framework based on Spring. https:\/\/github.com\/BroadleafCommerce\/BroadleafCommerce."},{"key":"e_1_3_2_1_3_1","unstructured":"Bugzilla. https:\/\/bugzilla.mozilla.org\/. Bugzilla. https:\/\/bugzilla.mozilla.org\/."},{"key":"e_1_3_2_1_4_1","unstructured":"Canvas LMS - The Open LMS by Instructure Inc. https:\/\/github.com\/instructure\/canvas-lms. Canvas LMS - The Open LMS by Instructure Inc. https:\/\/github.com\/instructure\/canvas-lms."},{"key":"e_1_3_2_1_5_1","unstructured":"Danbooru - A taggable image board written in Rails. https:\/\/github.com\/danbooru\/danbooru. Danbooru - A taggable image board written in Rails. https:\/\/github.com\/danbooru\/danbooru."},{"key":"e_1_3_2_1_6_1","unstructured":"diaspora* - A privacy-aware distributed open source social network. https:\/\/github.com\/diaspora\/diaspora. diaspora* - A privacy-aware distributed open source social network. https:\/\/github.com\/diaspora\/diaspora."},{"key":"e_1_3_2_1_7_1","unstructured":"Discourse - A platform for community discussion. Free open simple. https:\/\/github.com\/discourse\/discourse. Discourse - A platform for community discussion. Free open simple. https:\/\/github.com\/discourse\/discourse."},{"key":"e_1_3_2_1_8_1","unstructured":"DNN Platform Issue Tracker. https:\/\/dnntracker.atlassian.net. DNN Platform Issue Tracker. https:\/\/dnntracker.atlassian.net."},{"key":"e_1_3_2_1_9_1","unstructured":"Drupal. https:\/\/git.drupalcode.org\/project\/drupal. Drupal. https:\/\/git.drupalcode.org\/project\/drupal."},{"key":"e_1_3_2_1_10_1","unstructured":"Gitlab. https:\/\/about.gitlab.com. Gitlab. https:\/\/about.gitlab.com."},{"key":"e_1_3_2_1_11_1","unstructured":"LinuxFr.org - A French-speaking website about Free software \/ hardware \/ culture \/ stuff. https:\/\/github.com\/linuxfrorg\/linuxfr.org. LinuxFr.org - A French-speaking website about Free software \/ hardware \/ culture \/ stuff. https:\/\/github.com\/linuxfrorg\/linuxfr.org."},{"key":"e_1_3_2_1_12_1","unstructured":"MediaWiki - The collaborative editing software that runs Wikipedia. https:\/\/github.com\/wikimedia\/mediawiki. MediaWiki - The collaborative editing software that runs Wikipedia. https:\/\/github.com\/wikimedia\/mediawiki."},{"key":"e_1_3_2_1_13_1","unstructured":"Moodle Tracker. https:\/\/tracker.moodle.org\/. Moodle Tracker. https:\/\/tracker.moodle.org\/."},{"key":"e_1_3_2_1_14_1","unstructured":"October - Self-hosted CMS platform based on the Laravel PHP Framework. https:\/\/github.com\/octobercms\/october. October - Self-hosted CMS platform based on the Laravel PHP Framework. https:\/\/github.com\/octobercms\/october."},{"key":"e_1_3_2_1_15_1","unstructured":"Odoo - A suite of web based open source business apps. https:\/\/github.com\/odoo\/odoo. Odoo - A suite of web based open source business apps. https:\/\/github.com\/odoo\/odoo."},{"key":"e_1_3_2_1_16_1","unstructured":"OpenMRS - Medical Record System. http:\/\/openmrs.org. OpenMRS - Medical Record System. http:\/\/openmrs.org."},{"key":"e_1_3_2_1_17_1","unstructured":"OpenProject - OpenProject is the leading open source project management software. https:\/\/github.com\/opf\/openproject. OpenProject - OpenProject is the leading open source project management software. https:\/\/github.com\/opf\/openproject."},{"key":"e_1_3_2_1_18_1","unstructured":"Oscar - Domain-driven e-commerce for Django. https:\/\/github.com\/django-oscar\/django-oscar. Oscar - Domain-driven e-commerce for Django. https:\/\/github.com\/django-oscar\/django-oscar."},{"key":"e_1_3_2_1_19_1","unstructured":"Pixelfed - Photo Sharing. For Everyone. https:\/\/github.com\/pixelfed\/pixelfed. Pixelfed - Photo Sharing. For Everyone. https:\/\/github.com\/pixelfed\/pixelfed."},{"key":"e_1_3_2_1_20_1","unstructured":"PostHog - PostHog provides open-source product analytics that you can self-host. https:\/\/github.com\/PostHog\/posthog. PostHog - PostHog provides open-source product analytics that you can self-host. https:\/\/github.com\/PostHog\/posthog."},{"key":"e_1_3_2_1_21_1","unstructured":"Redash - Make Your Company Data Driven. Connect to any data source easily visualize dashboard and share your data. https:\/\/github.com\/getredash\/redash. Redash - Make Your Company Data Driven. Connect to any data source easily visualize dashboard and share your data. https:\/\/github.com\/getredash\/redash."