On the public citation graph

On the Risks and Security of Software Updates: A Systematic Literature Review

https://doi.org/10.2139/ssrn.4901397
0 signed · 30 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.
Claim with ORCID
Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.
See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1007/978-3-030-52683-2_2openalex-snapshot
Backstabber’s Knife Collection: A Review of Open Source Software Supply Chain Attacks
inferredcites →https://doi.org/10.1007/978-3-030-65745-1_7openalex-snapshot
Defending Against Package Typosquatting
inferredcites →https://doi.org/10.1016/j.fsidi.2023.301508openalex-snapshot
On the prevalence of software supply chain attacks: Empirical study and investigative framework
inferredcites →https://doi.org/10.1016/s1353-4858(04)00102-3openalex-snapshot
Automatic update risks: can patching let a hacker in?
inferredcites →https://doi.org/10.1109/hicss.2016.240openalex-snapshot
Software Update Unrest: The Recent Happenings Around Tinder and Tesla
inferredcites →https://doi.org/10.1109/icse43902.2021.00121openalex-snapshot
Containing Malicious Package Updates in npm with a Lightweight Permission System
inferredcites →https://doi.org/10.1109/msec.2021.3051235openalex-snapshot
Perspectives on the SolarWinds Incident
inferredcites →https://doi.org/10.1109/msp.2009.116openalex-snapshot
Are Patched Machines Really Fixed?
inferredcites →https://doi.org/10.1109/msp.2012.113openalex-snapshot
Protecting Your Software Updates
inferredcites →https://doi.org/10.1109/snpd.2017.8022734openalex-snapshot
Security vulnerability assessment for software version upgrade
inferredcites →https://doi.org/10.1109/sp.2008.17openalex-snapshot
Automatic Patch-Based Exploit Generation is Possible: Techniques and Implications
inferredcites →https://doi.org/10.1109/tpds.2021.3090330openalex-snapshot
Scalable, Confidential and Survivable Software Updates
inferredcites →https://doi.org/10.1109/wi-iat.2013.123openalex-snapshot
"Stacking the Deck" Attack on Software Updates: Solution by Distributed Recommendation of Testers
inferredcites →https://doi.org/10.1145/1134285.1134500openalex-snapshot
Performing systematic literature reviews in software engineering
inferredcites →https://doi.org/10.1145/1866307.1866315openalex-snapshot
Survivable key compromise in software update systems
inferredcites →https://doi.org/10.1145/2560217.2560219openalex-snapshot
Automatic exploit generation
inferredcites →https://doi.org/10.1145/2660267.2660311openalex-snapshot
Hey, NSA
inferredcites →https://doi.org/10.1145/3313831.3376308openalex-snapshot
"My Library Has Just Been Obliterated": Producing New Norms of Use Via Software Update
inferredcites →https://doi.org/10.1145/3360664.3360670openalex-snapshot
Achieving Consistency of Software Updates against Strong Attackers
inferredcites →https://doi.org/10.1145/3407023.3409183openalex-snapshot
Towards detection of software supply chain attacks by forensic artifacts
inferredcites →https://doi.org/10.1145/3510003.3510104openalex-snapshot
Practical automated detection of malicious npm packages
inferredcites →https://doi.org/10.1145/3560835.3564550openalex-snapshot
Exorcist
inferredcites →https://doi.org/10.1145/3600160.3600162openalex-snapshot
SoK: Practical Detection of Software Supply Chain Attacks
inferredcites →https://doi.org/10.1145/3605770.3625211openalex-snapshot
Differential Static Analysis for Detecting Malicious Updates to Open Source Packages
inferredcites →https://doi.org/10.1145/3627106.3627129openalex-snapshot
Artemis: Defanging Software Supply Chain Attacks in Multi-repository Update Systems
inferredcites →https://doi.org/10.1177/0739456x17723971openalex-snapshot
Guidance on Conducting a Systematic Literature Review
inferredcites →https://doi.org/10.14722/ndss.2021.23055openalex-snapshot
Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages
inferredcites →https://doi.org/10.18420/sicherheit2024_015openalex-snapshot
You Can Run But You Can't Hide: Runtime Protection Against Malicious Package Updates For Node.js
inferredcites →https://doi.org/10.18429/jacow-icalepcs2023-thpdp067openalex-snapshot
Towards a Flexible and Secure Python Package Repository Service
inferredcites →https://doi.org/10.48550/arxiv.2002.01139openalex-snapshot
Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages
Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.