Copertina

Patch2QL: Discover Cognate Defects in Open Source Software Supply Chain With Auto-generated Static Analysis Rules

Fuente: arXiv

Salvato in:

Dettagli Bibliografici
Autori principali:	Wang, Fuwei, Liu, Yongzhi, Dong, Zhiqiang
Natura:	Preprint
Pubblicazione:	2024
Soggetti:	Cryptography and Security Software Engineering
Accesso online:	Acceder al recurso
Tags:	Aggiungi Tag Nessun Tag, puoi essere il primo ad aggiungerne!!

Documenti analoghi

Finding 709 Defects in 258 Projects: An Experience Report on Applying CodeQL to Open-Source Embedded Software (Experience Paper) -- Extended Report
di: Shen, Mingjie, et al.
Pubblicazione: (2023)

Towards Robust Detection of Open Source Software Supply Chain Poisoning Attacks in Industry Environments
di: Zheng, Xinyi, et al.
Pubblicazione: (2024)

ARMS: A Vision for Actor Reputation Metric Systems in the Open-Source Software Supply Chain
di: Kalu, Kelechi G., et al.
Pubblicazione: (2025)

VERCATION: Precise Vulnerable Open-source Software Version Identification based on Static Analysis and LLM
di: Cheng, Yiran, et al.
Pubblicazione: (2024)

Software Supply Chain Smells: Lightweight Analysis for Secure Dependency Management
di: Schmid, Larissa, et al.
Pubblicazione: (2026)

Evaluating Software Supply Chain Security in Research Software
di: Hegewald, Richard, et al.
Pubblicazione: (2025)

PrediQL: Automated Testing of GraphQL APIs with LLMs
di: Liu, Shaolun, et al.
Pubblicazione: (2025)

Dirty-Waters: Detecting Software Supply Chain Smells
di: Liu, Raphina, et al.
Pubblicazione: (2024)

Operationalizing Research Software for Supply Chain Security
di: Kalu, Kelechi G., et al.
Pubblicazione: (2026)

Software Supply Chain Security of Web3
di: Monperrus, Martin
Pubblicazione: (2025)

An Analysis of Malicious Packages in Open-Source Software in the Wild
di: Zhou, Xiaoyan, et al.
Pubblicazione: (2024)

Static Security Vulnerability Scanning of Proprietary and Open-Source Software: An Adaptable Process with Variants and Results
di: Cusick, James J.
Pubblicazione: (2025)

Propagation-Based Vulnerability Impact Assessment for Software Supply Chains
di: Ruan, Bonan, et al.
Pubblicazione: (2025)

Securing the Software Package Supply Chain for Critical Systems
di: Murali, Ritwik, et al.
Pubblicazione: (2025)

SoK: Analysis of Software Supply Chain Security by Establishing Secure Design Properties
di: Okafor, Chinenye, et al.
Pubblicazione: (2024)

Wolves in the Repository: A Software Engineering Analysis of the XZ Utils Supply Chain Attack
di: Przymus, Piotr, et al.
Pubblicazione: (2025)

An Industry Interview Study of Software Signing for Supply Chain Security
di: Kalu, Kelechi G., et al.
Pubblicazione: (2024)

Software Bill of Materials in Software Supply Chain Security A Systematic Literature Review
di: O'Donoghue, Eric, et al.
Pubblicazione: (2025)

Maven-Hijack: Software Supply Chain Attack Exploiting Packaging Order
di: Reyes, Frank, et al.
Pubblicazione: (2024)

An Empirically Grounded Reference Architecture for Software Supply Chain Metadata Management
di: Tran, Nguyen Khoi, et al.
Pubblicazione: (2023)

QUT-DV25: A Dataset for Dynamic Analysis of Next-Gen Software Supply Chain Attacks
di: Mehedi, Sk Tanzir, et al.
Pubblicazione: (2025)

A Large-scale Fine-grained Analysis of Packages in Open-Source Software Ecosystems
di: Zhou, Xiaoyan, et al.
Pubblicazione: (2024)

GoLeash: Mitigating Golang Software Supply Chain Attacks with Runtime Policy Enforcement
di: Cesarano, Carmine, et al.
Pubblicazione: (2025)

Safety Interventions against Adversarial Patches in an Open-Source Driver Assistance System
di: Chen, Cheng, et al.
Pubblicazione: (2025)

OmniBOR: A System for Automatic, Verifiable Artifact Resolution across Software Supply Chains
di: Seshadri, Bharathi, et al.
Pubblicazione: (2024)

Tracking Down Software Cluster Bombs: A Current State Analysis of the Free/Libre and Open Source Software (FLOSS) Ecosystem
di: Tatschner, Stefan, et al.
Pubblicazione: (2025)

Tracing Vulnerability Propagation Across Open Source Software Ecosystems
di: Ruohonen, Jukka, et al.
Pubblicazione: (2025)

Unlocking Reproducibility: Automating re-Build Process for Open-Source Software
di: Hassanshahi, Behnaz, et al.
Pubblicazione: (2025)

A Comprehensive Study on the Impact of Vulnerable Dependencies on Open-Source Software
di: Kumar, Shree Hari Bittugondanahalli Indra, et al.
Pubblicazione: (2025)

GraphQLer: Enhancing GraphQL Security with Context-Aware API Testing
di: Tsai, Omar, et al.
Pubblicazione: (2025)

Towards Predicting Multi-Vulnerability Attack Chains in Software Supply Chains from Software Bill of Materials Graphs
di: Baird, Laura, et al.
Pubblicazione: (2026)

AssetHarvester: A Static Analysis Tool for Detecting Secret-Asset Pairs in Software Artifacts
di: Basak, Setu Kumar, et al.
Pubblicazione: (2024)

LLM-Driven Adaptive Source-Sink Identification and False Positive Mitigation for Static Analysis
di: Lin, Shiyin
Pubblicazione: (2025)

Exploiting LLM Agent Supply Chains via Payload-less Skills
di: Liu, Xinyu, et al.
Pubblicazione: (2026)

SCRIBE: Practical Static Binary Patching via Binary-Aware Recompilation of Decompiled Code
di: Dai, Han, et al.
Pubblicazione: (2026)

The Code the World Depends On: A First Look at Technology Makers' Open Source Software Dependencies
di: Patrick, Cadence, et al.
Pubblicazione: (2024)

Investigating Vulnerability Disclosures in Open-Source Software Using Bug Bounty Reports and Security Advisories
di: Ayala, Jessy, et al.
Pubblicazione: (2025)

Understanding the Supply Chain and Risks of Large Language Model Applications
di: Ma, Yujie, et al.
Pubblicazione: (2025)

A Mixed-Methods Study of Open-Source Software Maintainers On Vulnerability Management and Platform Security Features
di: Ayala, Jessy, et al.
Pubblicazione: (2024)

Vulnerability Patching Across Software Products and Software Components: A Case Study of Red Hat's Product Portfolio
di: Ruohonen, Jukka, et al.
Pubblicazione: (2025)