Software composition analysis for vulnerability detection: An empirical study on Java projects

• Main Authors: ZHAO, Lida, CHEN, Sen, XU, Zhengzi, ZHANG, Lyuye, WU, Jiahui, SUN, Jun, LIU, Yang
• 格式: text
• 語言: English
• 出版: Institutional Knowledge at Singapore Management University 2023
• 主題: SCA; Package manager; Vulnerability detection; Software Engineering
• 在線閱讀: https://ink.library.smu.edu.sg/sis_research/9317; https://ink.library.smu.edu.sg/context/sis_research/article/10317/viewcontent/fse2023_sca.pdf
• 機構: Singapore Management University

Software composition analysis (SCA) tools are proposed to detect potential vulnerabilities introduced by open-source software (OSS) imported as third-party libraries (TPL). With the increasing complexity of software functionality, SCA tools may encounter various scenarios during the dependency resol...