46 citations · 130 across the 17 of their papers we have counts for
5 papers · 1 filter
Automatic Diversity in the Software Supply Chain
Nicolas Harrand, Thomas Durieux, David Broman +1
Despite its obvious benefits, the increased adoption of package managers to automate the reuse of libraries has opened the door to a new class of hazards: supply chain attacks. By…
Vivienne: Relational Verification of Cryptographic Implementations in WebAssembly
Rodothea Myrsini Tsoupidi, Musard Balliu, Benoit Baudry
This paper explores the use of relational symbolic execution to counter timing side channels in WebAssembly programs. We design and implement Vivienne, an open-source tool to autom…
A Longitudinal Analysis of Bloated Java Dependencies
César Soto-Valero, Thomas Durieux, Benoit Baudry
We study the evolution and impact of bloated dependencies in a single software ecosystem: Java/Maven. Bloated dependencies are third-party libraries that are packaged in the applic…
The Behavioral Diversity of Java JSON Libraries
Nicolas Harrand, Thomas Durieux, David Broman +1
JSON is an essential file and data format in do-mains that span scientific computing, web APIs or configuration management. Its popularity has motivated significant software develo…
DUETS: A Dataset of Reproducible Pairs ofJava Library-Clients
Thomas Durieux, César Soto-Valero, Benoit Baudry
Software engineering researchers look for software artifacts to study their characteristics or to evaluate new techniques. In this paper, we introduce DUETS, a new dataset of softw…