Automated identification of libraries from vulnerability data: can we do better?

• المؤلفون الرئيسيون: HARYONO, Stefanus A., KANG, Hong Jin, SHARMA, Abhishek, SHARMA, Asankhaya, SANTOSA, Andrew E., ANG, Ming Yi, LO, David
• التنسيق: text
• اللغة: English
• منشور في: Institutional Knowledge at Singapore Management University 2022
• الموضوعات: Multi-label classification; Machine learning; Vulnerability report; Databases and Information Systems
• الوصول للمادة أونلاين: https://ink.library.smu.edu.sg/sis_research/7690; https://ink.library.smu.edu.sg/context/sis_research/article/8693/viewcontent/automated.pdf

Software engineers depend heavily on software libraries and have to update their dependencies once vulnerabilities are found in them. Software Composition Analysis (SCA) helps developers identify vulnerable libraries used by an application. A key challenge is the identification of libraries related...