On the public citation graph

Vulnerabilities and Security Patches Detection in OSS: A Survey

0 signed · 158 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.
Claim with ORCID
Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.
See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1007/10207.1615-5270openalex-snapshot
International Journal of Information Security
inferredcites →https://doi.org/10.1007/11537328_2openalex-snapshot
Execution Generated Test Cases: How to Make Systems Code Crash Itself
inferredcites →https://doi.org/10.1007/3-540-46805-6openalex-snapshot
Shape, Contour and Grouping in Computer Vision
inferredcites →https://doi.org/10.1007/3-540-46805-6_19openalex-snapshot
Object Recognition with Gradient-Based Learning
inferredcites →https://doi.org/10.1007/978-0-387-35413-2openalex-snapshot
Communications and Multimedia Security Issues of the New Century
inferredcites →https://doi.org/10.1007/978-0-387-35413-2_16openalex-snapshot
Software Security Assessment through Specification Mutations and Fault Injection
inferredcites →https://doi.org/10.1007/978-3-319-45744-4_29openalex-snapshot
IFuzzer: An Evolutionary Interpreter Fuzzer Using Genetic Programming
inferredcites →https://doi.org/10.1007/s10207-023-00795-8openalex-snapshot
Vulnerability discovery based on source code patch commit mining: a systematic literature review
inferredcites →https://doi.org/10.1007/s10664-022-10168-9openalex-snapshot
SSPCatcher: Learning to catch security patches
inferredcites →https://doi.org/10.1007/s10664-022-10278-4openalex-snapshot
Empirical analysis of security vulnerabilities in Python packages
inferredcites →https://doi.org/10.1016/j.cose.2021.102308openalex-snapshot
AutoVAS: An automated vulnerability analysis system with a deep learning approach
inferredcites →https://doi.org/10.1016/j.diin.2006.06.015openalex-snapshot
Identifying almost identical files using context triggered piecewise hashing
inferredcites →https://doi.org/10.1016/j.infsof.2021.106576openalex-snapshot
BGNN4VD: Constructing Bidirectional Graph Neural-Network for Vulnerability Detection
inferredcites →https://doi.org/10.1016/j.infsof.2021.106809openalex-snapshot
VUDENC: Vulnerability Detection with Deep Learning on a Natural Codebase for Python
inferredcites →https://doi.org/10.1016/j.jnca.2021.103009openalex-snapshot
The rise of software vulnerability: Taxonomy of software vulnerabilities detection and machine learning approaches
inferredcites →https://doi.org/10.1016/j.jss.2023.111623openalex-snapshot
CSGVD: A deep learning approach combining sequence and graph embedding for source code vulnerability detection
inferredcites →https://doi.org/10.1016/j.knosys.2022.110139openalex-snapshot
VULDEFF: Vulnerability detection method based on function fingerprints and code differences
inferredcites →https://doi.org/10.1016/j.measurement.2019.107139openalex-snapshot
A deep learning based static taint analysis approach for IoT software vulnerability location
inferredcites →https://doi.org/10.1016/j.neunet.2005.06.042openalex-snapshot
Framewise phoneme classification with bidirectional LSTM and other neural network architectures
inferredcites →https://doi.org/10.1049/iet-sen.2020.0084openalex-snapshot
Literature survey of deep learning-based vulnerability analysis on source code
inferredcites →https://doi.org/10.1109/access.2017.2676161openalex-snapshot
Patch-Related Vulnerability Detection Based on Symbolic Execution
inferredcites →https://doi.org/10.1109/access.2020.3034766openalex-snapshot
Software Vulnerability Analysis and Discovery Using Deep Learning Techniques: A Survey
inferredcites →https://doi.org/10.1109/access.2021.3065872openalex-snapshot
A Survey of Software Clone Detection From Security Perspective
inferredcites →https://doi.org/10.1109/access.2021.3114202openalex-snapshot
Exploratory Review of Hybrid Fuzzing for Automated Vulnerability Detection
inferredcites →https://doi.org/10.1109/access.2023.3312613openalex-snapshot
