Does the Vulnerability Threaten Our Projects? Automated Vulnerable API Detection for Third-Party Libraries

Developers usually use third-party libraries (TPLs) to facilitate the development of their projects to avoid reinventing the wheels, however, the vulnerable TPLs indeed cause severe security threats. The majority of existing research only considered whether projects used vulnerable TPLs but neglecte...

Ausführliche Beschreibung

Bibliographische Detailangaben

Veröffentlicht in:	IEEE transactions on software engineering Jg. 50; H. 11; S. 2906 - 2920
Hauptverfasser:	Zhang, Fangyuan, Fan, Lingling, Chen, Sen, Cai, Miaoying, Xu, Sihan, Zhao, Lida
Format:	Journal Article
Sprache:	Englisch
Veröffentlicht:	New York IEEE 01.11.2024 IEEE Computer Society
Schlagworte:	Accuracy Application programming interface Codes Impact analysis Java Libraries Maintenance costs Security Software software composition analysis static analysis Third party Vulnerability detection
ISSN:	0098-5589, 1939-3520
Online-Zugang:	Volltext
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!