The use of vulnerable open-source dependencies is a known problem in today's software
development. Several vulnerability scanners to detect known-vulnerable dependencies …

During compilation from Java source code to bytecode, some information is irreversibly lost.
In other words, compilation and decompilation of Java code is not symmetric. Consequently …

A lot of clone detection tools for Java have been introduced in recent years. On the one
hand, many of these tools work on Java source code and can thus be conveniently …

Modern software heavily relies on the use of components. Those components are usually
published in central repositories, and managed by build systems via dependencies. Due to …

Analyzing the similarity of two code fragments has many applications, including code clone,
vulnerability and plagiarism detection. Most existing approaches for similarity analysis work …

This paper presents a novel approach for comparing software systems by calculating the
robust Hausdorff distance between semantic source code embeddings of individual software …

In software development, it's common to reuse existing source code by copying and pasting,
resulting in the proliferation of numerous code clones—similar or identical code fragments …

Recent research has shown that developers hesitate to update dependencies and mistrust
automated approaches such as Dependabot, since they are afraid of introducing …

Since its inception two decades ago, Soot has become one of the most widely used open-
source static analysis frameworks. Over time it has been extended with the contributions of …

Studying and exposing software vulnerabilities is important to ensure software security,
safety, and reliability. Software engineers often inject vulnerabilities into their programs to …