A Systematic Literature Review on Software Vulnerability Prediction Models
inferredcites →https://doi.org/10.1109/aiiot54504.2022.9817336openalex-snapshot
Cyber Security Vulnerability Detection Using Natural Language Processing
inferredcites →https://doi.org/10.1109/ase.2019.00033openalex-snapshot
Inferring Program Transformations From Singular Examples via Big Code
inferredcites →https://doi.org/10.1109/ase51524.2021.9678720openalex-snapshot
Finding A Needle in a Haystack: Automated Mining of Silent Vulnerability Fixes
inferredcites →https://doi.org/10.1109/dsa.2019.00012openalex-snapshot
From Local to Global Semantic Clone Detection
inferredcites →https://doi.org/10.1109/dsn48987.2021.00030openalex-snapshot
PatchDB: A Large-Scale Security Patch Dataset
inferredcites →https://doi.org/10.1109/icccs49078.2020.9118556openalex-snapshot
A Survey on Deep Learning-Based Source Code Defect Analysis
inferredcites →https://doi.org/10.1109/icmla.2018.00120openalex-snapshot
Automated Vulnerability Detection in Source Code Using Deep Representation Learning
inferredcites →https://doi.org/10.1109/icpc.2017.22openalex-snapshot
Binary Code Clone Detection across Architectures and Compiling Configurations
inferredcites →https://doi.org/10.1109/icse.1993openalex-snapshot
Proceedings of 1993 15th International Conference on Software Engineering
inferredcites →https://doi.org/10.1109/icse.2012.6227141openalex-snapshot
A large scale exploratory analysis of software vulnerability life cycles
inferredcites →https://doi.org/10.1109/icse.2017.49openalex-snapshot
SPAIN: Security Patch Analysis for Binaries towards Understanding the Pain and Pills
inferredcites →https://doi.org/10.1109/icse.2019.00086openalex-snapshot
A Novel Neural Source Code Representation Based on Abstract Syntax Tree
inferredcites →https://doi.org/10.1109/icsme.2014.77openalex-snapshot
Towards a Big Data Curated Benchmark of Inter-project Code Clones
inferredcites →https://doi.org/10.1109/icsme.2017.46openalex-snapshot
CCLearner: A Deep Learning-Based Clone Detection Approach
inferredcites →https://doi.org/10.1109/ijcnn.2005.1555942openalex-snapshot
A new model for learning in graph domains
inferredcites →https://doi.org/10.1109/isctis51085.2021.00013openalex-snapshot
Vulnerability Detection Algorithm of Lightweight Linux Internet of Things Application with Symbolic Execution Method
inferredcites →https://doi.org/10.1109/ispa-bdcloud-socialcom-sustaincom51426.2020.00068openalex-snapshot
AVDHRAM: Automated Vulnerability Detection based on Hierarchical Representation and Attention Mechanism
inferredcites →https://doi.org/10.1109/jproc.2020.2993293openalex-snapshot
Software Vulnerability Detection Using Deep Neural Networks: A Survey
inferredcites →https://doi.org/10.1109/milcom52596.2021.9652940openalex-snapshot
PatchRNN: A Deep Learning-Based System for Security Patch Identification
inferredcites →https://doi.org/10.1109/msr.2019.00064openalex-snapshot
A Manually-Curated Dataset of Fixes to Vulnerabilities of Open-Source Software
inferredcites →https://doi.org/10.1109/sere.2014.21openalex-snapshot
BinClone: Detecting Code Clones in Malware
inferredcites →https://doi.org/10.1109/sp.2010.26openalex-snapshot
All You Ever Wanted to Know about Dynamic Taint Analysis and Forward Symbolic Execution (but Might Have Been Afraid to Ask)
inferredcites →https://doi.org/10.1109/sp.2014.44openalex-snapshot
Modeling and Discovering Vulnerabilities with Code Property Graphs
inferredcites →https://doi.org/10.1109/sp.2015.49openalex-snapshot
Cross-Architecture Bug Search in Binary Executables
inferredcites →https://doi.org/10.1109/sp.2016.17openalex-snapshot
SOK: (State of) The Art of War: Offensive Techniques in Binary Analysis
inferredcites →https://doi.org/10.1109/sp.2017.62openalex-snapshot
VUDDY: A Scalable Approach for Vulnerable Code Clone Discovery
inferredcites →https://doi.org/10.1109/sp.2019.00003openalex-snapshot
