81 citations · 204 across the 10 of their papers we have counts for
11 papers
Automatic Diversity in the Software Supply Chain
Nicolas Harrand, Thomas Durieux, David Broman +1
Despite its obvious benefits, the increased adoption of package managers to automate the reuse of libraries has opened the door to a new class of hazards: supply chain attacks. By…
The Behavioral Diversity of Java JSON Libraries
Nicolas Harrand, Thomas Durieux, David Broman +1
JSON is an essential file and data format in do-mains that span scientific computing, web APIs or configuration management. Its popularity has motivated significant software develo…
Sorald: Automatic Patch Suggestions for SonarQube Static Analysis Violations
Khashayar Etemadi, Nicolas Harrand, Simon Larsen +6
Previous work has shown that early resolution of issues detected by static code analyzers can prevent major costs later on. However, developers often ignore such issues for two mai…
Coverage-Based Debloating for Java Bytecode
César Soto-Valero, Thomas Durieux, Nicolas Harrand +1
Software bloat is code that is packaged in an application but is actually not necessary to run the application. The presence of software bloat is an issue for security, for perform…
Java Decompiler Diversity and its Application to Meta-decompilation
Nicolas Harrand, César Soto-Valero, Martin Monperrus +1
During compilation from Java source code to bytecode, some information is irreversibly lost. In other words, compilation and decompilation of Java code is not symmetric. Consequent…
A Comprehensive Study of Bloated Dependencies in the Maven Ecosystem
César Soto-Valero, Nicolas Harrand, Martin Monperrus +1
Build automation tools and package managers have a profound influence on software development. They facilitate the reuse of third-party libraries, support a clear separation betwee…
The Strengths and Behavioral Quirks of Java Bytecode Decompilers
Nicolas Harrand, César Soto-Valero, Martin Monperrus +1
During compilation from Java source code to bytecode, some information is irreversibly lost. In other words, compilation and decompilation of Java code is not symmetric. Consequent…
API Beauty is in the eye of the Clients: 2.2 Million Maven Dependencies reveal the Spectrum of Client-API Usages
Nicolas Harrand, Amine Benelallam, César Soto-Valero +3
Hyrum's law states a common observation in the software industry: "With a sufficient number of users of an API, it does not matter what you promise in the contract: all observable…
The Emergence of Software Diversity in Maven Central
César Soto-Valero, Amine Benelallam, Nicolas Harrand +2
Maven artifacts are immutable: an artifact that is uploaded on Maven Central cannot be removed nor modified. The only way for developers to upgrade their library is to release a ne…
The Maven Dependency Graph: a Temporal Graph-based Representation of Maven Central
Amine Benelallam, Nicolas Harrand, César Soto Valero +2
The Maven Central Repository provides an extraordinary source of data to understand complex architecture and evolution phenomena among Java applications. As of September 6, 2018, t…
A Journey Among Java Neutral Program Variants
Nicolas Harrand, Simon Allier, Marcelino Rodriguez-Cancio +2
Neutral program variants are functionally similar to an original program, yet implement slightly different behaviors. Techniques such as approximate computing or genetic improvemen…