Image de couverture de livre

How Reliable Are FOSS Popularity Metrics? Analyzing the Effort Required for Spoofing Common Software Popularity Metrics

Fuente: arXiv

Enregistré dans:

Détails bibliographiques
Auteurs principaux:	Swierzy, Ben, Pohl, Timo, Ohm, Marc, Meier, Michael
Format:	Preprint
Publié:	2025
Sujets:	Cryptography and Security Software Engineering
Accès en ligne:	Acceder al recurso
Tags:	Ajouter un tag Pas de tags, Soyez le premier à ajouter un tag!

Documents similaires

Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web
par: Swierzy, Ben, et autres
Publié: (2025)

SoK: Towards Reproducibility for Software Packages in Scripting Language Ecosystems
par: Pohl, Timo, et autres
Publié: (2025)

The Popularity Hypothesis in Software Security: A Large-Scale Replication with PHP Packages
par: Ruohonen, Jukka, et autres
Publié: (2025)

ARMS: A Vision for Actor Reputation Metric Systems in the Open-Source Software Supply Chain
par: Kalu, Kelechi G., et autres
Publié: (2025)

Vulnerability Detection in Popular Programming Languages with Language Models
par: Atiiq, Syafiq Al, et autres
Publié: (2024)

A Static Analysis of Popular C Packages in Linux
par: Ruohonen, Jukka, et autres
Publié: (2024)

Challenges in Developing Secure Software -- Results of an Interview Study in the German Software Industry
par: Mattukat, Alex R., et autres
Publié: (2025)

RiskHarvester: A Risk-based Tool to Prioritize Secret Removal Efforts in Software Artifacts
par: Basak, Setu Kumar, et autres
Publié: (2025)

Lightweight Vulnerability Detection from Code Metrics and Token Features
par: Chiu, Chun Yin
Publié: (2026)

An Empirical Study on the Distance Metric in Guiding Directed Grey-box Fuzzing
par: Wen, Tingke, et autres
Publié: (2024)

Six Million (Suspected) Fake Stars in GitHub: A Growing Spiral of Popularity Contests, Spams, and Malware
par: He, Hao, et autres
Publié: (2024)

Assessing Vulnerability in Smart Contracts: The Role of Code Complexity Metrics in Security Analysis
par: Tehrani, Masoud Jamshidiyan
Publié: (2024)

How to Secure Existing C and C++ Software without Memory Safety
par: Erlingsson, Úlfar
Publié: (2025)

Toward Automated Security Risk Detection in Large Software Using Call Graph Analysis
par: Pecka, Nicholas, et autres
Publié: (2025)

Privacy and Confidentiality Requirements Engineering for Process Data
par: Haertel, Fabian, et autres
Publié: (2025)

Developments in Connected Vehicles and the Requirement for Increased Cybersecurity
par: Garrad, Phillip, et autres
Publié: (2021)

Evaluating Software Supply Chain Security in Research Software
par: Hegewald, Richard, et autres
Publié: (2025)

An Empirical Study of Bitwise Operators Intuitiveness through Performance Metrics
par: Joshi, Shubham
Publié: (2025)

LLM-based Vulnerability Discovery through the Lens of Code Metrics
par: Weissberg, Felix, et autres
Publié: (2025)

Tracking Down Software Cluster Bombs: A Current State Analysis of the Free/Libre and Open Source Software (FLOSS) Ecosystem
par: Tatschner, Stefan, et autres
Publié: (2025)

A Mapping Analysis of Requirements Between the CRA and the GDPR
par: Ruohonen, Jukka, et autres
Publié: (2025)

A Requirement-Based Framework for Engineering Adaptive Authentication
par: Hassan, Alzubair, et autres
Publié: (2026)

Software Security in Software-Defined Networking: A Systematic Literature Review
par: Diouf, Moustapha Awwalou, et autres
Publié: (2025)

An Alignment Between the CRA's Essential Requirements and the ATT&CK's Mitigations
par: Ruohonen, Jukka, et autres
Publié: (2025)

A Faceted Classification of Authenticator-Centric Authentication Techniques
par: Mattukat, Alex R., et autres
Publié: (2026)

Software Bill of Materials in Software Supply Chain Security A Systematic Literature Review
par: O'Donoghue, Eric, et autres
Publié: (2025)

SCALE: Constructing Structured Natural Language Comment Trees for Software Vulnerability Detection
par: Wen, Xin-Cheng, et autres
Publié: (2024)

Leveraging Large Language Models for Command Injection Vulnerability Analysis in Python: An Empirical Study on Popular Open-Source Projects
par: Wang, Yuxuan, et autres
Publié: (2025)

Where Do Smart Contract Security Analyzers Fall Short?
par: Abdelaziz, Tamer, et autres
Publié: (2026)

Transparency in App Analytics: Analyzing the Collection of User Interaction Data
par: Tang, Feiyang, et autres
Publié: (2023)

An Introduction to Adaptive Software Security
par: Nia, Mehran Alidoost
Publié: (2023)

TREBLE: Fast Software Updates by Creating an Equilibrium in an Active Software Ecosystem of Globally Distributed Stakeholders
par: Yim, Keun Soo, et autres
Publié: (2024)

DecipherGuard: Understanding and Deciphering Jailbreak Prompts for a Safer Deployment of Intelligent Software Systems
par: Yang, Rui, et autres
Publié: (2025)

Vulnerability Patching Across Software Products and Software Components: A Case Study of Red Hat's Product Portfolio
par: Ruohonen, Jukka, et autres
Publié: (2025)

DITING: A Static Analyzer for Identifying Bad Partitioning Issues in TEE Applications
par: Ma, Chengyan, et autres
Publié: (2025)

Usability as a Weapon: Attacking the Safety of LLM-Based Code Generation via Usability Requirements
par: Li, Yue, et autres
Publié: (2026)

Software Supply Chain Security of Web3
par: Monperrus, Martin
Publié: (2025)

Operationalizing Research Software for Supply Chain Security
par: Kalu, Kelechi G., et autres
Publié: (2026)

WACANA: A Concolic Analyzer for Detecting On-chain Data Vulnerabilities in WASM Smart Contracts
par: Wang, Wansen, et autres
Publié: (2024)

Model Context Protocol Threat Modeling and Analyzing Vulnerabilities to Prompt Injection with Tool Poisoning
par: Huang, Charoes, et autres
Publié: (2026)