Asm2Vec: Boosting Static Representation Robustness for Binary Clone Search against Code Obfuscation and Compiler Optimization
inferredcites →https://doi.org/10.1109/sp40000.2020.00002openalex-snapshot
SAVIOR: Towards Bug-Driven Hybrid Testing
inferredcites →https://doi.org/10.1109/sp40000.2020.00038openalex-snapshot
SPIDER: Enabling Fast Patch Propagation In Related Software Repositories
inferredcites →https://doi.org/10.1109/tdsc.2021.3051525openalex-snapshot
SySeVR: A Framework for Using Deep Learning to Detect Software Vulnerabilities
inferredcites →https://doi.org/10.1109/tdsc.2021.3076142openalex-snapshot
VulDeeLocator: A Deep Learning-Based Fine-Grained Vulnerability Detector
inferredcites →https://doi.org/10.1109/tdsc.2022.3192631openalex-snapshot
Enhancing Security Patch Identification by Capturing Structures in Commits
inferredcites →https://doi.org/10.1109/tifs.2020.3044773openalex-snapshot
Combining Graph-Based Learning With Automated Data Collection for Code Vulnerability Detection
inferredcites →https://doi.org/10.1109/tifs.2020.3047756openalex-snapshot
VulDetector: Detecting Vulnerabilities Using Weighted Feature Graph Comparison
inferredcites →https://doi.org/10.1109/tse.1984.5010248openalex-snapshot
Program Slicing
inferredcites →https://doi.org/10.1109/tse.2007.70725openalex-snapshot
Comparison and Evaluation of Clone Detection Tools
inferredcites →https://doi.org/10.1109/tse.2019.2946563openalex-snapshot
The Art, Science, and Engineering of Fuzzing: A Survey
inferredcites →https://doi.org/10.1109/tse.2021.3087402openalex-snapshot
Deep Learning Based Vulnerability Detection: Are We There Yet?
inferredcites →https://doi.org/10.1109/tse.2022.3140868openalex-snapshot
The Secret Life of Software Vulnerabilities: A Large-Scale Empirical Study
inferredcites →https://doi.org/10.1145/1455518.1455522openalex-snapshot
EXE
inferredcites →https://doi.org/10.1145/1540438.1540462openalex-snapshot
Fault detection and prediction in an open-source software project
inferredcites →https://doi.org/10.1145/199448.199462openalex-snapshot
Precise interprocedural dataflow analysis via graph reachability
inferredcites →https://doi.org/10.1145/24039.24041openalex-snapshot
The program dependence graph and its use in optimization
inferredcites →https://doi.org/10.1145/2508859.2516665openalex-snapshot
Chucky
inferredcites →https://doi.org/10.1145/2619091openalex-snapshot
TaintDroid
inferredcites →https://doi.org/10.1145/2666356.2594343openalex-snapshot
Tracelet-based code search in executables
inferredcites →https://doi.org/10.1145/2884781.2884877openalex-snapshot
SourcererCC
inferredcites →https://doi.org/10.1145/2939672.2939719openalex-snapshot
Kam1n0
inferredcites →https://doi.org/10.1145/2950290.2950350openalex-snapshot
BinGo: cross-architecture cross-OS binary search
inferredcites →https://doi.org/10.1145/2976749.2978370openalex-snapshot
Scalable Graph-based Bug Search for Firmware Images
inferredcites →https://doi.org/10.1145/2980983.2908126openalex-snapshot
Statistical similarity of binaries
inferredcites →https://doi.org/10.1145/2991079.2991102openalex-snapshot
VulPecker
inferredcites →https://doi.org/10.1145/3092566openalex-snapshot
Software Vulnerability Analysis and Discovery Using Machine-Learning and Data-Mining Techniques
inferredcites →https://doi.org/10.1145/3106237.3106253openalex-snapshot
Automatic inference of code transforms for patch generation
inferredcites →https://doi.org/10.1145/3106237.3117771openalex-snapshot
Automated identification of security issues from commit messages and bug reports
inferredcites →https://doi.org/10.1145/3133956.3134020openalex-snapshot
Directed Greybox Fuzzing
inferredcites →https://doi.org/10.1145/3133956.3138840openalex-snapshot
POSTER
inferredcites →https://doi.org/10.1145/3180155.3180179openalex-snapshot
CCAligner
inferredcites →https://doi.org/10.1145/3180445openalex-snapshot
