Imagen de Portada

Analysis of Commit Signing on Github

Fuente: arXiv

Guardado en:

Detalles Bibliográficos
Autores principales:	Shittu, Abubakar Sadiq, Sadik, John, Gholamrezae, Farzin, Ruoti, Scott
Formato:	Preprint
Publicado:	2026
Materias:	Software Engineering Cryptography and Security
Acceso en línea:	Acceder al recurso
Etiquetas:	Agregar Etiqueta Sin Etiquetas, Sea el primero en etiquetar este registro!

Ejemplares similares

Understanding Student Experiences with TLS Client Authentication
por: Shittu, Abubakar Sadiq, et al.
Publicado: (2026)

On the Prevalence and Usage of Commit Signing on GitHub: A Longitudinal and Cross-Domain Study
por: Sharma, Anupam, et al.
Publicado: (2025)

CrossCommitVuln-Bench: A Dataset of Multi-Commit Python Vulnerabilities Invisible to Per-Commit Static Analysis
por: Majumdar, Arunabh
Publicado: (2026)

PatchSeeker: Mapping NVD Records to their Vulnerability-fixing Commits with LLM Generated Commits and Embeddings
por: Nguyen, Huu Hung, et al.
Publicado: (2025)

Mapping NVD Records to Their Vulnerability-fixing Commits: How Hard is It?
por: Nguyen, Huu Hung, et al.
Publicado: (2025)

MAS-SZZ: Multi-Agentic SZZ Algorithm for Vulnerability-Inducing Commit Identification
por: Cao, Sicong, et al.
Publicado: (2026)

CleanVul: Automatic Function-Level Vulnerability Detection in Code Commits Using LLM Heuristics
por: Li, Yikun, et al.
Publicado: (2024)

A Longitudinal Study of Usability in Identity-Based Software Signing
por: Kalu, Kelechi G., et al.
Publicado: (2026)

An Industry Interview Study of Software Signing for Supply Chain Security
por: Kalu, Kelechi G., et al.
Publicado: (2024)

Establishing Provenance Before Coding: Traditional and Next-Gen Software Signing
por: Schorlemmer, Taylor R., et al.
Publicado: (2024)

Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors
por: Schorlemmer, Taylor R, et al.
Publicado: (2024)

DiVerify: Hardening Identity-Based Software Signing with Diverse-Context Scopes
por: Okafor, Chinenye, et al.
Publicado: (2024)

Why Johnny Adopts Identity-Based Software Signing: A Usability Case Study of Sigstore
por: Kalu, Kelechi G., et al.
Publicado: (2025)

Ocassionally Secure: A Comparative Analysis of Code Generation Assistants
por: Elgedawy, Ran, et al.
Publicado: (2024)

A Universal System for OpenID Connect Sign-ins with Verifiable Credentials and Cross-Device Flow
por: Hoops, Felix, et al.
Publicado: (2024)

Transforming Information Systems Management: A Reference Model for Digital Engineering Integration
por: Bonar, John, et al.
Publicado: (2024)

Automated Mapping of Vulnerability Advisories onto their Fix Commits in Open Source Repositories
por: Hommersom, Daan, et al.
Publicado: (2021)

Mutation-based Evaluation of Cryptographic API Misuse Detectors
por: Ami, Amit Seal, et al.
Publicado: (2021)

Fuzzing BusyBox: Leveraging LLM and Crash Reuse for Embedded Bug Unearthing
por: Asmita, et al.
Publicado: (2024)

Code-Centric Detection of Vulnerability-Fixing Commits: A Unified Benchmark and Empirical Study
por: Loose, Nils, et al.
Publicado: (2026)

Cross-Ecosystem Vulnerability Analysis for Python Applications
por: Alexopoulos, Georgios, et al.
Publicado: (2026)

A Guide to Stakeholder Analysis for Cybersecurity Researchers
por: Davis, James C, et al.
Publicado: (2025)

A Mapping Analysis of Requirements Between the CRA and the GDPR
por: Ruohonen, Jukka, et al.
Publicado: (2025)

Profile of Vulnerability Remediations in Dependencies Using Graph Analysis
por: Vera, Fernando, et al.
Publicado: (2024)

An Empirical Analysis of EOS Blockchain: Architecture, Contract, and Security
por: Liu, Haiyang, et al.
Publicado: (2025)

SBOM Generation Tools in the Python Ecosystem: an In-Detail Analysis
por: Cofano, Serena, et al.
Publicado: (2024)

A Static Analysis of Popular C Packages in Linux
por: Ruohonen, Jukka, et al.
Publicado: (2024)

Toward an Android Static Analysis Approach for Data Protection
por: Khedkar, Mugdha, et al.
Publicado: (2024)

Harnessing the Power of LLM to Support Binary Taint Analysis
por: Liu, Puzhuo, et al.
Publicado: (2023)

On-Chain Analysis of Smart Contract Dependency Risks on Ethereum
por: Jin, Monica, et al.
Publicado: (2025)

An Analysis of Malicious Packages in Open-Source Software in the Wild
por: Zhou, Xiaoyan, et al.
Publicado: (2024)

SAGA: Detecting Security Vulnerabilities Using Static Aspect Analysis
por: Marquer, Yoann, et al.
Publicado: (2026)

Guiding Symbolic Execution with Static Analysis and LLMs for Vulnerability Discovery
por: Shafiuzzaman, Md, et al.
Publicado: (2026)

ARAP: Demystifying Anti Runtime Analysis Code in Android Apps
por: Suo, Dewen, et al.
Publicado: (2024)

Microservice Vulnerability Analysis: A Literature Review with Empirical Insights
por: Jayalath, Raveen Kanishka, et al.
Publicado: (2024)

Tracking GPTs Third Party Service: Automation, Analysis, and Insights
por: Yan, Chuan, et al.
Publicado: (2025)

WildCode: An Empirical Analysis of Code Generated by ChatGPT
por: Khanmohammadi, Kobra, et al.
Publicado: (2025)

Software Security Analysis in 2030 and Beyond: A Research Roadmap
por: Böhme, Marcel, et al.
Publicado: (2024)

UEFI Vulnerability Signature Generation using Static and Symbolic Analysis
por: Shafiuzzaman, Md, et al.
Publicado: (2024)

Software Supply Chain Smells: Lightweight Analysis for Secure Dependency Management
por: Schmid, Larissa, et al.
Publicado: (2026)