Image de couverture de livre

Impact assessment for vulnerabilities in open-source software libraries

Fuente: arXiv

Enregistré dans:

Détails bibliographiques
Auteurs principaux:	Plate, Henrik, Ponta, Serena Elisa, Sabetta, Antonino
Format:	Preprint
Publié:	2015
Sujets:	Cryptography and Security Software Engineering
Accès en ligne:	Acceder al recurso
Tags:	Ajouter un tag Pas de tags, Soyez le premier à ajouter un tag!

Documents similaires

Beyond Metadata: Code-centric and Usage-based Analysis of Known Vulnerabilities in Open-source Software
par: Ponta, Serena E., et autres
Publié: (2018)

A Manually-Curated Dataset of Fixes to Vulnerabilities of Open-Source Software
par: Ponta, Serena E., et autres
Publié: (2019)

Bytecode-centric Detection of Known-to-be-vulnerable Dependencies in Java Projects
par: Schott, Stefan, et autres
Publié: (2025)

SourceBroken: A large-scale analysis on the (un)reliability of SourceRank in the PyPI ecosystem
par: Montaruli, Biagio, et autres
Publié: (2025)

Uncovering Hidden Inclusions of Vulnerable Dependencies in Real-World Java Projects
par: Schott, Stefan, et autres
Publié: (2026)

What's in a Package? Getting Visibility Into Dependencies Using Security-Sensitive API Calls
par: Rahman, Imranur, et autres
Publié: (2024)

Automated Mapping of Vulnerability Advisories onto their Fix Commits in Open Source Repositories
par: Hommersom, Daan, et autres
Publié: (2021)

Evaluating and Improving the Robustness of Security Attack Detectors Generated by LLMs
par: Pasini, Samuele, et autres
Publié: (2024)

Llama-based source code vulnerability detection: Prompt engineering vs Fine tuning
par: Ouchebara, Dyna Soumhane, et autres
Publié: (2025)

SBOM Generation Tools in the Python Ecosystem: an In-Detail Analysis
par: Cofano, Serena, et autres
Publié: (2024)

Classport: Designing Runtime Dependency Introspection for Java
par: Cofano, Serena, et autres
Publié: (2025)

In the Magma chamber: Update and challenges in ground-truth vulnerabilities revival for automatic input generator comparison
par: Riom, Timothée, et autres
Publié: (2025)

A unit-based symbolic execution method for detecting memory corruption vulnerabilities in executable codes
par: Baradaran, Sara, et autres
Publié: (2022)

Continuous risk assessment in secure DevOps
par: Czekster, Ricardo M.
Publié: (2024)

Forecasting the risk of software choices: A model to foretell security vulnerabilities from library dependencies and source code evolution
par: Budde, Carlos E., et autres
Publié: (2024)

VERCATION: Precise Vulnerable Open-source Software Version Identification based on Static Analysis and LLM
par: Cheng, Yiran, et autres
Publié: (2024)

Did You Forkget It? Detecting One-Day Vulnerabilities in Open-source ForksWith Global History Analysis
par: Lefeuvre, Romain, et autres
Publié: (2025)

A Solution toward Transparent and Practical AI Regulation: Privacy Nutrition Labels for Open-source Generative AI-based Applications
par: Si, Meixue, et autres
Publié: (2024)

Impact of Code Transformation on Detection of Smart Contract Vulnerabilities
par: Manh, Cuong Tran, et autres
Publié: (2024)

Propagation-Based Vulnerability Impact Assessment for Software Supply Chains
par: Ruan, Bonan, et autres
Publié: (2025)

A Comprehensive Study on the Impact of Vulnerable Dependencies on Open-Source Software
par: Kumar, Shree Hari Bittugondanahalli Indra, et autres
Publié: (2025)

Security Incentivization: An Empirical Study of how Micropayments Impact Code Security
par: Rass, Stefan, et autres
Publié: (2026)

Similar but Patched Code Considered Harmful -- The Impact of Similar but Patched Code on Recurring Vulnerability Detection and How to Remove Them
par: Tan, Zixuan, et autres
Publié: (2024)

Repairing vulnerabilities without invisible hands. A differentiated replication study on LLMs
par: Camporese, Maria, et autres
Publié: (2025)

Using ML filters to help automated vulnerability repairs: when it helps and when it doesn't
par: Camporese, Maria, et autres
Publié: (2025)

Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers
par: Hamer, Sivana, et autres
Publié: (2024)

Formally Verifying Noir Zero Knowledge Programs with NAVe
par: Antonino, Pedro, et autres
Publié: (2026)

Patch-to-PoC: A Systematic Study of Agentic LLM Systems for Linux Kernel N-Day Reproduction
par: Pu, Juefei, et autres
Publié: (2026)

Automatic, Expressive, and Scalable Fuzzing with Stitching
par: Green, Harrison, et autres
Publié: (2026)

Where Do Smart Contract Security Analyzers Fall Short?
par: Abdelaziz, Tamer, et autres
Publié: (2026)

A Systematic Study of LLM-Based Architectures for Automated Patching
par: Xu, Qingxiao, et autres
Publié: (2026)

A Requirement-Based Framework for Engineering Adaptive Authentication
par: Hassan, Alzubair, et autres
Publié: (2026)

SseRex: Practical Symbolic Execution of Solana Smart Contracts
par: Cloosters, Tobias, et autres
Publié: (2026)

Security of Language Models for Code: A Systematic Literature Review
par: Chen, Yuchen, et autres
Publié: (2024)

KEENHash: Hashing Programs into Function-Aware Embeddings for Large-Scale Binary Code Similarity Analysis
par: Liu, Zhijie, et autres
Publié: (2025)

QUIC-Fuzz: An Effective Greybox Fuzzer For The QUIC Protocol
par: Ang, Kian Kai, et autres
Publié: (2025)

An Industry Interview Study of Software Signing for Supply Chain Security
par: Kalu, Kelechi G., et autres
Publié: (2024)

Identity Control Plane: The Unifying Layer for Zero Trust Infrastructure
par: Avirneni, Surya Teja
Publié: (2025)

Sleeping Giants -- Activating Dormant Java Deserialization Gadget Chains through Stealthy Code Changes
par: Kreyssig, Bruno, et autres
Publié: (2025)

Provenance of Adaptation in Scientific and Business Workflows -- Literature Review
par: Stage, Ludwig, et autres
Publié: (2025)