Imagen de Portada

How Reliable Are FOSS Popularity Metrics? Analyzing the Effort Required for Spoofing Common Software Popularity Metrics

Fuente: arXiv

Guardado en:

Detalles Bibliográficos
Autores principales:	Swierzy, Ben, Pohl, Timo, Ohm, Marc, Meier, Michael
Formato:	Preprint
Publicado:	2025
Materias:	Cryptography and Security Software Engineering
Acceso en línea:	Acceder al recurso
Etiquetas:	Agregar Etiqueta Sin Etiquetas, Sea el primero en etiquetar este registro!

Ejemplares similares

Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web
por: Swierzy, Ben, et al.
Publicado: (2025)

SoK: Towards Reproducibility for Software Packages in Scripting Language Ecosystems
por: Pohl, Timo, et al.
Publicado: (2025)

The Popularity Hypothesis in Software Security: A Large-Scale Replication with PHP Packages
por: Ruohonen, Jukka, et al.
Publicado: (2025)

ARMS: A Vision for Actor Reputation Metric Systems in the Open-Source Software Supply Chain
por: Kalu, Kelechi G., et al.
Publicado: (2025)

Vulnerability Detection in Popular Programming Languages with Language Models
por: Atiiq, Syafiq Al, et al.
Publicado: (2024)

A Static Analysis of Popular C Packages in Linux
por: Ruohonen, Jukka, et al.
Publicado: (2024)

Challenges in Developing Secure Software -- Results of an Interview Study in the German Software Industry
por: Mattukat, Alex R., et al.
Publicado: (2025)

RiskHarvester: A Risk-based Tool to Prioritize Secret Removal Efforts in Software Artifacts
por: Basak, Setu Kumar, et al.
Publicado: (2025)

Lightweight Vulnerability Detection from Code Metrics and Token Features
por: Chiu, Chun Yin
Publicado: (2026)

An Empirical Study on the Distance Metric in Guiding Directed Grey-box Fuzzing
por: Wen, Tingke, et al.
Publicado: (2024)

Six Million (Suspected) Fake Stars in GitHub: A Growing Spiral of Popularity Contests, Spams, and Malware
por: He, Hao, et al.
Publicado: (2024)

Assessing Vulnerability in Smart Contracts: The Role of Code Complexity Metrics in Security Analysis
por: Tehrani, Masoud Jamshidiyan
Publicado: (2024)

How to Secure Existing C and C++ Software without Memory Safety
por: Erlingsson, Úlfar
Publicado: (2025)

Toward Automated Security Risk Detection in Large Software Using Call Graph Analysis
por: Pecka, Nicholas, et al.
Publicado: (2025)

Privacy and Confidentiality Requirements Engineering for Process Data
por: Haertel, Fabian, et al.
Publicado: (2025)

Developments in Connected Vehicles and the Requirement for Increased Cybersecurity
por: Garrad, Phillip, et al.
Publicado: (2021)

Evaluating Software Supply Chain Security in Research Software
por: Hegewald, Richard, et al.
Publicado: (2025)

An Empirical Study of Bitwise Operators Intuitiveness through Performance Metrics
por: Joshi, Shubham
Publicado: (2025)

LLM-based Vulnerability Discovery through the Lens of Code Metrics
por: Weissberg, Felix, et al.
Publicado: (2025)

Tracking Down Software Cluster Bombs: A Current State Analysis of the Free/Libre and Open Source Software (FLOSS) Ecosystem
por: Tatschner, Stefan, et al.
Publicado: (2025)

A Mapping Analysis of Requirements Between the CRA and the GDPR
por: Ruohonen, Jukka, et al.
Publicado: (2025)

A Requirement-Based Framework for Engineering Adaptive Authentication
por: Hassan, Alzubair, et al.
Publicado: (2026)

Software Security in Software-Defined Networking: A Systematic Literature Review
por: Diouf, Moustapha Awwalou, et al.
Publicado: (2025)

An Alignment Between the CRA's Essential Requirements and the ATT&CK's Mitigations
por: Ruohonen, Jukka, et al.
Publicado: (2025)

A Faceted Classification of Authenticator-Centric Authentication Techniques
por: Mattukat, Alex R., et al.
Publicado: (2026)

Software Bill of Materials in Software Supply Chain Security A Systematic Literature Review
por: O'Donoghue, Eric, et al.
Publicado: (2025)

SCALE: Constructing Structured Natural Language Comment Trees for Software Vulnerability Detection
por: Wen, Xin-Cheng, et al.
Publicado: (2024)

Leveraging Large Language Models for Command Injection Vulnerability Analysis in Python: An Empirical Study on Popular Open-Source Projects
por: Wang, Yuxuan, et al.
Publicado: (2025)

Where Do Smart Contract Security Analyzers Fall Short?
por: Abdelaziz, Tamer, et al.
Publicado: (2026)

Transparency in App Analytics: Analyzing the Collection of User Interaction Data
por: Tang, Feiyang, et al.
Publicado: (2023)

An Introduction to Adaptive Software Security
por: Nia, Mehran Alidoost
Publicado: (2023)

TREBLE: Fast Software Updates by Creating an Equilibrium in an Active Software Ecosystem of Globally Distributed Stakeholders
por: Yim, Keun Soo, et al.
Publicado: (2024)

DecipherGuard: Understanding and Deciphering Jailbreak Prompts for a Safer Deployment of Intelligent Software Systems
por: Yang, Rui, et al.
Publicado: (2025)

Vulnerability Patching Across Software Products and Software Components: A Case Study of Red Hat's Product Portfolio
por: Ruohonen, Jukka, et al.
Publicado: (2025)

DITING: A Static Analyzer for Identifying Bad Partitioning Issues in TEE Applications
por: Ma, Chengyan, et al.
Publicado: (2025)

Usability as a Weapon: Attacking the Safety of LLM-Based Code Generation via Usability Requirements
por: Li, Yue, et al.
Publicado: (2026)

Software Supply Chain Security of Web3
por: Monperrus, Martin
Publicado: (2025)

Operationalizing Research Software for Supply Chain Security
por: Kalu, Kelechi G., et al.
Publicado: (2026)

WACANA: A Concolic Analyzer for Detecting On-chain Data Vulnerabilities in WASM Smart Contracts
por: Wang, Wansen, et al.
Publicado: (2024)

Model Context Protocol Threat Modeling and Analyzing Vulnerabilities to Prompt Injection with Tool Poisoning
por: Huang, Charoes, et al.
Publicado: (2026)