With the rapid growth of software, using third-party libraries (TPLs) has become increasingly
popular. The prosperity of the library usage has provided the software engineers with a …

Existing software composition analysis (SCA) techniques for the C/C++ ecosystem tend to
identify the reused components through feature matching between target software project …

The complex optimizations supported by modern compilers allow for compiler provenance
recovery at many levels. For instance, it is possible to identify the compiler family and …

Context: When software is released publicly, it is common to include with it either the full text
of the license or licenses under which it is published, or a detailed reference to them …

Developing software securely remains a challenge even with great advancements made in
AI, vulnerability databases, dynamic and static code analysis. Research into aspects of …

Code clones have been used in many different software maintenance and evaluation tasks
in practice (eg, change proportion and evolution, refactoring, and vulnerability …

Third-party library (TPL) reuse may introduce vulnerable or malicious code and expose the
software, which exposes them to potential risks. Thus, it is essential to identify third-party …

Pre-trained models have witnessed significant progress in nature language (including
source code) and binary code comprehension. However, none of them are suitable for …

Binary code search plays a crucial role in applications like software reuse detection.
Currently, existing models are typically based on either internal code semantics or a …

Open source component libraries are widely used in software development. However,
vulnerabilities of these components can threaten software security as they spread …