{"id":"https://openalex.org/W7155512452","doi":"https://doi.org/10.48550/arxiv.2604.21111","title":"A Ground-Truth-Based Evaluation of Vulnerability Detection Across Multiple Ecosystems","display_name":"A Ground-Truth-Based Evaluation of Vulnerability Detection Across Multiple Ecosystems","publication_year":2026,"publication_date":"2026-04-22","ids":{"openalex":"https://openalex.org/W7155512452","doi":"https://doi.org/10.48550/arxiv.2604.21111"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.21111","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.21111","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.21111","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042685867","display_name":"Peter Mandl","orcid":"https://orcid.org/0000-0003-4508-7667"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mandl, Peter","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103846460","display_name":"Paul Mandl","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mandl, Paul","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052851200","display_name":"Martin H\u00e4usl","orcid":"https://orcid.org/0000-0001-5276-4166"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"H\u00e4usl, Martin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5007056478","display_name":"Maximilian Auch","orcid":"https://orcid.org/0000-0002-4860-7464"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Auch, Maximilian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.491100013256073,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.491100013256073,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.2160000056028366,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.1574999988079071,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7283999919891357},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"Vulnerability management","score":0.5961999893188477},{"id":"https://openalex.org/keywords/snapshot","display_name":"Snapshot (computer storage)","score":0.5641999840736389},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.5582000017166138},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5012000203132629},{"id":"https://openalex.org/keywords/identifier","display_name":"Identifier","score":0.45399999618530273},{"id":"https://openalex.org/keywords/range","display_name":"Range (aeronautics)","score":0.3776000142097473},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.3702999949455261}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7283999919891357},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.720300018787384},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.5961999893188477},{"id":"https://openalex.org/C55282118","wikidata":"https://www.wikidata.org/wiki/Q252683","display_name":"Snapshot (computer storage)","level":2,"score":0.5641999840736389},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.5582000017166138},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5012000203132629},{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.45399999618530273},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4465000033378601},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.3776000142097473},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.3702999949455261},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.36090001463890076},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.35440000891685486},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.3050999939441681},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.2872999906539917},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.2808000147342682},{"id":"https://openalex.org/C109364679","wikidata":"https://www.wikidata.org/wiki/Q918779","display_name":"Geoinformatics","level":2,"score":0.27649998664855957},{"id":"https://openalex.org/C2984074130","wikidata":"https://www.wikidata.org/wiki/Q73539779","display_name":"R package","level":2,"score":0.2750000059604645},{"id":"https://openalex.org/C2984968299","wikidata":"https://www.wikidata.org/wiki/Q1077784","display_name":"Software tool","level":3,"score":0.2750000059604645},{"id":"https://openalex.org/C24756922","wikidata":"https://www.wikidata.org/wiki/Q1757694","display_name":"Data quality","level":3,"score":0.25949999690055847},{"id":"https://openalex.org/C41856607","wikidata":"https://www.wikidata.org/wiki/Q483130","display_name":"Geographic information system","level":2,"score":0.2590999901294708}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.21111","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.21111","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.21111","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.21111","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Life in Land","id":"https://metadata.un.org/sdg/15","score":0.5574904084205627}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Automated":[0],"vulnerability":[1,28,49,91,110,152],"detection":[2,50,83,153],"tools":[3,19,87],"are":[4,96],"widely":[5],"used":[6,101],"to":[7,23,73],"identify":[8],"security":[9,166],"vulnerabilities":[10,72],"in":[11,36,102,143],"software":[12,53],"dependencies.":[13],"However,":[14],"the":[15,24,62,99,109,113,116,132,135,140,157],"evaluation":[16,47,147],"of":[17,27,48,82,108,115,159],"such":[18,93],"remains":[20],"challenging":[21],"due":[22],"heterogeneous":[25],"structure":[26],"data":[29],"sources,":[30],"inconsistent":[31],"identifier":[32],"schemes,":[33],"and":[34,77,88,121,155],"ambiguities":[35],"version":[37],"range":[38],"specifications.":[39],"In":[40],"this":[41,103,144],"paper,":[42],"we":[43,124],"present":[44],"an":[45,126],"empirical":[46,165],"across":[51,85],"multiple":[52],"ecosystems":[54],"using":[55,139],"a":[56,79,106],"curated":[57],"ground-truth":[58],"dataset":[59,69,100,133,161],"derived":[60],"from":[61,134],"Open":[63],"Source":[64],"Vulnerabilities":[65],"(OSV)":[66],"database.":[67],"The":[68],"explicitly":[70],"maps":[71],"concrete":[74],"package":[75],"versions":[76],"enables":[78],"systematic":[80,149],"comparison":[81],"results":[84],"different":[86],"services.":[89],"Since":[90],"databases":[92],"as":[94],"OSV":[95,137],"continuously":[97],"updated,":[98],"study":[104],"represents":[105],"snapshot":[107],"landscape":[111],"at":[112],"time":[114],"evaluation.":[117],"To":[118],"support":[119],"reproducibility":[120],"future":[122],"studies,":[123],"provide":[125],"open-source":[127],"tool":[128],"that":[129],"automatically":[130],"reconstructs":[131],"current":[136],"database":[138],"methodology":[141],"described":[142],"paper.":[145],"Our":[146],"highlights":[148],"differences":[150],"between":[151],"systems":[154],"demonstrates":[156],"importance":[158],"transparent":[160],"construction":[162],"for":[163],"reproducible":[164],"research.":[167]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-25T00:00:00"}