Empirical Analysis of Vulnerabilities Life Cycle in Golang Ecosystem
Published in 46th International Conference on Software Engineering (ICSE), 2024
Publications
Software Composition Analysis for Vulnerability Detection: An Empirical Study on Java Projects
Published in The ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE), 2023
Mitigating Persistence of Open-Source Vulnerabilities in Maven Ecosystem
Published in the 38th IEEE/ACM International Conference on Automated Software Engineering (ASE 2023), 2023
OSSFP: Precise and Scalable C/C++ Third-Party Library Detection using Fingerprinting Functions
Published in 45th IEEE/ACM International Conference on Software Engineering (ICSE), 2023
Compatible Remediation on Vulnerabilities from Third-Party Libraries for Java Projects
Published in 45th IEEE/ACM International Conference on Software Engineering (ICSE), 2023
Has My Release Disobeyed Semantic Versioning? Static Detection Based on Semantic Differencing for Java
Published in The 37th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2022