Cover Image

A Static Analysis of Popular C Packages in Linux

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Ruohonen, Jukka, Saddiqa, Mubashrah, Sierszecki, Krzysztof
Format:	Preprint
Published:	2024
Subjects:	Software Engineering Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

A Time Series Analysis of Malware Uploads to Programming Language Ecosystems
by: Ruohonen, Jukka, et al.
Published: (2025)

The Popularity Hypothesis in Software Security: A Large-Scale Replication with PHP Packages
by: Ruohonen, Jukka, et al.
Published: (2025)

What Do We Know About the Psychology of Insider Threats?
by: Ruohonen, Jukka, et al.
Published: (2024)

Compliance as Code: A Study of Linux Distributions and Beyond
by: Ruohonen, Jukka, et al.
Published: (2026)

An Empirical Study of Vulnerability Handling Times in CPython
by: Ruohonen, Jukka
Published: (2024)

Tracing Vulnerability Propagation Across Open Source Software Ecosystems
by: Ruohonen, Jukka, et al.
Published: (2025)

A Mapping Analysis of Requirements Between the CRA and the GDPR
by: Ruohonen, Jukka, et al.
Published: (2025)

SoK: The Design Paradigm of Safe and Secure Defaults
by: Ruohonen, Jukka
Published: (2024)

Vulnerability Patching Across Software Products and Software Components: A Case Study of Red Hat's Product Portfolio
by: Ruohonen, Jukka, et al.
Published: (2025)

Vulnerability Coordination Under the Cyber Resilience Act
by: Ruohonen, Jukka, et al.
Published: (2024)

An Alignment Between the CRA's Essential Requirements and the ATT&CK's Mitigations
by: Ruohonen, Jukka, et al.
Published: (2025)

An Overview of Cyber Security Funding for Open Source Software
by: Ruohonen, Jukka, et al.
Published: (2024)

Risks and Compliance with the EU's Core Cyber Security Legislation
by: Ruohonen, Jukka, et al.
Published: (2025)

Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades
by: Przymus, Piotr, et al.
Published: (2026)

A Time Series Analysis of Assertions in the Linux Kernel
by: Ruohonen, Jukka
Published: (2024)

A Study of Malware Prevention in Linux Distributions
by: Vu, Duc-Ly, et al.
Published: (2024)

Patch-to-PoC: A Systematic Study of Agentic LLM Systems for Linux Kernel N-Day Reproduction
by: Pu, Juefei, et al.
Published: (2026)

Finding Memory Leaks in C/C++ Programs via Neuro-Symbolic Augmented Static Analysis
by: Huang, Huihui, et al.
Published: (2026)

An Investigation of Patch Porting Practices of the Linux Kernel Ecosystem
by: Li, Xingyu, et al.
Published: (2024)

Automatic Detection of Reference Counting Bugs in Linux Kernel Drivers
by: Hattori, Joe, et al.
Published: (2026)

KernJC: Automated Vulnerable Environment Generation for Linux Kernel Vulnerabilities
by: Ruan, Bonan, et al.
Published: (2024)

An Analysis of Malicious Packages in Open-Source Software in the Wild
by: Zhou, Xiaoyan, et al.
Published: (2024)

Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation
by: Guo, Ziyi, et al.
Published: (2024)

Toward an Android Static Analysis Approach for Data Protection
by: Khedkar, Mugdha, et al.
Published: (2024)

UEFI Vulnerability Signature Generation using Static and Symbolic Analysis
by: Shafiuzzaman, Md, et al.
Published: (2024)

CrossInspector: A Static Analysis Approach for Cross-Contract Vulnerability Detection
by: Chen, Xiao
Published: (2024)

SAGA: Detecting Security Vulnerabilities Using Static Aspect Analysis
by: Marquer, Yoann, et al.
Published: (2026)

Guiding Symbolic Execution with Static Analysis and LLMs for Vulnerability Discovery
by: Shafiuzzaman, Md, et al.
Published: (2026)

A Large-scale Fine-grained Analysis of Packages in Open-Source Software Ecosystems
by: Zhou, Xiaoyan, et al.
Published: (2024)

A Context-Sensitive, Outlier-Based Static Analysis to Find Kernel Race Conditions
by: Dossche, Niels, et al.
Published: (2024)

AssetHarvester: A Static Analysis Tool for Detecting Secret-Asset Pairs in Software Artifacts
by: Basak, Setu Kumar, et al.
Published: (2024)

LuaTaint: A Static Analysis System for Web Configuration Interface Vulnerability of Internet of Things Devices
by: Xiang, Jiahui, et al.
Published: (2024)

LLM-Driven Adaptive Source-Sink Identification and False Positive Mitigation for Static Analysis
by: Lin, Shiyin
Published: (2025)

DySec: A Machine Learning-based Dynamic Analysis for Detecting Malicious Packages in PyPI Ecosystem
by: Mehedi, Sk Tanzir, et al.
Published: (2025)

VERCATION: Precise Vulnerable Open-source Software Version Identification based on Static Analysis and LLM
by: Cheng, Yiran, et al.
Published: (2024)

FuzzSlice: Pruning False Positives in Static Analysis Warnings Through Function-Level Fuzzing
by: Murali, Aniruddhan, et al.
Published: (2024)

CrossCommitVuln-Bench: A Dataset of Multi-Commit Python Vulnerabilities Invisible to Per-Commit Static Analysis
by: Majumdar, Arunabh
Published: (2026)

How Reliable Are FOSS Popularity Metrics? Analyzing the Effort Required for Spoofing Common Software Popularity Metrics
by: Swierzy, Ben, et al.
Published: (2025)

"False negative -- that one is going to kill you": Understanding Industry Perspectives of Static Analysis based Security Testing
by: Ami, Amit Seal, et al.
Published: (2023)

Fast Fixes and Faulty Drivers: An Empirical Analysis of Regression Bug Fixing Times in the Linux Kernel
by: Ruohonen, Jukka, et al.
Published: (2024)