Up2Dep: Android Tool Support to Fix Insecure Code Dependencies-Reference-Cited by-同舟云学术

Up2Dep: Android Tool Support to Fix Insecure Code Dependencies

Published:2020-12-07 Issue: Volume: Page:
ISSN:
Container-title:Annual Computer Security Applications Conference
language:
Short-container-title:

Author:

Nguyen Duc Cuong¹,Derr Erik¹,Backes Michael¹,Bugiel Sven¹

Affiliation:

1. CISPA Helmholtz Center for Information Security, Germany

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3427228.3427658

Reference47 articles.

1. Accessed 2016. 2016 State of the Software Supply Chain. https://www.sonatype.com/software-supply-chain. Accessed 2016. 2016 State of the Software Supply Chain. https://www.sonatype.com/software-supply-chain.

2. Accessed 2018. Gradle Build Tool. https://gradle.org/. Accessed 2018. Gradle Build Tool. https://gradle.org/.

3. Accessed 2018. Lint Tool. http://tools.android.com/tips/lint. Accessed 2018. Lint Tool. http://tools.android.com/tips/lint.

4. Accessed 2018. Top most popular libraries on Maven. https://mvnrepository.com/popular. Accessed 2018. Top most popular libraries on Maven. https://mvnrepository.com/popular.

5. Accessed 2019. Cognicrypt Crypto API rules. https://github.com/CROSSINGTUD/Crypto-API-Rules. Accessed 2019. Cognicrypt Crypto API rules. https://github.com/CROSSINGTUD/Crypto-API-Rules.

Cited by 7 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Security Evaluation of Companion Android Applications in IoT: The Case of Smart Security Devices;Sensors;2024-08-23

2. One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware;IEEE Transactions on Dependable and Secure Computing;2023

3. A large-scale empirical analysis of the vulnerabilities introduced by third-party components in IoT firmware;Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis;2022-07-18

4. On the impact of security vulnerabilities in the npm and RubyGems dependency networks;Empirical Software Engineering;2022-05-30

5. Characterizing usages, updates and risks of third-party libraries in Java projects;Empirical Software Engineering;2022-04-14