{"id":"https://openalex.org/W3212502694","doi":"https://doi.org/10.1145/3460120.3484593","title":"Locating the Security Patches for Disclosed OSS Vulnerabilities with Vulnerability-Commit Correlation Ranking","display_name":"Locating the Security Patches for Disclosed OSS Vulnerabilities with Vulnerability-Commit Correlation Ranking","publication_year":2021,"publication_date":"2021-11-12","ids":{"openalex":"https://openalex.org/W3212502694","doi":"https://doi.org/10.1145/3460120.3484593","mag":"3212502694"},"language":"en","primary_location":{"id":"doi:10.1145/3460120.3484593","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3460120.3484593","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3460120.3484593","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3460120.3484593","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020422278","display_name":"Xin Tan","orcid":"https://orcid.org/0000-0002-2678-3934"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xin Tan","raw_affiliation_strings":["Fudan University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100368650","display_name":"Yuan Zhang","orcid":"https://orcid.org/0000-0001-5538-1478"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Zhang","raw_affiliation_strings":["Fudan University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072962700","display_name":"Chenyuan Mi","orcid":null},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenyuan Mi","raw_affiliation_strings":["Fudan University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073564468","display_name":"Jiajun Cao","orcid":"https://orcid.org/0009-0000-8797-2491"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiajun Cao","raw_affiliation_strings":["Fudan University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026728546","display_name":"Kun Sun","orcid":"https://orcid.org/0000-0003-4152-2107"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kun Sun","raw_affiliation_strings":["George Mason University, Fairfax, VA, USA"],"affiliations":[{"raw_affiliation_string":"George Mason University, Fairfax, VA, USA","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101421855","display_name":"Yifan Lin","orcid":"https://orcid.org/0000-0003-2178-6957"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yifan Lin","raw_affiliation_strings":["Fudan University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052437722","display_name":"Min Yang","orcid":"https://orcid.org/0000-0001-9714-5545"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Min Yang","raw_affiliation_strings":["Fudan University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5020422278"],"corresponding_institution_ids":["https://openalex.org/I24943067"],"apc_list":null,"apc_paid":null,"fwci":4.3212,"has_fulltext":true,"cited_by_count":43,"citation_normalized_percentile":{"value":0.95347283,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"3282","last_page":"3299"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/commit","display_name":"Commit","score":0.8207356333732605},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6777000427246094},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6614751815795898},{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.6265096664428711},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6043207049369812},{"id":"https://openalex.org/keywords/cover","display_name":"Cover (algebra)","score":0.5204727649688721},{"id":"https://openalex.org/keywords/prioritization","display_name":"Prioritization","score":0.49999499320983887},{"id":"https://openalex.org/keywords/ranking","display_name":"Ranking (information retrieval)","score":0.4738134443759918},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.4489419758319855},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.4462434947490692},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.41255003213882446},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.18102651834487915},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.17939630150794983},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.11549586057662964},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.11109137535095215},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.09189906716346741},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.06287440657615662}],"concepts":[{"id":"https://openalex.org/C153180980","wikidata":"https://www.wikidata.org/wiki/Q19776675","display_name":"Commit","level":2,"score":0.8207356333732605},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6777000427246094},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6614751815795898},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.6265096664428711},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6043207049369812},{"id":"https://openalex.org/C2780428219","wikidata":"https://www.wikidata.org/wiki/Q16952335","display_name":"Cover (algebra)","level":2,"score":0.5204727649688721},{"id":"https://openalex.org/C2777615720","wikidata":"https://www.wikidata.org/wiki/Q11888847","display_name":"Prioritization","level":2,"score":0.49999499320983887},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.4738134443759918},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.4489419758319855},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.4462434947490692},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.41255003213882446},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.18102651834487915},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.17939630150794983},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11549586057662964},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.11109137535095215},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.09189906716346741},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.06287440657615662},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3460120.3484593","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3460120.3484593","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3460120.3484593","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3460120.3484593","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3460120.3484593","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3460120.3484593","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6800000071525574,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G2011081604","display_name":null,"funder_award_id":"U1836210","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2909747033","display_name":null,"funder_award_id":"W56KGU-20-C-0008","funder_id":"https://openalex.org/F4320332447","funder_display_name":"U.S. Army"},{"id":"https://openalex.org/G3062299927","display_name":null,"funder_award_id":"21QA1400700","funder_id":"https://openalex.org/F4320327803","funder_display_name":"Shanghai