Proceedings of the Fourth ACM International Workshop on Security and Privacy Analytics
inferredcites →https://doi.org/10.1145/3180445.3180453openalex-snapshot
Machine Learning Methods for Software Vulnerability Detection
inferredcites →https://doi.org/10.1145/3236024.3236026openalex-snapshot
Oreo: detection of clones in the twilight zone
inferredcites →https://doi.org/10.1145/3236024.3236068openalex-snapshot
DeepSim: deep learning code functional similarity
inferredcites →https://doi.org/10.1145/3296957.3177157openalex-snapshot
FirmUp
inferredcites →https://doi.org/10.1145/3319535.3363225openalex-snapshot
Matryoshka
inferredcites →https://doi.org/10.1145/3324884.3416541openalex-snapshot
CCGraph
inferredcites →https://doi.org/10.1145/3338906.3338952openalex-snapshot
Phoenix: automated data-driven synthesis of repairs for static analysis violations
inferredcites →https://doi.org/10.1145/3360585openalex-snapshot
Getafix: learning to fix bugs automatically
inferredcites →https://doi.org/10.1145/3368089openalex-snapshot
Proceedings of the 28th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering
inferredcites →https://doi.org/10.1145/3372297.3417240openalex-snapshot
PDiff: Semantic-based Patch Presence Testing for Downstream Kernels
inferredcites →https://doi.org/10.1145/3377811.3380407openalex-snapshot
SLACC
inferredcites →https://doi.org/10.1145/3379597openalex-snapshot
Proceedings of the 17th International Conference on Mining Software Repositories
inferredcites →https://doi.org/10.1145/3379597.3387501openalex-snapshot
A C/C++ Code Vulnerability Dataset with Code Changes and CVE Summaries
inferredcites →https://doi.org/10.1145/3395363.3397361openalex-snapshot
Patch based vulnerability matching for binary programs
inferredcites →https://doi.org/10.1145/3436877openalex-snapshot
DeepWukong
inferredcites →https://doi.org/10.1145/3460120.3484593openalex-snapshot
Locating the Security Patches for Disclosed OSS Vulnerabilities with Vulnerability-Commit Correlation Ranking
inferredcites →https://doi.org/10.1145/3460319.3464821openalex-snapshot
Automated patch backporting in Linux (experience paper)
inferredcites →https://doi.org/10.1145/3468264.3468597openalex-snapshot
Vulnerability detection with fine-grained interpretations
inferredcites →https://doi.org/10.1145/3468854openalex-snapshot
SPI: Automated Identification of Security Patches via Commits
inferredcites →https://doi.org/10.1145/3475960openalex-snapshot
Proceedings of the 17th International Conference on Predictive Models and Data Analytics in Software Engineering
inferredcites →https://doi.org/10.1145/3475960.3475985openalex-snapshot
CVEfixes: automated collection of vulnerabilities and their fixes from open-source software
inferredcites →https://doi.org/10.1145/3485447.3512236openalex-snapshot
Understanding the Practice of Security Patch Management across Multiple Branches in OSS Projects
inferredcites →https://doi.org/10.1145/3524842openalex-snapshot
Proceedings of the 19th International Conference on Mining Software Repositories
inferredcites →https://doi.org/10.1145/3524842.3527949openalex-snapshot
LineVD
inferredcites →https://doi.org/10.1145/3524842.3528452openalex-snapshot
LineVul
inferredcites →https://doi.org/10.1145/3524842.3528482openalex-snapshot
Vul4J
inferredcites →https://doi.org/10.1145/3540250.3549156openalex-snapshot
Automated unearthing of dangerous issue reports
inferredcites →https://doi.org/10.1145/3548606.3560664openalex-snapshot
TRACER
inferredcites →https://doi.org/10.1145/3575879.3575964openalex-snapshot
A Survey on Vulnerability Prediction using GNNs
inferredcites →https://doi.org/10.1145/3576915openalex-snapshot
Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security
inferredcites →https://doi.org/10.1145/3597926openalex-snapshot
Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis
inferredcites →https://doi.org/10.1145/3597926.3598145openalex-snapshot
Interpreters for GNN-Based Vulnerability Detection: Are We There Yet?
