activity
20242026
most citedSimilar but Patched Code Considered Harmful -- The Impact of Similar but Patched Code on Recurring Vulnerability Detection and How to Remove Them

1 citations · 1 across the 7 of their papers we have counts for

collaborators
Showing cs.SEShow all

7 papers · 1 filter

cs.SE2026

Mitigating Implicit Inconsistencies in Patch Porting

Shengyi Pan, Zhongxin Liu, Jiayuan Zhou +3

Promptly porting patches from a source codebase to its variants (e.g., forks and branches) is essential for mitigating propagated defects and vulnerabilities. Recent studies have e…

cs.SE2026

RACE-Bench: A Reasoning-Augmented Benchmark for Repository-Level Code Agents on Feature Addition

Shuhan Liu, Zhiyi Zhao, Xing Hu +3

Repository-level code agents have shown strong promise in real-world feature addition tasks, making reliable evaluation of their capabilities increasingly important. However, exist…

cs.SE2026

Assessing the Cross-Version Applicability of Java Library Vulnerability Exploits

Zirui Chen, Qi Zhan, Jiayuan Zhou +3

Open-source software supply chain security relies heavily on assessing affected versions of library vulnerabilities. While prior studies have leveraged exploits for verifying vulne…

cs.SE2026

Multi-Agent End-to-End Vulnerability Management for Mitigating Recurring Vulnerabilities

Zelong Zheng, Jiayuan Zhou, Xing Hu +2

Software vulnerability management has become increasingly critical as modern systems scale in size and complexity. However, existing automated approaches remain insufficient. Tradi…

cs.SE2025

Code Change Intention, Development Artifact and History Vulnerability: Putting Them Together for Vulnerability Fix Detection by LLM

Xu Yang, Wenhan Zhu, Michael Pacheco +4

Detecting vulnerability fix commits in open-source software is crucial for maintaining software security. To help OSS identify vulnerability fix commits, several automated approach…

cs.SE2024★ 1 cited

Similar but Patched Code Considered Harmful -- The Impact of Similar but Patched Code on Recurring Vulnerability Detection and How to Remove Them

Zixuan Tan, Jiayuan Zhou, Xing Hu +3

Identifying recurring vulnerabilities is crucial for ensuring software security. Clone-based techniques, while widely used, often generate many false alarms due to the existence of…

cs.SE2024

VFDelta: A Framework for Detecting Silent Vulnerability Fixes by Enhancing Code Change Learning

Xu Yang, Shaowei Wang, Jiayuan Zhou +1

Vulnerability fixes in open source software (OSS) usually follow the coordinated vulnerability disclosure model and are silently fixed. This delay can expose OSS users to risks as…