Rising-Star Program"},{"id":"https://openalex.org/G3823192631","display_name":null,"funder_award_id":"C-0008","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4116449613","display_name":null,"funder_award_id":"U1836210,U1836213,U1736208,61972099,62172105,62102093","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5125653371","display_name":null,"funder_award_id":"19ZR1404800","funder_id":"https://openalex.org/F4320309612","funder_display_name":"Natural Science Foundation of Shanghai"},{"id":"https://openalex.org/G5909397362","display_name":null,"funder_award_id":"61972099","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6854417668","display_name":null,"funder_award_id":"U1836213","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7766097009","display_name":null,"funder_award_id":"U1736208","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8928773622","display_name":null,"funder_award_id":"62172105","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320309612","display_name":"Natural Science Foundation of Shanghai","ror":null},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320327803","display_name":"Shanghai Rising-Star Program","ror":null},{"id":"https://openalex.org/F4320332447","display_name":"U.S. Army","ror":"https://ror.org/00afsp483"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3212502694.pdf","grobid_xml":"https://content.openalex.org/works/W3212502694.grobid-xml"},"referenced_works_count":69,"referenced_works":["https://openalex.org/W114517082","https://openalex.org/W1486522688","https://openalex.org/W1710734607","https://openalex.org/W1817561967","https://openalex.org/W1968882522","https://openalex.org/W1985947101","https://openalex.org/W1990762361","https://openalex.org/W1998009565","https://openalex.org/W2040577374","https://openalex.org/W2058230372","https://openalex.org/W2065489029","https://openalex.org/W2069268700","https://openalex.org/W2072684419","https://openalex.org/W2079317829","https://openalex.org/W2082300114","https://openalex.org/W2091543666","https://openalex.org/W2105059961","https://openalex.org/W2109471749","https://openalex.org/W2115584760","https://openalex.org/W2128182542","https://openalex.org/W2143017621","https://openalex.org/W2143331230","https://openalex.org/W2145458045","https://openalex.org/W2146648240","https://openalex.org/W2164330572","https://openalex.org/W2166336492","https://openalex.org/W2297774820","https://openalex.org/W2357443253","https://openalex.org/W2404969801","https://openalex.org/W2515360277","https://openalex.org/W2549418831","https://openalex.org/W2562319768","https://openalex.org/W2575109289","https://openalex.org/W2588857602","https://openalex.org/W2618635610","https://openalex.org/W2634106992","https://openalex.org/W2729710884","https://openalex.org/W2741497758","https://openalex.org/W2752365765","https://openalex.org/W2766411424","https://openalex.org/W2766540688","https://openalex.org/W2772848948","https://openalex.org/W2884475480","https://openalex.org/W2888989071","https://openalex.org/W2889354405","https://openalex.org/W2891235722","https://openalex.org/W2912106162","https://openalex.org/W2912934387","https://openalex.org/W2920779936","https://openalex.org/W2954491573","https://openalex.org/W2963738950","https://openalex.org/W2964738734","https://openalex.org/W2969229669","https://openalex.org/W2969343988","https://openalex.org/W2970971581","https://openalex.org/W3016199683","https://openalex.org/W3018238337","https://openalex.org/W3036266772","https://openalex.org/W3043519510","https://openalex.org/W3082091189","https://openalex.org/W3108766814","https://openalex.org/W3149255455","https://openalex.org/W3214251355","https://openalex.org/W4237001700","https://openalex.org/W4242446209","https://openalex.org/W4244051999","https://openalex.org/W4246553962","https://openalex.org/W4249952836","https://openalex.org/W4312960235"],"related_works":["https://openalex.org/W4367365664","https://openalex.org/W4385326140","https://openalex.org/W4293227618","https://openalex.org/W2136634148","https://openalex.org/W3122851392","https://openalex.org/W3122800671","https://openalex.org/W17155033","https://openalex.org/W4250708772","https://openalex.org/W4288862737","https://openalex.org/W1984769753"],"abstract_inverted_index":{"Security":[0],"patches":[1,23],"play":[2],"an":[3],"important":[4],"role":[5],"in":[6,40],"defending":[7],"against":[8],"the":[9,14,19,44],"security":[10,22],"threats":[11],"brought":[12],"by":[13],"increasing":[15],"OSS":[16,66],"vulnerabilities.":[17],"However,":[18,50],"collection":[20],"of":[21,47,64],"still":[24],"remains":[25],"a":[26,33,61],"challenging":[27],"problem.":[28],"Existing":[29],"works":[30],"mainly":[31],"adopt":[32],"matching-based":[34],"design":[35],"that":[36,55],"uses":[37],"auxiliary":[38],"information":[39],"CVE/NVD":[41],"to":[42],"reduce":[43],"search":[45],"scope":[46],"patch":[48],"commits.":[49],"our":[51],"preliminary":[52],"study":[53],"shows":[54],"these":[56],"approaches":[57],"can":[58],"only":[59],"cover":[60],"small":[62],"part":[63],"disclosed":[65],"vulnerabilities":[67],"(about":[68],"12%-53%)":[69],"even":[70],"with":[71],"manual":[72],"assistance.":[73]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":1}],"updated_date":"2026-04-21T08:09:41.155169","created_date":"2025-10-10T00:00:00"}