安全研究 # Third-Party Library Dependency for Large-Scale SCA in the C/C++ Ecosystem: How Far Are We?

• 论文分享《Third-Party Library Dependency for Large-Scale SCA in the C/C++ Ecosystem: How Far Are We?》作者主要来自腾讯科恩实验室、南方科技大学
• 发表于顶会 ISSTA 2023，软件工程 CCF-A
• 任务：TPL reuse detection；

Ling Jiang†, Hengchen Yuan, Qiyi Tang, Sen Nie, Shi Wu, and Yuqun Zhang∗. 2023. Third-Party Library Dependency for Large-Scale SCA in the C/C++ Ecosystem: How Far Are We?. In Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA '23), July 17–21, 2023, Seattle, WA, United States. ACM, New York, NY, USA, 13 pages. https://doi.org/10.1145/3597926.3598143

---

• TPL 依赖的概念： TPL 依赖表示 TPLs 之间的代码复用关系，比如一个从 t p l