TY - GEN
T1 - SoK
T2 - 6th Workshop on Forming an Ecosystem Around Software Transformation, FEAST 2024
AU - Alhanahnah, Mohannad
AU - Boshmaf, Yazan
AU - Gehani, Ashish
N1 - Publisher Copyright:
© 2024 Copyright held by the owner/author(s).
PY - 2024/11/19
Y1 - 2024/11/19
N2 - Software debloating seeks to mitigate security risks and improve performance by eliminating unnecessary code. In recent years, a plethora of debloating tools have been developed, creating a dense and varied landscape. Several studies have delved into the literature, focusing on comparative analysis of these tools. To build upon these efforts, this paper presents a comprehensive systematization of knowledge (SoK) of the software debloating landscape. We conceptualize the software debloating workflow, which serves as the basis for developing a multilevel taxonomy. This framework classifies debloating tools according to their input/output artifacts, debloating strategies, and evaluation criteria. Lastly, we apply the taxonomy to pinpoint open problems in the field, which, together with the SoK, provide a foundational reference for researchers aiming to improve software security and efficiency through debloating.
AB - Software debloating seeks to mitigate security risks and improve performance by eliminating unnecessary code. In recent years, a plethora of debloating tools have been developed, creating a dense and varied landscape. Several studies have delved into the literature, focusing on comparative analysis of these tools. To build upon these efforts, this paper presents a comprehensive systematization of knowledge (SoK) of the software debloating landscape. We conceptualize the software debloating workflow, which serves as the basis for developing a multilevel taxonomy. This framework classifies debloating tools according to their input/output artifacts, debloating strategies, and evaluation criteria. Lastly, we apply the taxonomy to pinpoint open problems in the field, which, together with the SoK, provide a foundational reference for researchers aiming to improve software security and efficiency through debloating.
KW - Sbom
KW - Sdlc
KW - Software Debloating
KW - Software Security
KW - Systematization of Knowledge
KW - Taxonomy
UR - https://www.scopus.com/pages/publications/85214142287
U2 - 10.1145/3689937.3695792
DO - 10.1145/3689937.3695792
M3 - Conference contribution
AN - SCOPUS:85214142287
T3 - FEAST 2024 - Proceedings of the 2024 Workshop on Forming an Ecosystem Around Software Transformation, Co-Located with: CCS 2024
SP - 11
EP - 18
BT - FEAST 2024 - Proceedings of the 2024 Workshop on Forming an Ecosystem Around Software Transformation, Co-Located with
PB - Association for Computing Machinery, Inc
Y2 - 14 October 2024 through 18 October 2024
ER -