Home

Related Work

Empirical studies

• Evolving Collaboration, Dependencies, and Use in the Rust Open Source Software Ecosystem
• On the impact of security vulnerabilities in the npm and RubyGems dependency networks
• Out of sight, out of mind? How vulnerable dependencies affect open-source projects
• Small World with High Risks: A Study of Security Threats in the npm Ecosystem
• An empirical comparison of dependency network evolution in seven software packaging ecosystems
• Demystifying the Vulnerability Propagation and Its Evolution via Dependency Trees in the NPM Ecosystem

System call filtering

• C2C: Fine-grained Configuration-driven System Call Filtering
• Automated Policy Synthesis for System Call Sandboxing

Language-based security

• SHILL