{"id":"https://openalex.org/W4415584189","doi":"https://doi.org/10.1145/3755881.3755923","title":"Unraveling the Characterization and Propagation of Security Vulnerabilities in TensorFlow-based Deep Learning Software Supply Chain","display_name":"Unraveling the Characterization and Propagation of Security Vulnerabilities in TensorFlow-based Deep Learning Software Supply Chain","publication_year":2025,"publication_date":"2025-06-20","ids":{"openalex":"https://openalex.org/W4415584189","doi":"https://doi.org/10.1145/3755881.3755923"},"language":null,"primary_location":{"id":"doi:10.1145/3755881.3755923","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3755881.3755923","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3755881.3755923","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Internetware","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3755881.3755923","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023290309","display_name":"Yiren Zhou","orcid":"https://orcid.org/0009-0003-8063-0773"},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yiren Zhou","raw_affiliation_strings":["Nanjing University of Aeronautics and Astronautics, Nanjing, China"],"raw_orcid":"https://orcid.org/0009-0003-8063-0773","affiliations":[{"raw_affiliation_string":"Nanjing University of Aeronautics and Astronautics, Nanjing, China","institution_ids":["https://openalex.org/I9842412"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027202117","display_name":"Lina Gong","orcid":"https://orcid.org/0000-0002-5272-6706"},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lina Gong","raw_affiliation_strings":["Nanjing University of Aeronautics and Astronautics, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-5272-6706","affiliations":[{"raw_affiliation_string":"Nanjing University of Aeronautics and Astronautics, Nanjing, China","institution_ids":["https://openalex.org/I9842412"]}]},{"author_position":"last","author":{"id":null,"display_name":"Tiantian Ma","orcid":"https://orcid.org/0009-0009-8401-8382"},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tiantian Ma","raw_affiliation_strings":["Nanjing University of Aeronautics and Astronautics, Nanjing, China"],"raw_orcid":"https://orcid.org/0009-0009-8401-8382","affiliations":[{"raw_affiliation_string":"Nanjing University of Aeronautics and Astronautics, Nanjing, China","institution_ids":["https://openalex.org/I9842412"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I9842412"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.37031947,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"510","last_page":"521"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5357999801635742},{"id":"https://openalex.org/keywords/supply-chain","display_name":"Supply chain","score":0.5169000029563904},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5029000043869019},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.3456999957561493},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3246000111103058},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.28999999165534973},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.28870001435279846}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6448000073432922},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5357999801635742},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.5169000029563904},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5029000043869019},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4377000033855438},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4108999967575073},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3456999957561493},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3246000111103058},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3102000057697296},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.28999999165534973},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.28870001435279846},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.274399995803833},{"id":"https://openalex.org/C25343380","wikidata":"https://www.wikidata.org/wiki/Q277521","display_name":"Relation (database)","level":2,"score":0.2700999975204468},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C2780841128","wikidata":"https://www.wikidata.org/wiki/Q5073781","display_name":"Characterization (materials science)","level":2,"score":0.2547000050544739},{"id":"https://openalex.org/C2984968299","wikidata":"https://www.wikidata.org/wiki/Q1077784","display_name":"Software tool","level":3,"score":0.25290000438690186},{"id":"https://openalex.org/C44104985","wikidata":"https://www.wikidata.org/wiki/Q492886","display_name":"Supply chain management","level":3,"score":0.25220000743865967},{"id":"https://openalex.org/C199185054","wikidata":"https://www.wikidata.org/wiki/Q552299","display_name":"Chain (unit)","level":2,"score":0.25130000710487366}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3755881.3755923","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3755881.3755923","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3755881.3755923","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Internetware","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3755881.3755923","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3755881.3755923","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3755881.3755923","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Internetware","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3734283955","display_name":null,"funder_award_id":"NJ2024029","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G437908683","display_name":null,"funder_award_id":"BK20220881","funder_id":"https://openalex.org/F4320322769","funder_display_name":"Natural