{"id":"https://openalex.org/W4313549796","doi":"https://doi.org/10.1145/3551349.3556921","title":"Insight: Exploring Cross-Ecosystem Vulnerability Impacts","display_name":"Insight: Exploring Cross-Ecosystem Vulnerability Impacts","publication_year":2022,"publication_date":"2022-10-10","ids":{"openalex":"https://openalex.org/W4313549796","doi":"https://doi.org/10.1145/3551349.3556921"},"language":"en","primary_location":{"id":"doi:10.1145/3551349.3556921","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3551349.3556921","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 37th IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076586259","display_name":"Meiqiu Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Meiqiu Xu","raw_affiliation_strings":["Software College, Northeastern University, China"],"raw_orcid":"https://orcid.org/0000-0001-8645-4326","affiliations":[{"raw_affiliation_string":"Software College, Northeastern University, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100347016","display_name":"Ying Wang","orcid":"https://orcid.org/0000-0001-8645-4326"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]},{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]},{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN","HK"],"is_corresponding":false,"raw_author_name":"Ying Wang","raw_affiliation_strings":["Software College, Northeastern University, China and Department of Computer Science and Engineering, The Hong Kong University of Science and Technology, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Software College, Northeastern University, China and Department of Computer Science and Engineering, The Hong Kong University of Science and Technology, China","institution_ids":["https://openalex.org/I200769079","https://openalex.org/I889458895","https://openalex.org/I9224756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034057959","display_name":"Shing-Chi Cheung","orcid":"https://orcid.org/0000-0002-3508-7172"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Shing-Chi Cheung","raw_affiliation_strings":["Department of Computer Science and Engineering, The Hong Kong University of Science and Technology, China"],"raw_orcid":"https://orcid.org/0000-0002-3508-7172","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, The Hong Kong University of Science and Technology, China","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080895253","display_name":"Hai Yu","orcid":"https://orcid.org/0000-0002-8024-1781"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hai Yu","raw_affiliation_strings":["Software College, Northeastern University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Software College, Northeastern University, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040140553","display_name":"Zhiliang Zhu","orcid":"https://orcid.org/0000-0003-3450-1711"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiliang Zhu","raw_affiliation_strings":["Software College, Northeastern University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Software College, Northeastern University, China","institution_ids":["https://openalex.org/I9224756"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.0089,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.93270654,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"13"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9833999872207642,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.7554531097412109},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7220768928527832},{"id":"https://openalex.org/keywords/python","display_name":"Python (programming language)","score":0.6695627570152283},{"id":"https://openalex.org/keywords/status-quo","display_name":"Status quo","score":0.6370433568954468},{"id":"https://openalex.org/keywords/ecosystem","display_name":"Ecosystem","score":0.6269301772117615},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4220723509788513},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3783648908138275},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.24340596795082092},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.18592524528503418},{"id":"https://openalex.org/keywords/ecology","display_name":"Ecology","score":0.15181964635849},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.10894912481307983}],"concepts":[{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.7554531097412109},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7220768928527832},{"id":"https://openalex.org/C519991488","wikidata":"https://www.wikidata.org/wiki/Q28865","display_name":"Python (programming