The Popularity Hypothesis in Software Security: A Large-Scale Replication with PHP Packages
Fuente:
arXiv
Guardado en:
| Autores principales: | Ruohonen, Jukka, Ramadan, Qusai |
|---|---|
| Formato: | Preprint |
| Publicado: |
2025
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
Ejemplares similares
Tracing Vulnerability Propagation Across Open Source Software Ecosystems
por: Ruohonen, Jukka, et al.
Publicado: (2025)
por: Ruohonen, Jukka, et al.
Publicado: (2025)
An Alignment Between the CRA's Essential Requirements and the ATT&CK's Mitigations
por: Ruohonen, Jukka, et al.
Publicado: (2025)
por: Ruohonen, Jukka, et al.
Publicado: (2025)
A Static Analysis of Popular C Packages in Linux
por: Ruohonen, Jukka, et al.
Publicado: (2024)
por: Ruohonen, Jukka, et al.
Publicado: (2024)
An Empirical Study of Vulnerability Handling Times in CPython
por: Ruohonen, Jukka
Publicado: (2024)
por: Ruohonen, Jukka
Publicado: (2024)
Vulnerability Patching Across Software Products and Software Components: A Case Study of Red Hat's Product Portfolio
por: Ruohonen, Jukka, et al.
Publicado: (2025)
por: Ruohonen, Jukka, et al.
Publicado: (2025)
An Overview of Cyber Security Funding for Open Source Software
por: Ruohonen, Jukka, et al.
Publicado: (2024)
por: Ruohonen, Jukka, et al.
Publicado: (2024)
SoK: The Design Paradigm of Safe and Secure Defaults
por: Ruohonen, Jukka
Publicado: (2024)
por: Ruohonen, Jukka
Publicado: (2024)
A Time Series Analysis of Malware Uploads to Programming Language Ecosystems
por: Ruohonen, Jukka, et al.
Publicado: (2025)
por: Ruohonen, Jukka, et al.
Publicado: (2025)
Snaps: Bloated and Outdated?
por: Ruohonen, Jukka, et al.
Publicado: (2025)
por: Ruohonen, Jukka, et al.
Publicado: (2025)
A Mapping Analysis of Requirements Between the CRA and the GDPR
por: Ruohonen, Jukka, et al.
Publicado: (2025)
por: Ruohonen, Jukka, et al.
Publicado: (2025)
Compliance as Code: A Study of Linux Distributions and Beyond
por: Ruohonen, Jukka, et al.
Publicado: (2026)
por: Ruohonen, Jukka, et al.
Publicado: (2026)
Risks and Compliance with the EU's Core Cyber Security Legislation
por: Ruohonen, Jukka, et al.
Publicado: (2025)
por: Ruohonen, Jukka, et al.
Publicado: (2025)
Vulnerability Coordination Under the Cyber Resilience Act
por: Ruohonen, Jukka, et al.
Publicado: (2024)
por: Ruohonen, Jukka, et al.
Publicado: (2024)
Securing the Software Package Supply Chain for Critical Systems
por: Murali, Ritwik, et al.
Publicado: (2025)
por: Murali, Ritwik, et al.
Publicado: (2025)
AutoVulnPHP: LLM-Powered Two-Stage PHP Vulnerability Detection and Automated Localization
por: Wang, Zhiqiang, et al.
Publicado: (2026)
por: Wang, Zhiqiang, et al.
Publicado: (2026)
A Large-scale Fine-grained Analysis of Packages in Open-Source Software Ecosystems
por: Zhou, Xiaoyan, et al.
Publicado: (2024)
por: Zhou, Xiaoyan, et al.
Publicado: (2024)
An Analysis of Malicious Packages in Open-Source Software in the Wild
por: Zhou, Xiaoyan, et al.
Publicado: (2024)
por: Zhou, Xiaoyan, et al.
Publicado: (2024)
How Reliable Are FOSS Popularity Metrics? Analyzing the Effort Required for Spoofing Common Software Popularity Metrics
por: Swierzy, Ben, et al.
Publicado: (2025)
por: Swierzy, Ben, et al.
Publicado: (2025)
Evaluating Software Supply Chain Security in Research Software
por: Hegewald, Richard, et al.
Publicado: (2025)
por: Hegewald, Richard, et al.
Publicado: (2025)
Software Security in Software-Defined Networking: A Systematic Literature Review
por: Diouf, Moustapha Awwalou, et al.
Publicado: (2025)
por: Diouf, Moustapha Awwalou, et al.
Publicado: (2025)
SoK: Towards Reproducibility for Software Packages in Scripting Language Ecosystems
por: Pohl, Timo, et al.
Publicado: (2025)
por: Pohl, Timo, et al.
