Software Composition Analysis for Vulnerability Detection: An Empirical Study on Java Projects-Reference-Cited by-同舟云学术

Software Composition Analysis for Vulnerability Detection: An Empirical Study on Java Projects

Published:2023-11-30 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering
language:
Short-container-title:

Author:

Zhao Lida¹,Chen Sen²,Xu Zhengzi³,Liu Chengwei³,Zhang Lyuye³,Wu Jiahui³,Sun Jun⁴,Liu Yang³

Affiliation:

1. Singapore Management University, Nanyang Technological University, Singapore, Singapore

2. Tianjin University, Tianjin, China

3. Nanyang Technological University, Singapore, Singapore

4. Singapore Management University, Singapore, Singapore

Funder

Academic Research Fund Tier 3

National Cybersecurity R&D Programme

National Research Foundation, Singapore

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3611643.3616299

Reference68 articles.

1. 2021. Google Online Security Blog: Understanding the Impact of Apache Log4j Vulnerability. https://security.googleblog.com/2021/12/understanding-impact-of-apache-log4j.html 2021. Google Online Security Blog: Understanding the Impact of Apache Log4j Vulnerability. https://security.googleblog.com/2021/12/understanding-impact-of-apache-log4j.html

2. 2021. Maven Pom Descriptor Reference documentation. https://maven.apache.org/ref/3.8.5/maven-model/maven.html 2021. Maven Pom Descriptor Reference documentation. https://maven.apache.org/ref/3.8.5/maven-model/maven.html

3. 2021. OWASP Dependency-Check Project - OWASP. https://owasp.org/www-project-dependency-check/ 2021. OWASP Dependency-Check Project - OWASP. https://owasp.org/www-project-dependency-check/

4. 2021. Software dependencies: How to manage dependencies at scale | Why you should manage open source dependencies. https://snyk.io/series/open-source-security/software-dependencies/#managing-open-source-dependencies 2021. Software dependencies: How to manage dependencies at scale | Why you should manage open source dependencies. https://snyk.io/series/open-source-security/software-dependencies/#managing-open-source-dependencies

5. 2022. Component Analysis OWASP Foundation. https://owasp.org/www-community/Component_Analysis 2022. Component Analysis OWASP Foundation. https://owasp.org/www-community/Component_Analysis

Cited by 1 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Security in Cloud-Native Services: A Survey;Journal of Cybersecurity and Privacy;2023-10-26