ICPC

Automated Identification of Libraries from Vulnerability Data:Can We Do Better?

Software engineers depend heavily on software libraries and have to update their dependencies once vulnerabilities are found in them. Software Composition Analysis (SCA) helps developers identify vulnerable libraries used by an application. A key …