Publicado: (2025)
Maven-Hijack: Software Supply Chain Attack Exploiting Packaging Order
por: Reyes, Frank, et al.
Publicado: (2024)
por: Reyes, Frank, et al.
Publicado: (2024)
An Introduction to Adaptive Software Security
por: Nia, Mehran Alidoost
Publicado: (2023)
por: Nia, Mehran Alidoost
Publicado: (2023)
Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors
por: Schorlemmer, Taylor R, et al.
Publicado: (2024)
por: Schorlemmer, Taylor R, et al.
Publicado: (2024)
Toward Automated Security Risk Detection in Large Software Using Call Graph Analysis
por: Pecka, Nicholas, et al.
Publicado: (2025)
por: Pecka, Nicholas, et al.
Publicado: (2025)
R+R: Reassessing Java Security API Misuse in Current LLMs: A Replication on JCA and JSSE APIs with External Security Knowledge
por: Lu, Tianhe, et al.
Publicado: (2026)
por: Lu, Tianhe, et al.
Publicado: (2026)
Software Bill of Materials in Software Supply Chain Security A Systematic Literature Review
por: O'Donoghue, Eric, et al.
Publicado: (2025)
por: O'Donoghue, Eric, et al.
Publicado: (2025)
Challenges in Developing Secure Software -- Results of an Interview Study in the German Software Industry
por: Mattukat, Alex R., et al.
Publicado: (2025)
por: Mattukat, Alex R., et al.
Publicado: (2025)
Software Supply Chain Security of Web3
por: Monperrus, Martin
Publicado: (2025)
por: Monperrus, Martin
Publicado: (2025)
Operationalizing Research Software for Supply Chain Security
por: Kalu, Kelechi G., et al.
Publicado: (2026)
por: Kalu, Kelechi G., et al.
Publicado: (2026)
Software Security Analysis in 2030 and Beyond: A Research Roadmap
por: Böhme, Marcel, et al.
Publicado: (2024)
por: Böhme, Marcel, et al.
Publicado: (2024)
What's in a Package? Getting Visibility Into Dependencies Using Security-Sensitive API Calls
por: Rahman, Imranur, et al.
Publicado: (2024)
por: Rahman, Imranur, et al.
Publicado: (2024)
SoK: Analysis of Software Supply Chain Security by Establishing Secure Design Properties
por: Okafor, Chinenye, et al.
Publicado: (2024)
por: Okafor, Chinenye, et al.
Publicado: (2024)
Securing Tomorrow's Smart Cities: Investigating Software Security in Internet of Vehicles and Deep Learning Technologies
por: Jain, Ridhi, et al.
Publicado: (2024)
por: Jain, Ridhi, et al.
Publicado: (2024)
Automatically Generating Rules of Malicious Software Packages via Large Language Model
por: Zhang, XiangRui, et al.
Publicado: (2025)
por: Zhang, XiangRui, et al.
Publicado: (2025)
An Industry Interview Study of Software Signing for Supply Chain Security
por: Kalu, Kelechi G., et al.
Publicado: (2024)
por: Kalu, Kelechi G., et al.
Publicado: (2024)
A Large Scale Study of AI-based Binary Function Similarity Detection Techniques for Security Researchers and Practitioners
por: Shi, Jingyi, et al.
Publicado: (2025)
por: Shi, Jingyi, et al.
Publicado: (2025)
How to Secure Existing C and C++ Software without Memory Safety
por: Erlingsson, Úlfar
Publicado: (2025)
por: Erlingsson, Úlfar
Publicado: (2025)
Software Supply Chain Smells: Lightweight Analysis for Secure Dependency Management
por: Schmid, Larissa, et al.
Publicado: (2026)
por: Schmid, Larissa, et al.
Publicado: (2026)
Generating Proof-of-Vulnerability Tests to Help Enhance the Security of Complex Software
por: Kanchi, Shravya, et al.
Publicado: (2026)
por: Kanchi, Shravya, et al.
Publicado: (2026)
Ejemplares similares
-
Tracing Vulnerability Propagation Across Open Source Software Ecosystems
por: Ruohonen, Jukka, et al.
Publicado: (2025) -
An Alignment Between the CRA's Essential Requirements and the ATT&CK's Mitigations
por: Ruohonen, Jukka, et al.
Publicado: (2025) -
A Static Analysis of Popular C Packages in Linux
por: Ruohonen, Jukka, et al.
Publicado: (2024) -
An Empirical Study of Vulnerability Handling Times in CPython
por: Ruohonen, Jukka
Publicado: (2024) -
Vulnerability Patching Across Software Products and Software Components: A Case Study of Red Hat's Product Portfolio
por: Ruohonen, Jukka, et al.
Publicado: (2025)