Tracing Vulnerable Code Lineage

• Published in: 2021 IEEE/ACM 18th International Conference on Mining Software Repositories (MSR) pp. 621 - 623
• Main Authors: Reid, David, Eng, Kalvin, Bogart, Chris, Tutko, Adam
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01.05.2021
• Subjects: CVE; Data mining; Github; Open source software; Security

This paper presents results from the MSR 2021 Hackathon. Our team investigates files/projects that contain known security vulnerabilities and how widespread they are throughout repositories in open source software. These security vulnerabilities can potentially be propagated through code reuse even...