3 papers
cs.CR2021
Containing Malicious Package Updates in npm with a Lightweight Permission System
Gabriel Ferreira, Limin Jia, Joshua Sunshine +1
The large amount of third-party packages available in fast-moving software ecosystems, such as Node.js/npm, enables attackers to compromise applications by pushing malicious update…
cs.SE2019
Design Dimensions for Software Certification: A Grounded Analysis
Gabriel Ferreira, Christian Kästner, Joshua Sunshine +2
In many domains, software systems cannot be deployed until authorities judge them fit for use in an intended operating environment. Certification standards and processes have been…
cs.SE2016
Do #ifdefs Influence the Occurrence of Vulnerabilities? An Empirical Study of the Linux Kernel
Gabriel Ferreira, Momin Malik, Christian Kästner +2
Preprocessors support the diversification of software products with #ifdefs, but also require additional effort from developers to maintain and understand variable code. We conject…