},{"key":"e_1_3_2_1_22_1","unstructured":"Redmine. https:\/\/www.redmine.org\/. Redmine. https:\/\/www.redmine.org\/."},{"key":"e_1_3_2_1_23_1","unstructured":"ROR Ecommerce - Ruby on Rails Ecommerce platform perfect for your small business solution. https:\/\/github.com\/drhenner\/ror_ecommerce. ROR Ecommerce - Ruby on Rails Ecommerce platform perfect for your small business solution. https:\/\/github.com\/drhenner\/ror_ecommerce."},{"key":"e_1_3_2_1_24_1","unstructured":"Saleor Commerce - A modular high performance headless e-commerce platform built with Python GraphQL Django and React. https:\/\/github.com\/saleor\/saleor. Saleor Commerce - A modular high performance headless e-commerce platform built with Python GraphQL Django and React. https:\/\/github.com\/saleor\/saleor."},{"key":"e_1_3_2_1_25_1","unstructured":"Sentry - Sentry is cross-platform application monitoring with a focus on error reporting. https:\/\/github.com\/getsentry\/sentry. Sentry - Sentry is cross-platform application monitoring with a focus on error reporting. https:\/\/github.com\/getsentry\/sentry."},{"key":"e_1_3_2_1_26_1","unstructured":"Sharetribe - Sharetribe Go is a source available marketplace software also available as a hosted no-code SaaS product. https:\/\/github.com\/sharetribe\/sharetribe. Sharetribe - Sharetribe Go is a source available marketplace software also available as a hosted no-code SaaS product. https:\/\/github.com\/sharetribe\/sharetribe."},{"key":"e_1_3_2_1_27_1","unstructured":"Spree - Open Source headless multi-language\/multi-currency\/multi-store eCommerce platform. https:\/\/github.com\/spree\/spree. Spree - Open Source headless multi-language\/multi-currency\/multi-store eCommerce platform. https:\/\/github.com\/spree\/spree."},{"key":"e_1_3_2_1_28_1","unstructured":"Weblate - Web based localization tool with tight version control integration. https:\/\/github.com\/WeblateOrg\/weblate. Weblate - Web based localization tool with tight version control integration. https:\/\/github.com\/WeblateOrg\/weblate."},{"key":"e_1_3_2_1_29_1","unstructured":"WordPress Trac. https:\/\/core.trac.wordpress.org\/. WordPress Trac. https:\/\/core.trac.wordpress.org\/."},{"key":"e_1_3_2_1_30_1","unstructured":"Zulip - Zulip server and web app --- powerful open source team chat. https:\/\/github.com\/zulip\/zulip. Zulip - Zulip server and web app --- powerful open source team chat. https:\/\/github.com\/zulip\/zulip."},{"key":"e_1_3_2_1_31_1","unstructured":"Aaron Hnatiw Security Compass. Moving Beyond The OWASP Top 10 Part 1: Race Conditions. https:\/\/resources.securitycompass.com\/blog\/moving-beyond-the-owasp-top-10-part-1-race-conditions-2. Aaron Hnatiw Security Compass. Moving Beyond The OWASP Top 10 Part 1: Race Conditions. https:\/\/resources.securitycompass.com\/blog\/moving-beyond-the-owasp-top-10-part-1-race-conditions-2."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.34"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133890"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/2451116.2451128"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/2541940.2541973"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.14778\/2735508.2735509"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2723372.2737784"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3062341.3062364"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594323"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/1806596.1806626"},{"key":"e_1_3_2_1_41_1","unstructured":"Jack Cable. 2016. Race Condition in Redeeming Coupons. https:\/\/hackerone.com\/reports\/157996. Jack Cable. 2016. Race Condition in Redeeming Coupons. https:\/\/hackerone.com\/reports\/157996."},{"key":"e_1_3_2_1_42_1","unstructured":"Lucian Constantin. 2014. Withdrawal vulnerabilities enabled bitcoin theft from Flexcoin and Poloniex. https:\/\/www.pcworld.com\/article\/2104940\/withdrawal-vulnerabilities-enabled-bitcoin-theft-from-flexcoin-and-poloniex.html. Lucian Constantin. 2014. Withdrawal vulnerabilities enabled bitcoin theft from Flexcoin and Poloniex. https:\/\/www.pcworld.com\/article\/2104940\/withdrawal-vulnerabilities-enabled-bitcoin-theft-from-flexcoin-and-poloniex.html."