Existing software composition analysis (SCA) techniques for the C/C++ ecosystem tend to
identify the reused components through feature matching between target software project …

Widespread code reuse allows vulnerabilities to proliferate among a vast variety of firmware.
There is an urgent need to detect these vulnerable codes effectively and efficiently. By …

The complex optimizations supported by modern compilers allow for compiler provenance
recovery at many levels. For instance, it is possible to identify the compiler family and …

The widespread use of open-source software (OSS) has led to extensive code reuse,
making vulnerabilities in OSS significantly pervasive. The vulnerabilities due to code reuse …

Third-party libraries (TPLs) are extensively utilized by developers to expedite the software
development process and incorporate external functionalities. Nevertheless, insecure TPL …

While third-party libraries (TPLs) are extensively reused to enhance productivity during
software development, they can also introduce potential security risks such as vulnerability …

Open-source software has revolutionized the field of software development, providing a
collaborative and transparent approach that encourages knowledge sharing and innovation …

Source code complexity of legacy object-oriented (OO) software has a trickle-down effect
over the key activities of software development and maintenance. Package-based OO …

Third-party library (TPL) reuse may introduce vulnerable or malicious code and expose the
software, which exposes them to potential risks. Thus, it is essential to identify third-party …

Identifying what front-end library runs on a web page is challenging. Although many mature
detectors exist on the market, they suffer from false positives and the inability to detect …