Research on Secure Stereoscopic Self-Checking Scheme for Open Source Software

Zou, Jie; Zeng, Weisheng; Zhao, Yuhang; Liang, Ruigang; Cai, Lijun; Zhao, Yuliang

doi:10.1145/3349341.3349395

Search citation statements

Order By: Relevance

Paper Sections

Select...

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2024

Publication Types

Select...

Book1

Other1

Relationship

Self Cite0

Independent2

Authors

Journals

Cited by 2 publications

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

A Taxonomy and Survey of Software Bill of Materials (SBOM) Generation Approaches

Sehgal,

Ambili

2024

Communications in Computer and Information Science

View full text Add to dashboard Cite

A Taxonomy and Survey of Software Bill of Materials (SBOM) Generation Approaches

Sehgal,

Ambili

2024

Communications in Computer and Information Science

View full text Add to dashboard Cite

Trust, but Verify: Evaluating Developer Behavior in Mitigating Security Vulnerabilities in Open-Source Software Projects

Sousa,

Farias,

Lima Filho

et al. 2024

Anais Do XXIV Simpósio Brasileiro De Segurança Da Informação E De Sistemas Computacionais (SBSeg 2024)

View full text Add to dashboard Cite

This study investigates vulnerabilities in dependencies of sampled open-source software (OSS) projects, the relationship between these and overall project security, and how developers’ behaviors and practices influence their mitigation. Through analysis of OSS projects, we have identified common issues in outdated or unmaintained dependencies, including pointer dereferences and array bounds violations, that pose significant security risks. We have also examined developer responses to formal verifier reports, noting a tendency to dismiss potential issues as false positives, which can lead to overlooked vulnerabilities. Our results suggest that reducing the number of direct dependencies and prioritizing well-established libraries with strong security records are effective strategies for enhancing the software security landscape. Notably, four vulnerabilities were fixed as a result of this study, demonstrating the effectiveness of our mitigation strategies.

show abstract

Research on Secure Stereoscopic Self-Checking Scheme for Open Source Software

Cited by 2 publications

References 0 publications

A Taxonomy and Survey of Software Bill of Materials (SBOM) Generation Approaches

A Taxonomy and Survey of Software Bill of Materials (SBOM) Generation Approaches

Trust, but Verify: Evaluating Developer Behavior in Mitigating Security Vulnerabilities in Open-Source Software Projects

Contact Info

Product

Resources

About