A Manually-Curated Dataset of Fixes to Vulnerabilities of Open-Source Software

3 code implementations • 7 Feb 2019 • Serena E. Ponta, Henrik Plate, Antonino Sabetta, Michele Bezzi, Cédric Dangremont

While operating a vulnerability assessment tool that we developed and that is currently used by hundreds of development units at SAP, we manually collected and curated a dataset of vulnerabilities of open-source software and the commits fixing them.

Beyond Metadata: Code-centric and Usage-based Analysis of Known Vulnerabilities in Open-source Software

3 code implementations • 15 Jun 2018 • Serena E. Ponta, Henrik Plate, Antonino Sabetta

The use of open-source software (OSS) is ever-increasing, and so is the number of open-source vulnerabilities being discovered and publicly disclosed.

Cryptography and Security Software Engineering

Impact assessment for vulnerabilities in open-source software libraries

3 code implementations • 20 Apr 2015 • Henrik Plate, Serena Elisa Ponta, Antonino Sabetta

Software applications integrate more and more open-source software (OSS) to benefit from code reuse.

Cryptography and Security Software Engineering