OSLDetector: Identifying Open-Source Libraries through Binary Analysis
Wed 23 Sep 2020 02:25 - 02:30 at Wombat - Tool Demo Showcase (1) Chair(s): Yanyan Jiang
Using open-source libraries can provide rich functions and reduce development cost. However, some critical issues have also been caused such as license conflicts and vulnerability risks. In this paper, we design and implement an open-source libraries detection tool OSLDetector which uses methods of matching features to detect third-party libraries for multi-platform software in binaries. We took a series of methods such as filtering features and novelty building an internal clone forest to cope with the challenge of feature duplication. The tool can also provide the conflict of licenses and identify possible corresponding vulnerabilities, so these potential risks can be resolved and avoided. To evaluate the efficiency of OSLDetector, we collect 5K libraries containing 9K versions and manage their respective license type and existing vulnerabilities. The experimental results with a precision of 96\% and recall of 92.3\% show that OSLDetector is effective and outperforms similar tools.
Tue 22 Sep Times are displayed in time zone: (UTC) Coordinated Universal Time
02:20 - 03:20: Maintenance and Evolution (1)Research Papers / Tool Demonstrations at Wombat Chair(s): Yi LiNanyang Technological University, Singapore | |||
02:20 - 02:40 Talk | Learning to Handle Exceptions Research Papers Jian ZhangBeihang University, Xu WangBeihang University, Hongyu ZhangUniversity of Newcastle, Australia, Hailong SunBeihang University, Yanjun PuBeihang University, Xudong LiuBeihang University Pre-print | ||
02:40 - 03:00 Talk | BuildFast: History-Aware Build Outcome Prediction for Fast Feedback and Reduced Cost in Continuous Integration Research Papers Bihuan ChenFudan University, China, Linlin ChenFudan University, Chen ZhangFudan University, Xin PengFudan University, China | ||
03:00 - 03:10 Talk | OSLDetector: Identifying Open-Source Libraries through Binary Analysis Tool Demonstrations Dan ZhangTsinghua University |
Wed 23 Sep Times are displayed in time zone: (UTC) Coordinated Universal Time
02:20 - 03:20: Tool Demo Showcase (1)Tool Demonstrations at Wombat Chair(s): Yanyan JiangNanjing University | |||
02:20 - 02:25 Talk | JITBot: An Explainable Just-In-Time Defect Prediction Bot Tool Demonstrations Chaiyakarn KhananMahidol University, Worawit LuewichanaMahidol University, Krissakorn PruktharathikoonMahidol University, Jirayus JiarpakdeeMonash University, Australia, Chakkrit (Kla) TantithamthavornMonash University, Australia, Morakot ChoetkiertikulMahidol University, Thailand, Chaiyong RakhitwetsagulMahidol University, Thailand, Thanwadee SunetnantaMahidol University | ||
02:25 - 02:30 Talk | OSLDetector: Identifying Open-Source Libraries through Binary Analysis Tool Demonstrations Dan ZhangTsinghua University | ||
02:30 - 02:35 Talk | AirMochi – A Tool for Remotely Controlling iOS Devices Tool Demonstrations Nikola LukicUniversity of Southern California, Saghar TalebipourUniversity of Southern California, Nenad MedvidovićUniversity of Southern California, USA | ||
02:35 - 02:40 Talk | Edge4Real: A Cost-Effective Edge Computing based Human Behaviour Recognition System for Human-Centric Software Engineering Tool Demonstrations DI SHAOSchool of Information Technology, Deakin University, Xiao LiuSchool of Information Technology, Deakin University, Ben ChengSchool of Information Technology, Deakin University, Owen WangSchool of Information Technology, Deakin University, Thuong HoangSchool of Information Technology, Deakin University | ||
02:40 - 02:45 Talk | HomoTR: Online Test Recommendation System Based on Homologous Code Matching Tool Demonstrations Chenqian ZhuNanjing University, Weisong SunState Key Laboratory for Novel Software Technology, Nanjing University, Qin LIU, Yangyang YuanNanjing University, Chunrong FangNanjing University, China, Yong HuangState Key Laboratory for Novel Software Technology, Nanjing University | ||
02:45 - 02:50 Talk | WASim: Understanding WebAssembly Applications through Classification Tool Demonstrations | ||
02:50 - 03:20 Live Q&A | Q&A or Discussion Tool Demonstrations |