Tracking patches for open source software vulnerabilities

Congying Xu, Bihuan Chen, Chenhao Lu, Kaifeng Huang, Xin Peng, Yang Liu

Abstract

Open source software (OSS) vulnerabilities threaten the security of software systems that use OSS. Vulnerability databases provide valuable information (e.g., vulnerable version and patch) to mitigate OSS vulnerabilities. There arises a growing concern about the information quality of vulnerability databases. However, it is unclear what the quality of patches in existing vulnerability databases is; and existing manual or heuristic-based approaches for patch tracking are either too expensive or too specific to apply to all OSS vulnerabilities.

BibTeX

@inproceedings{Xu-al:FSE22,
  author    = {Congying Xu and
               Bihuan Chen and
               Chenhao Lu and
               Kaifeng Huang and
               Xin Peng and
               Yang Liu},
  title     = {Tracking patches for open source software vulnerabilities},
  booktitle = {{ESEC/SIGSOFT} {FSE}},
  pages     = {860--871},
  publisher = {{ACM}},
  year      = {2022},
}

Tracking patches for open source software vulnerabilities

Abstract

Related papers