Third-party libraries (TPLs) have been widely used in mobile apps, which play an essential
part in the entire Android ecosystem. However, TPL is a double-edged sword. On the one …

Third-party libraries (TPLs) as essential parts in the mobile ecosystem have become one of
the most significant contributors to the huge success of Android, which facilitate the fast …

Binary source code matching, especially on function-level, has a critical role in the field of
computer security. Given binary code only, finding the corresponding source code improves …

The binary-level function matching has been widely used to detect whether there are 1-day
vulnerabilities in released programs. However, the high false positive is a challenge for …

As the core of IoT devices, firmware is undoubtedly vital. Currently, the development of IoT
firmware heavily depends on third-party components (TPCs), which significantly improves …

With the rapid growth of software, using third-party libraries (TPLs) has become increasingly
popular. The prosperity of the library usage has provided the software engineers with a …

Open-source software (OSS) is widely reused as it provides convenience and efficiency in
software development. Despite evident benefits, unmanaged OSS components can …

Open-source kernels have been adopted by massive downstream vendors on billions of
devices. However, these vendors often omit or delay the adoption of patches released in the …

Existing software composition analysis (SCA) techniques for the C/C++ ecosystem tend to
identify the reused components through feature matching between target software project …

Third-party libraries (TPLs) are frequently reused in software to reduce development cost
and the time to market. However, external library dependencies may introduce …