Cover Image

How Reliable Are FOSS Popularity Metrics? Analyzing the Effort Required for Spoofing Common Software Popularity Metrics

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Swierzy, Ben, Pohl, Timo, Ohm, Marc, Meier, Michael
Format:	Preprint
Published:	2025
Subjects:	Cryptography and Security Software Engineering
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web
by: Swierzy, Ben, et al.
Published: (2025)

SoK: Towards Reproducibility for Software Packages in Scripting Language Ecosystems
by: Pohl, Timo, et al.
Published: (2025)

The Popularity Hypothesis in Software Security: A Large-Scale Replication with PHP Packages
by: Ruohonen, Jukka, et al.
Published: (2025)

ARMS: A Vision for Actor Reputation Metric Systems in the Open-Source Software Supply Chain
by: Kalu, Kelechi G., et al.
Published: (2025)

Vulnerability Detection in Popular Programming Languages with Language Models
by: Atiiq, Syafiq Al, et al.
Published: (2024)

A Static Analysis of Popular C Packages in Linux
by: Ruohonen, Jukka, et al.
Published: (2024)

Challenges in Developing Secure Software -- Results of an Interview Study in the German Software Industry
by: Mattukat, Alex R., et al.
Published: (2025)

RiskHarvester: A Risk-based Tool to Prioritize Secret Removal Efforts in Software Artifacts
by: Basak, Setu Kumar, et al.
Published: (2025)

Lightweight Vulnerability Detection from Code Metrics and Token Features
by: Chiu, Chun Yin
Published: (2026)

An Empirical Study on the Distance Metric in Guiding Directed Grey-box Fuzzing
by: Wen, Tingke, et al.
Published: (2024)

Six Million (Suspected) Fake Stars in GitHub: A Growing Spiral of Popularity Contests, Spams, and Malware
by: He, Hao, et al.
Published: (2024)

Assessing Vulnerability in Smart Contracts: The Role of Code Complexity Metrics in Security Analysis
by: Tehrani, Masoud Jamshidiyan
Published: (2024)

How to Secure Existing C and C++ Software without Memory Safety
by: Erlingsson, Úlfar
Published: (2025)

Toward Automated Security Risk Detection in Large Software Using Call Graph Analysis
by: Pecka, Nicholas, et al.
Published: (2025)

Privacy and Confidentiality Requirements Engineering for Process Data
by: Haertel, Fabian, et al.
Published: (2025)

Developments in Connected Vehicles and the Requirement for Increased Cybersecurity
by: Garrad, Phillip, et al.
Published: (2021)

Evaluating Software Supply Chain Security in Research Software
by: Hegewald, Richard, et al.
Published: (2025)

An Empirical Study of Bitwise Operators Intuitiveness through Performance Metrics
by: Joshi, Shubham
Published: (2025)

LLM-based Vulnerability Discovery through the Lens of Code Metrics
by: Weissberg, Felix, et al.
Published: (2025)

Tracking Down Software Cluster Bombs: A Current State Analysis of the Free/Libre and Open Source Software (FLOSS) Ecosystem
by: Tatschner, Stefan, et al.
Published: (2025)

A Mapping Analysis of Requirements Between the CRA and the GDPR
by: Ruohonen, Jukka, et al.
Published: (2025)

A Requirement-Based Framework for Engineering Adaptive Authentication
by: Hassan, Alzubair, et al.
Published: (2026)

Software Security in Software-Defined Networking: A Systematic Literature Review
by: Diouf, Moustapha Awwalou, et al.
Published: (2025)

An Alignment Between the CRA's Essential Requirements and the ATT&CK's Mitigations
by: Ruohonen, Jukka, et al.
Published: (2025)

A Faceted Classification of Authenticator-Centric Authentication Techniques
by: Mattukat, Alex R., et al.
Published: (2026)

Software Bill of Materials in Software Supply Chain Security A Systematic Literature Review
by: O'Donoghue, Eric, et al.
Published: (2025)

SCALE: Constructing Structured Natural Language Comment Trees for Software Vulnerability Detection
by: Wen, Xin-Cheng, et al.
Published: (2024)

Leveraging Large Language Models for Command Injection Vulnerability Analysis in Python: An Empirical Study on Popular Open-Source Projects
by: Wang, Yuxuan, et al.
Published: (2025)

Where Do Smart Contract Security Analyzers Fall Short?
by: Abdelaziz, Tamer, et al.
Published: (2026)

Transparency in App Analytics: Analyzing the Collection of User Interaction Data
by: Tang, Feiyang, et al.
Published: (2023)

An Introduction to Adaptive Software Security
by: Nia, Mehran Alidoost
Published: (2023)

TREBLE: Fast Software Updates by Creating an Equilibrium in an Active Software Ecosystem of Globally Distributed Stakeholders
by: Yim, Keun Soo, et al.
Published: (2024)

DecipherGuard: Understanding and Deciphering Jailbreak Prompts for a Safer Deployment of Intelligent Software Systems
by: Yang, Rui, et al.
Published: (2025)

Vulnerability Patching Across Software Products and Software Components: A Case Study of Red Hat's Product Portfolio
by: Ruohonen, Jukka, et al.
Published: (2025)

DITING: A Static Analyzer for Identifying Bad Partitioning Issues in TEE Applications
by: Ma, Chengyan, et al.
Published: (2025)

Usability as a Weapon: Attacking the Safety of LLM-Based Code Generation via Usability Requirements
by: Li, Yue, et al.
Published: (2026)

Software Supply Chain Security of Web3
by: Monperrus, Martin
Published: (2025)

Operationalizing Research Software for Supply Chain Security
by: Kalu, Kelechi G., et al.
Published: (2026)

WACANA: A Concolic Analyzer for Detecting On-chain Data Vulnerabilities in WASM Smart Contracts
by: Wang, Wansen, et al.
Published: (2024)

Model Context Protocol Threat Modeling and Analyzing Vulnerabilities to Prompt Injection with Tool Poisoning
by: Huang, Charoes, et al.
Published: (2026)