115 citations · 281 across the 27 of their papers we have counts for
21 papers · 1 filter
One Is Not Enough: The Untold Story of Multiple Security Patches for One Vulnerability
Fangyuan Zhang, Lyuye Zhang, Lingling Fan +6
Security patches (SPs) are the main mechanism for fixing software vulnerabilities, yet a single vulnerability is not always resolved by a single patch: fixes may be completed incre…
Open Source, Hidden Costs: A Systematic Literature Review on OSS License Management
Boyuan Li, Chengwei Liu, Lingling Fan +3
Integrating third-party software components is a common practice in modern software development, offering significant advantages in terms of efficiency and innovation. However, thi…
A Comprehensive Study on Static Application Security Testing (SAST) Tools for Android
Jingyun Zhu, Kaixuan Li, Sen Chen +3
To identify security vulnerabilities in Android applications, numerous static application security testing (SAST) tools have been proposed. However, it poses significant challenges…
Does the Vulnerability Threaten Our Projects? Automated Vulnerable API Detection for Third-Party Libraries
Fangyuan Zhang, Lingling Fan, Sen Chen +3
Developers usually use TPLs to facilitate the development of the projects to avoid reinventing the wheels, however, the vulnerable TPLs indeed cause severe security threats. The ma…
Scene-Driven Exploration and GUI Modeling for Android Apps
Xiangyu Zhang, Lingling Fan, Sen Chen +2
Due to the competitive environment, mobile apps are usually produced under pressure with lots of complicated functionality and UI pages. Therefore, it is challenging for various ro…
Automated and Context-Aware Repair of Color-Related Accessibility Issues for Android Apps
Yuxin Zhang, Sen Chen, Lingling Fan +2
Approximately 15% of the world's population is suffering from various disabilities or impairments. However, many mobile UX designers and developers disregard the significance of ac…
Mitigating Persistence of Open-Source Vulnerabilities in Maven Ecosystem
Lyuye Zhang, Chengwei Liu, Sen Chen +5
Vulnerabilities from third-party libraries (TPLs) have been unveiled to threaten the Maven ecosystem. Despite patches being released promptly after vulnerabilities are disclosed, t…
A Comprehensive Empirical Study of Bugs in Open-Source Federated Learning Frameworks
Weijie Shao, Yuyang Gao, Fu Song +3
Federated learning (FL) is a distributed machine learning (ML) paradigm, allowing multiple clients to collaboratively train shared machine learning (ML) models without exposing cli…
Compatible Remediation on Vulnerabilities from Third-Party Libraries for Java Projects
Lyuye Zhang, Chengwei Liu, Zhengzi Xu +5
With the increasing disclosure of vulnerabilities in open-source software, software composition analysis (SCA) has been widely applied to reveal third-party libraries and the assoc…
Has My Release Disobeyed Semantic Versioning? Static Detection Based on Semantic Differencing
Lyuye Zhang, Chengwei Liu, Zhengzi Xu +4
To enhance the compatibility in the version control of Java Third-party Libraries (TPLs), Maven adopts Semantic Versioning (SemVer) to standardize the underlying meaning of version…
LiDetector: License Incompatibility Detection for Open Source Software
Sihan Xu, Ya Gao, Lingling Fan +3
Open-source software (OSS) licenses dictate the conditions which should be followed to reuse, distribute, and modify the software. Apart from widely-used licenses such as the MIT L…
Accessible or Not? An Empirical Investigation of Android App Accessibility
Sen Chen, Chunyang Chen, Lingling Fan +3
Mobile apps provide new opportunities to people with disabilities to act independently in the world. Motivated by this trend, researchers have conducted empirical studies by using…
Automatically Distilling Storyboard with Rich Features for Android Apps
Sen Chen, Lingling Fan, Chunyang Chen +1
Before developing a new mobile app, the development team usually endeavors painstaking efforts to review many existing apps with similar purposes. The review process is crucial in…
Demystifying the Vulnerability Propagation and Its Evolution via Dependency Trees in the NPM Ecosystem
Chengwei Liu, Sen Chen, Lingling Fan +3
Third-party libraries with rich functionalities facilitate the fast development of Node.js software, but also bring new security threats that vulnerabilities could be introduced th…
Research on Third-Party Libraries in AndroidApps: A Taxonomy and Systematic LiteratureReview
Xian Zhan, Tianming Liu, Lingling Fan +4
Third-party libraries (TPLs) have been widely used in mobile apps, which play an essential part in the entire Android ecosystem. However, TPL is a double-edged sword. On the one ha…
ATVHunter: Reliable Version Detection of Third-Party Libraries for Vulnerability Identification in Android Applications
Xian Zhan, Lingling Fan, Sen Chen +4
We propose a system, named ATVHunter, which can pinpoint the precise vulnerable in-app TPL versions and provide detailed information about the vulnerabilities and TPLs. We propose…
CORE: Automating Review Recommendation for Code Changes
JingKai Siow, Cuiyun Gao, Lingling Fan +2
Code review is a common process that is used by developers, in which a reviewer provides useful comments or points out defects in the submitted source code changes via pull request…
StoryDroid: Automated Generation of Storyboard for Android Apps
Sen Chen, Lingling Fan, Chunyang Chen +4
Mobile apps are now ubiquitous. Before developing a new app, the development team usually endeavors painstaking efforts to review many existing apps with similar purposes. The revi…
Efficiently Manifesting Asynchronous Programming Errors in Android Apps
Lingling Fan, Ting Su, Sen Chen +4
Android, the #1 mobile app framework, enforces the single-GUI-thread model, in which a single UI thread manages GUI rendering and event dispatching. Due to this model, it is vital…
Towards Efficient Data-flow Test Data Generation
Ting Su, Chengyu Zhang, Yichen Yan +5
Data-flow testing (DFT) aims to detect potential data interaction anomalies by focusing on the points at which variables receive values and the points at which these values are use…
Large-Scale Analysis of Framework-Specific Exceptions in Android Apps
Lingling Fan, Ting Su, Sen Chen +5
Mobile apps have become ubiquitous. For app developers, it is a key priority to ensure their apps' correctness and reliability. However, many apps still suffer from occasional to f…