inferredcites →https://doi.org/10.1145/3604608openalex-snapshot
Towards Practical Binary Code Similarity Detection: Vulnerability Verification via Patch Semantic Analysis
inferredcites →https://doi.org/10.1145/3607199.3607242openalex-snapshot
DiverseVul: A New Vulnerable Source Code Dataset for Deep Learning Based Vulnerability Detection
inferredcites →https://doi.org/10.1145/3639478.3643065openalex-snapshot
Prompt-Enhanced Software Vulnerability Detection Using ChatGPT
inferredcites →https://doi.org/10.1145/3650212.3652136openalex-snapshot
Graph Neural Networks for Vulnerability Detection: A Counterfactual Explanation
inferredcites →https://doi.org/10.1155/2020/8858010openalex-snapshot
A Survey of Automatic Software Vulnerability Detection, Program Repair, and Defect Prediction Techniques
inferredcites →https://doi.org/10.1162/neco.1997.9.8.1735openalex-snapshot
Long Short-Term Memory
inferredcites →https://doi.org/10.14722/ndss.2016.23185openalex-snapshot
discovRE: Efficient Cross-Architecture Identification of Bugs in Binary Code
inferredcites →https://doi.org/10.14722/ndss.2016.23368openalex-snapshot
Driller: Augmenting Fuzzing Through Selective Symbolic Execution
inferredcites →https://doi.org/10.14722/ndss.2019.23504openalex-snapshot
Send Hardest Problems My Way: Probabilistic Path Prioritization for Hybrid Fuzzing
inferredcites →https://doi.org/10.24963/ijcai.2017/423openalex-snapshot
Supervised Deep Features for Software Functional Clone Detection by Exploiting Lexical and Syntactical Information in Source Code
inferredcites →https://doi.org/10.3115/v1/d14-1179openalex-snapshot
Learning Phrase Representations using RNN Encoder–Decoder for Statistical Machine Translation
inferredcites →https://doi.org/10.4230/lipics.cosit.2022.18openalex-snapshot
AI-Assisted Pipeline for Dynamic Generation of Trustworthy Health Supplement Content at Scale
inferredcites →https://doi.org/10.4230/lipics.cp.2025.31openalex-snapshot
HISTORIAE, History of Socio-Cultural Transformation as Linguistic Data Science. A Humanities Use Case
inferredcites →https://doi.org/10.48550/arxiv.1301.3781openalex-snapshot
Efficient Estimation of Word Representations in Vector Space
inferredcites →https://doi.org/10.48550/arxiv.1310.4546openalex-snapshot
Distributed Representations of Words and Phrases and their Compositionality
inferredcites →https://doi.org/10.48550/arxiv.1412.3555openalex-snapshot
Empirical Evaluation of Gated Recurrent Neural Networks on Sequence Modeling
inferredcites →https://doi.org/10.48550/arxiv.1708.02368openalex-snapshot
Automatic feature learning for vulnerability prediction
inferredcites →https://doi.org/10.48550/arxiv.1909.03496openalex-snapshot
Devign: Effective Vulnerability Identification by Learning Comprehensive Program Semantics via Graph Neural Networks
inferredcites →https://doi.org/10.48550/arxiv.2002.08155openalex-snapshot
CodeBERT: A Pre-Trained Model for Programming and Natural Languages
inferredcites →https://doi.org/10.48550/arxiv.2006.15682openalex-snapshot
A Survey on the Evaluation of Clone Detection Performance and Benchmarking
inferredcites →https://doi.org/10.48550/arxiv.2009.08366openalex-snapshot
GraphCodeBERT: Pre-training Code Representations with Data Flow
inferredcites →https://doi.org/10.48550/arxiv.2208.08067openalex-snapshot
K-ASTRO: Structure-Aware Adaptation of LLMs for Code Vulnerability Detection