Science Foundation of Jiangsu Province"},{"id":"https://openalex.org/G4783601891","display_name":null,"funder_award_id":"BK20220881","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6596453593","display_name":null,"funder_award_id":"NJ2024029","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7809263010","display_name":null,"funder_award_id":"62202223","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321605","display_name":"Government of Jiangsu Province","ror":"https://ror.org/004svx814"},{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415584189.pdf","grobid_xml":"https://content.openalex.org/works/W4415584189.grobid-xml"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W1969939902","https://openalex.org/W2061504941","https://openalex.org/W2274324447","https://openalex.org/W2789570312","https://openalex.org/W2964040431","https://openalex.org/W3004570974","https://openalex.org/W3012412627","https://openalex.org/W3015202896","https://openalex.org/W3046453918","https://openalex.org/W3089659633","https://openalex.org/W3091588759","https://openalex.org/W3123154329","https://openalex.org/W3185585282","https://openalex.org/W3193808826","https://openalex.org/W3194450833","https://openalex.org/W3200192855","https://openalex.org/W4206172203","https://openalex.org/W4210556785","https://openalex.org/W4221145571","https://openalex.org/W4226330898","https://openalex.org/W4284680133","https://openalex.org/W4284709537","https://openalex.org/W4285490369","https://openalex.org/W4286561994","https://openalex.org/W4288279200","https://openalex.org/W4295846662","https://openalex.org/W4304128419","https://openalex.org/W4318969196","https://openalex.org/W4320458967","https://openalex.org/W4360948905","https://openalex.org/W4382619170","https://openalex.org/W4384026546","https://openalex.org/W4384345738"],"related_works":[],"abstract_inverted_index":{"As":[0],"a":[1,15,30,68,205,266],"widely":[2],"adopted":[3],"deep":[4],"learning":[5],"(DL)":[6],"framework,":[7],"TensorFlow's":[8,97,179],"vulnerabilities":[9,38,43,64,93,106,123,146,263],"have":[10],"the":[11,22,34,40,54,81,96,128,159,168,174,211,259],"potential":[12],"to":[13,149,178,242,257,277],"affect":[14],"substantial":[16],"number":[17],"of":[18,33,36,42,65,92,154,173,199,208,261,280],"DL":[19],"applications":[20],"throughout":[21],"software":[23,209],"supply":[24],"chain":[25],"(SSC).However,":[26],"Existing":[27],"research":[28],"lacks":[29],"comprehensive":[31],"exploration":[32],"characterization":[35],"TensorFlow":[37,66,194,252],"and":[39,49,102,116,170,189,228,230,239,249],"propagation":[41],"on":[44,62],"SSC.To":[45],"help":[46],"TensorFlow-based":[47,69],"developers":[48,222,253],"security":[50,55,180],"specialists":[51],"in":[52,95,127,136,193],"understanding":[53],"risks,":[56],"we":[57],"construct":[58],"an":[59],"empirical":[60],"study":[61],"429":[63],"across":[67,75,167],"vulnerability":[70,267],"SSC":[71],"comprising":[72],"5790":[73],"versions":[74],"691":[76],"affected":[77],"packages":[78,201],"constructed":[79],"through":[80],"GitHub":[82],"dependency":[83],"graph.We":[84],"observe":[85],"that:":[86,215],"1)":[87],"A":[88],"predominant":[89],"share":[90],"(79.6%)":[91],"occur":[94],"Core":[98],"modules":[99],"(e.g.,":[100],"kernels,":[101],"ops),":[103],"featuring":[104],"prevalent":[105],"such":[107],"as":[108],"Reachable":[109,244],"Assertion,":[110,245],"Out-of-bounds":[111],"Read,":[112],"Improper":[113],"Input":[114],"Validation,":[115],"NULL":[117],"Pointer":[118],"Dereference.Notably,":[119],"Divide":[120,246],"By":[121,247],"Zero":[122],"pose":[124],"significant":[125,206],"risks":[126],"Lite":[129],"module;":[130],"2)":[131],"Vulnerability":[132],"co-occurrence":[133],"is":[134],"observed":[135],"20":[137],"pairs":[138],"involving":[139],"50":[140],"vulnerabilities,":[141,195],"with":[142,151],"Heap-based":[143],"Buffer":[144],"Overflow":[145],"particularly":[147],"likely":[148],"coexist":[150],"other":[152],"types":[153],"vulnerabilities;":[155],"3)":[156],"Packages":[157],"within":[158,210],"Large":[160],"Language":[161],"Models":[162],"(LLM)":[163],"domain,":[164],"often":[165],"distributed":[166],"third":[169],"fourth":[171],"layers":[172],"SSC,":[175],"are":[176,191],"vulnerable":[177],"issues;":[181],"4)":[182],"Many":[183],"commonly":[184],"utilized":[185],"APIs":[186],"(i.e.tf.constant,":[187],"tf.concat,":[188],"tf.range),":[190],"implicated":[192],"affecting":[196],"over":[197],"half":[198],"all":[200],"and,":[202],"by":[203],"extension,":[204],"portion":[207],"SSC.Our":[212],"findings":[213],"suggest":[214],"i)It":[216],"would":[217,254,274],"be":[218,255,275,278],"better":[219,256,276],"for":[220],"Tensorflow":[221],"take":[223],"input":[224,271],"validation,":[225],"bounds":[226],"checking,":[227],"assertion":[229],"exception":[231],"handling":[232],"before":[233],"performing":[234],"tensor":[235],"operations,":[236,238],"division":[237],"pointer":[240],"accesses":[241],"avoid":[243],"Zero,":[248],"memory-related":[250,262],"vulnerabilities.ii)":[251],"scrutinize":[258],"presence":[260],"when":[264],"encountering":[265],"stemming":[268],"from":[269],"improper":[270],"validation.iii)TensorFlow-based":[272],"Developers":[273],"aware":[279]},"counts_by_year":[],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-10-28T00:00:00"}