4 papers · 1 filter
Uncovering Hidden Inclusions of Vulnerable Dependencies in Real-World Java Projects
Stefan Schott, Serena Elisa Ponta, Wolfram Fischer +2
Open-source software (OSS) dependencies are a dominant component of modern software code bases. Using proven and well-tested OSS components lets developers reduce development time…
A Soundness and Precision Benchmark for Java Debloating Tools
Jonas Klauke, Tom Ohlmer, Stefan Schott +3
Modern software development reuses code by importing libraries as dependencies. Software projects typically include an average of 36 dependencies, with 80% being transitive, meanin…
Bytecode-centric Detection of Known-to-be-vulnerable Dependencies in Java Projects
Stefan Schott, Serena Elisa Ponta, Wolfram Fischer +2
On average, 71% of the code in typical Java projects comes from open-source software (OSS) dependencies, making OSS dependencies the dominant component of modern software code base…
Compilation of Commit Changes within Java Source Code Repositories
Stefan Schott, Wolfram Fischer, Serena Elisa Ponta +2
Java applications include third-party dependencies as bytecode. To keep these applications secure, researchers have proposed tools to re-identify dependencies that contain known vu…