most citedDoes the Vulnerability Threaten Our Projects? Automated Vulnerable API Detection for Third-Party Libraries

10 citations · 10 across the 5 of their papers we have counts for

collaborators

5 papers

cs.SE2025

Understanding the Supply Chain and Risks of Large Language Model Applications

Yujie Ma, Lili Quan, Xiaofei Xie +4

The rise of Large Language Models (LLMs) has led to the widespread deployment of LLM-based systems across diverse domains. As these systems proliferate, understanding the risks ass…

cs.SE2025

Open Source, Hidden Costs: A Systematic Literature Review on OSS License Management

Boyuan Li, Chengwei Liu, Lingling Fan +3

Integrating third-party software components is a common practice in modern software development, offering significant advantages in terms of efficiency and innovation. However, thi…

cs.CR2024

Large Language Model Supply Chain: Open Problems From the Security Perspective

Qiang Hu, Xiaofei Xie, Sen Chen +1

Large Language Model (LLM) is changing the software development paradigm and has gained huge attention from both academia and industry. Researchers and developers collaboratively e…

cs.SE2024

A Comprehensive Study on Static Application Security Testing (SAST) Tools for Android

Jingyun Zhu, Kaixuan Li, Sen Chen +3

To identify security vulnerabilities in Android applications, numerous static application security testing (SAST) tools have been proposed. However, it poses significant challenges…

cs.SE2024★ 10 cited

Does the Vulnerability Threaten Our Projects? Automated Vulnerable API Detection for Third-Party Libraries

Fangyuan Zhang, Lingling Fan, Sen Chen +3

Developers usually use TPLs to facilitate the development of the projects to avoid reinventing the wheels, however, the vulnerable TPLs indeed cause severe security threats. The ma…