Supply-Chain Vulnerability Elimination via Active Learning and Regeneration-Reference-Cited by-同舟云学术

Supply-Chain Vulnerability Elimination via Active Learning and Regeneration

Published:2021-11-12 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security
language:
Short-container-title:

Author:

Vasilakis Nikos¹,Benetopoulos Achilles²,Handa Shivam¹,Schoen Alizee¹,Shen Jiasi¹,Rinard Martin C.¹

Affiliation:

1. Massachusetts Institute of Technology, Cambridge, MA, USA

2. University of California, Santa Cruz, Santa Cruz, CA, USA

Funder

DARPA

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3460120.3484736

Reference70 articles.

1. JSand

2. Oscar Bolmsten. 2017. Malicious Package: crossenv and other 36 malicious packages. https://snyk.io/vuln/npm:crossenv:20170802 Accessed: 2019-03--19. Oscar Bolmsten. 2017. Malicious Package: crossenv and other 36 malicious packages. https://snyk.io/vuln/npm:crossenv:20170802 Accessed: 2019-03--19.

Cited by 11 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Software supply chain security: a systematic literature review;International Journal of Computers and Applications;2024-08-19

2. Software Engineering Research in a World with Generative Artificial Intelligence;Proceedings of the IEEE/ACM 46th International Conference on Software Engineering;2024-05-20

3. SIRO: Empowering Version Compatibility in Intermediate Representations via Program Synthesis;Proceedings of the 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 3;2024-04-27

4. An Empirical Study on Using Large Language Models to Analyze Software Supply Chain Security Failures;Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses;2023-11-26

5. Poster: Using CodeQL to Detect Malware in npm;Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security;2023-11-15