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3064176.3064188"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542490"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2010.5544315"},{"key":"e_1_3_2_1_46_1","unstructured":"Egor Homakov. 2015. Hacking Starbucks for unlimited coffee. https:\/\/sakurity.com\/blog\/2015\/05\/21\/starbucks.html. Egor Homakov. 2015. Hacking Starbucks for unlimited coffee. https:\/\/sakurity.com\/blog\/2015\/05\/21\/starbucks.html."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/2338965.2336779"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594315"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/2814270.2814282"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/1993498.1993544"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/1869459.1869481"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.5555\/2387880.2387902"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815400.2815412"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3341105.3373855"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043589"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/2872362.2872374"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/3314221.3314620"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/3341301.3359638"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3037697.3037735"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/3173162.3177161"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/2635868.2635881"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.5555\/2337223.2337259"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236071"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/1346281.1346323"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA.2008.4"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/1993498.1993543"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/2786805.2786820"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70542-0_7"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/1508244.1508249"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/2254064.2254095"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE52982.2021.00059"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468594"},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/2509136.2509538"},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1145\/265924.265927"},{"key":"e_1_3_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.1145\/1375581.1375584"},{"key":"e_1_3_2_1_76_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME46990.2020.00016"},{"key":"e_1_3_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1145\/1985793.1985824"},{"key":"e_1_3_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2017.8115663"},{"key":"e_1_3_2_1_79_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132847.3132954"},{"key":"e_1_3_2_1_80_1","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180194"},{"key":"e_1_3_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568294"},{"key":"e_1_3_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.33"},{"key":"e_1_3_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950395"},{"key":"e_1_3_2_1_84_1","doi-asserted-by":"publisher","DOI":"10.1145\/1736020.1736041"},{"key":"e_1_3_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.5555\/2337223.2337292"}],"event":{"name":"MSR '22: 19th International Conference on Mining Software Repositories","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS"],"location":"Pittsburgh Pennsylvania","acronym":"MSR '22"},"container-title":["Proceedings of the 19th International Conference on Mining Software Repositories"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3524842.3528463","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,5,23]],"date-time":"2023-05-23T10:25:58Z","timestamp":1684837558000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3524842.3528463"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5,23]]},"references-count":85,"alternative-id":["10.1145\/3524842.3528463","10.1145\/3524842"],"URL":"https:\/\/doi.org\/10.1145\/3524842.3528463","relation":{},"subject":[],"published":{"date-parts":[[2022,5,23]]},"assertion":[{"value":"2022-10-17","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}