Software Composition Analysis for Vulnerability Detection: An Empirical Study on Java Projects-Reference-Cited by-同舟云学术

Software Composition Analysis for Vulnerability Detection: An Empirical Study on Java Projects

Published:2023-11-30 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering
language:
Short-container-title:

Author:

Zhao Lida¹,Chen Sen²,Xu Zhengzi³,Liu Chengwei³,Zhang Lyuye³,Wu Jiahui³,Sun Jun⁴,Liu Yang³

Affiliation:

1. Singapore Management University, Nanyang Technological University, Singapore, Singapore

2. Tianjin University, Tianjin, China

3. Nanyang Technological University, Singapore, Singapore

4. Singapore Management University, Singapore, Singapore

Funder

Academic Research Fund Tier 3

National Cybersecurity R&D Programme

National Research Foundation, Singapore

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3611643.3616299

Reference68 articles.

1. 2021. Google Online Security Blog: Understanding the Impact of Apache Log4j Vulnerability. https://security.googleblog.com/2021/12/understanding-impact-of-apache-log4j.html 2021. Google Online Security Blog: Understanding the Impact of Apache Log4j Vulnerability. https://security.googleblog.com/2021/12/understanding-impact-of-apache-log4j.html

2. 2021. Maven Pom Descriptor Reference documentation. https://maven.apache.org/ref/3.8.5/maven-model/maven.html 2021. Maven Pom Descriptor Reference documentation. https://maven.apache.org/ref/3.8.5/maven-model/maven.html

3. 2021. OWASP Dependency-Check Project - OWASP. https://owasp.org/www-project-dependency-check/ 2021. OWASP Dependency-Check Project - OWASP. https://owasp.org/www-project-dependency-check/

4. 2021. Software dependencies: How to manage dependencies at scale | Why you should manage open source dependencies. https://snyk.io/series/open-source-security/software-dependencies/#managing-open-source-dependencies 2021. Software dependencies: How to manage dependencies at scale | Why you should manage open source dependencies. https://snyk.io/series/open-source-security/software-dependencies/#managing-open-source-dependencies

5. 2022. Component Analysis OWASP Foundation. https://owasp.org/www-community/Component_Analysis 2022. Component Analysis OWASP Foundation. https://owasp.org/www-community/Component_Analysis

Cited by 6 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. PatchFinder: A Two-Phase Approach to Security Patch Tracing for Disclosed Vulnerabilities in Open-Source Software;Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis;2024-09-11

2. GRACE: Empowering LLM-based software vulnerability detection with graph structure and in-context learning;Journal of Systems and Software;2024-06

3. Vul4Java: A Java OSS vulnerability identification method based on a two-stage analysis;International Conference on Algorithms, Software Engineering, and Network Security;2024-04-26

4. Vulnerability Root Cause Function Locating For Java Vulnerabilities;Proceedings of the 2024 IEEE/ACM 46th International Conference on Software Engineering: Companion Proceedings;2024-04-14

5. Empirical Analysis of Vulnerabilities Life Cycle in Golang Ecosystem;Proceedings of the IEEE/ACM 46th International Conference on Software Engineering;2024-04-12