4 papers
From Reviewers' Lens: Understanding Bug Bounty Report Invalid Reasons with LLMs
Jiangrui Zheng, Yingming Zhou, Ali Abdullah Ahmad +2
Bug bounty platforms (e.g., HackerOne, BugCrowd) leverage crowd-sourced vulnerability discovery to improve continuous coverage, reduce the cost of discovery, and serve as an integr…
SPFinder: Improving the Context Length and Scalability for Tracing Known Vulnerability Patches
Xueqing Liu, Jiangrui Zheng, Guanqun Yang +3
An upstream task for vulnerability management is the accurate localization of the patch that fixes a vulnerability. Existing works have proposed several approaches to trace or retr…
An Exploratory Study on Build Issue Resolution Among Computer Science Students
Sunzhou Huang, Na Meng, Xueqing Liu +1
When Computer Science (CS) students try to use or extend open-source software (OSS) projects, they often encounter the common challenge of OSS failing to build on their local machi…
Can Highlighting Help GitHub Maintainers Track Security Fixes?
Xueqing Liu, Yuchen Xiong, Qiushi Liu +1
In recent years, the rapid growth of security vulnerabilities poses great challenges to tracing and managing them. For example, it was reported that the NVD database experienced si…