inferredcites →https://doi.org/10.48550/arxiv.2308.15233openalex-snapshot
Multilevel Semantic Embedding of Software Patches: A Fine-to-Coarse Grained Approach Towards Security Patch Detection
inferredcites →https://doi.org/10.48550/arxiv.2310.02530openalex-snapshot
CompVPD: Iteratively Identifying Vulnerability Patches Based on Human Validation Results with a Precise Context
inferredcites →https://doi.org/10.48550/arxiv.2311.01532openalex-snapshot
VFCFinder: Seamlessly Pairing Security Advisories and Patches
inferredcites →https://doi.org/10.48550/arxiv.2312.01241openalex-snapshot
Just-in-Time Detection of Silent Security Patches
inferredcites →https://doi.org/10.48550/arxiv.2402.17230openalex-snapshot
Chain-of-Thought Prompting of Large Language Models for Discovering and Fixing Software Vulnerabilities
inferredcites →https://doi.org/10.48550/arxiv.2403.17218openalex-snapshot
To Err is Machine: Vulnerability Detection Challenges LLM Reasoning
inferredcites →https://doi.org/10.5120/ijca2016908896openalex-snapshot
A Survey of Software Clone Detection Techniques

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.1007/s10207-025-01023-1openalex-snapshot
Beyond the code: analyzing OSS developers security awareness and practices
inferred← citeshttps://doi.org/10.1038/s41598-025-31444-wopenalex-snapshot
A hierarchical deep learning framework with doubly regularized loss for robust malware detection and family categorization
inferred← citeshttps://doi.org/10.1109/ase63991.2025.00015openalex-snapshot
Debun: Detecting Bundled JavaScript Libraries on Web using Property-Order Graphs
inferred← citeshttps://doi.org/10.1109/ase63991.2025.00081openalex-snapshot
Lares: LLM-driven Code Slice Semantic Search for Patch Presence Testing
inferred← citeshttps://doi.org/10.1109/ase63991.2025.00087openalex-snapshot
Not Every Patch is an Island: LLM-Enhanced Identification of Multiple Vulnerability Patches
inferred← citeshttps://doi.org/10.1109/cars67163.2025.11337539openalex-snapshot
Empirical Analysis of Security Vulnerabilities in Open Source Software Using Static Analysis Tools
inferred← citeshttps://doi.org/10.1109/dsn-w65791.2025.00077openalex-snapshot
Securing AI Code Generation Through Automated Pattern-Based Patching
inferred← citeshttps://doi.org/10.1109/icnpcv69434.2026.11708929openalex-snapshot
Secure Knowledge Extraction From Large Language Model
inferred← citeshttps://doi.org/10.1109/indin64977.2025.11279514openalex-snapshot
Towards Few-shot LLM-based Vulnerability Reproduction and Verification for Industrial Web Applications
inferred← citeshttps://doi.org/10.1145/3772726.3772804openalex-snapshot
Optimizing Major Risk Prevention Systems from a Systems Thinking Perspective: A Full-Path Analysis Integrating Event Logic Graphs into Technical Implementation
inferred← citeshttps://doi.org/10.14201/adcaij.32926openalex-snapshot
Analysis of the Precision of Large Language Models in the Identification of Security Vulnerabilities and Weaknesses in Generated Code
inferred← citeshttps://doi.org/10.33093/jiwe.2026.5.2.18openalex-snapshot
A Review of Cyber-Attacks on Web Applications and Their Countermeasures
inferred← citeshttps://doi.org/10.4018/979-8-3373-1370-2.ch011openalex-snapshot
Complexities and Challenges for Securing Digital Assets and Infrastructure in Academia
Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.