38 citations · 71 across the 9 of their papers we have counts for
7 papers · 1 filter
Software Supply Chain Smells: Lightweight Analysis for Secure Dependency Management
Larissa Schmid, Diogo Gaspar, Raphina Liu +3
Modern software systems heavily rely on third-party dependencies, making software supply chain security a critical concern. We introduce the concept of software supply chain smells…
Do Automated Fixes Truly Mitigate Smart Contract Exploits?
Sofia Bobadilla, Monica Jin, Martin Monperrus
Automated Program Repair (APR) for smart contract security promises to automatically mitigate smart contract vulnerabilities responsible for billions in financial losses. However,…
Dirty-Waters: Detecting Software Supply Chain Smells
Raphina Liu, Sofia Bobadilla, Benoit Baudry +1
Using open-source dependencies is essential in modern software development. However, this practice implies significant trust in third-party code, while there is little support for…
DISL: Fueling Research with A Large Dataset of Solidity Smart Contracts
Gabriele Morello, Mojtaba Eshghie, Sofia Bobadilla +1
The DISL dataset features a collection of unique Solidity files that have been deployed to Ethereum mainnet. It caters to the need for a large and diverse dataset of real…
CigaR: Cost-efficient Program Repair with LLMs
Dávid Hidvégi, Khashayar Etemadi, Sofia Bobadilla +1
Large language models (LLM) have proven to be effective at automated program repair (APR). However, using LLMs can be costly, with companies invoicing users by the number of tokens…
SOBO: A Feedback Bot to Nudge Code Quality in Programming Courses
Sofia Bobadilla, Richard Glassey, Alexandre Bergel +1
Recent research has shown the great potential of automatic feedback in education. This paper presents SOBO, a bot we designed to automatically provide feedback on code quality to u…
Challenges of Producing Software Bill Of Materials for Java
Musard Balliu, Benoit Baudry, Sofia Bobadilla +7
Software bills of materials (SBOM) promise to become the backbone of software supply chain hardening. We deep-dive into 6 tools and the accuracy of the SBOMs they produce for compl…