8 citations · 9 across the 8 of their papers we have counts for
8 papers
Trusting-Trust Attack against an Entire Linux Distribution through Binary Manipulation
Julien Malka, Aman Sharma, Martin Monperrus +2
Ken Thompson's trusting-trust attack, in which a compromised compiler backdoors the programs it builds and reproduces the backdoor in subsequent rebuilds of itself, is widely regar…
Understanding Build Reproducibility in the F-Droid Ecosystem
Denise Nanni, Julien Malka, Stefano Zacchiroli +2
The security of open source applications benefits considerably from the possibility of rebuilding their source and verifying the output. F-Droid, a prominent distribution for open…
Mutating the "Immutable": A Large-Scale Study of Git Tag Alterations
Solal Rapaport, Laurent Pautet, Samuel Tardieu +2
Git tags are commonly viewed as immutable references in software development, marking releases and specific repository states that underpin build reproducibility and software suppl…
NICE: A Framework for Declarative and Machine-Checkable Vulnerability Reproduction
Minh-Luân Nguyen, Olivier Levillain, Julien Malka +2
Reproducing software vulnerabilities is fundamental to security researchers, open-source maintainers, and educators. Yet, vulnerabilities remain hard to reproduce today, and even w…
Docker Does Not Guarantee Reproducibility
Julien Malka, Stefano Zacchiroli, Théo Zimmermann
The reproducibility of software environments is a critical concern in modern software engineering, with ramifications ranging from the effectiveness of collaboration workflows to s…
Does Functional Package Management Enable Reproducible Builds at Scale? Yes
Julien Malka, Stefano Zacchiroli, Théo Zimmermann
Reproducible Builds (R-B) guarantee that rebuilding a software package from source leads to bitwise identical artifacts. R-B is a promising approach to increase the integrity of th…
The Impact of the COVID-19 Pandemic on Women's Contribution to Public Code
Annalí Casanueva, Davide Rossi, Stefano Zacchiroli +1
Despite its promise of openness and inclusiveness, the development of free and open source software (FOSS) remains significantly unbalanced in terms of gender representation among…
Reproducibility of Build Environments through Space and Time
Julien Malka, Stefano Zacchiroli, Théo Zimmermann
Modern software engineering builds up on the composability of software components, that rely on more and more direct and transitive dependencies to build their functionalities. Thi…