language)","level":2,"score":0.6695627570152283},{"id":"https://openalex.org/C2776748549","wikidata":"https://www.wikidata.org/wiki/Q201610","display_name":"Status quo","level":2,"score":0.6370433568954468},{"id":"https://openalex.org/C110872660","wikidata":"https://www.wikidata.org/wiki/Q37813","display_name":"Ecosystem","level":2,"score":0.6269301772117615},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4220723509788513},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3783648908138275},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.24340596795082092},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.18592524528503418},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.15181964635849},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.10894912481307983},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3551349.3556921","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3551349.3556921","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 37th IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-125187","is_oa":false,"landing_page_url":"http://gateway.isiknowledge.com/gateway/Gateway.cgi?GWVersion=2&SrcAuth=LinksAMR&SrcApp=PARTNER_APP&DestLinkType=FullRecord&DestApp=WOS&KeyUT=001062775200029","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference paper"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5199999809265137,"id":"https://metadata.un.org/sdg/15","display_name":"Life in Land"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W1792587773","https://openalex.org/W1990762361","https://openalex.org/W2060337373","https://openalex.org/W2101502756","https://openalex.org/W2138110817","https://openalex.org/W2290452149","https://openalex.org/W2400282174","https://openalex.org/W2548749170","https://openalex.org/W2603712331","https://openalex.org/W2605404816","https://openalex.org/W2634106992","https://openalex.org/W2740279154","https://openalex.org/W2766078311","https://openalex.org/W2789570312","https://openalex.org/W2795081714","https://openalex.org/W2884623841","https://openalex.org/W2889097348","https://openalex.org/W2921999452","https://openalex.org/W2951913189","https://openalex.org/W2963321189","https://openalex.org/W2963748706","https://openalex.org/W2964080672","https://openalex.org/W2995340752","https://openalex.org/W3036270494","https://openalex.org/W3048218005","https://openalex.org/W3122752779","https://openalex.org/W3131012613","https://openalex.org/W3150814957","https://openalex.org/W3153176799","https://openalex.org/W3161071537","https://openalex.org/W3177181855","https://openalex.org/W3178549314","https://openalex.org/W3196126762","https://openalex.org/W4205904944","https://openalex.org/W4243862372","https://openalex.org/W4256420017","https://openalex.org/W4312228275"],"related_works":["https://openalex.org/W4386106790","https://openalex.org/W2171114985","https://openalex.org/W3121336575","https://openalex.org/W3123696707","https://openalex.org/W3125950882","https://openalex.org/W4386639330","https://openalex.org/W2386104528","https://openalex.org/W2883919278","https://openalex.org/W2475416227","https://openalex.org/W4386639265"],"abstract_inverted_index":{"Vulnerabilities,":[0],"referred":[1],"to":[2,25,42,109],"as":[3,54],"CLV":[4,56,77,121],"issues,":[5],"are":[6,58,93,107],"induced":[7],"by":[8,61],"cross-language":[9],"invocations":[10],"of":[11,21,29,76,120],"vulnerable":[12,47,111],"libraries.":[13,31],"Such":[14],"issues":[15,57,78,122],"greatly":[16],"increase":[17],"the":[18,44,68,73,102,118],"attack":[19],"surface":[20],"Python/Java":[22,33],"projects":[23,89],"due":[24],"their":[26],"pervasive":[27],"use":[28],"C":[30,103],"Existing":[32],"build":[34],"tools":[35],"in":[36,50,79,90,112,123],"PyPI":[37,80],"and":[38,81,126],"Maven":[39,82],"ecosystems":[40,92,125],"fail":[41],"report":[43],"dependency":[45],"on":[46,72,98],"libraries":[48,99],"written":[49],"other":[51],"languages":[52],"such":[53],"C.":[55],"easily":[59],"missed":[60],"developers.":[62],"In":[63],"this":[64],"paper,":[65],"we":[66],"conduct":[67],"first":[69],"empirical":[70],"study":[71,116],"status":[74],"quo":[75],"ecosystems.":[83],"It":[84],"is":[85],"found":[86],"that":[87,106],"82,951":[88],"these":[91],"directly":[94],"or":[95],"indirectly":[96],"dependent":[97],"compiled":[100],"from":[101],"project":[104],"versions":[105],"identified":[108],"be":[110],"CVE":[113],"reports.":[114],"Our":[115],"arouses":[117],"awareness":[119],"popular":[124],"presents":[127],"related":[128],"analysis":[129],"results.":[130]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":6}],"updated_date":"2026-08-11T07:18:39.950985","created_date":"2025-10-10T00:00:00"}