{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,30]],"date-time":"2026-07-30T02:59:45Z","timestamp":1785380385094,"version":"3.55.0"},"reference-count":36,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"9","license":[{"start":{"date-parts":[[2022,9,1]],"date-time":"2022-09-01T00:00:00Z","timestamp":1661990400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,9,1]],"date-time":"2022-09-01T00:00:00Z","timestamp":1661990400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,9,1]],"date-time":"2022-09-01T00:00:00Z","timestamp":1661990400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2022,9,1]]},"DOI":"10.1109\/tse.2021.3101739","type":"journal-article","created":{"date-parts":[[2021,8,4]],"date-time":"2021-08-04T20:24:57Z","timestamp":1628108697000},"page":"3613-3625","source":"Crossref","is-referenced-by-count":27,"title":["Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite"],"prefix":"10.1109","volume":"48","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6587-7431","authenticated-orcid":false,"given":"Andreas","family":"Dann","sequence":"first","affiliation":[{"name":"Secure Software Engineering group, Heinz Nixdorf Institute, Paderborn University, Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8862-3488","authenticated-orcid":false,"given":"Henrik","family":"Plate","sequence":"additional","affiliation":[{"name":"SAP Security Research, Mougins, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9848-2017","authenticated-orcid":false,"given":"Ben","family":"Hermann","sequence":"additional","affiliation":[{"name":"Secure Software Engineering Group, Technische Universität Dortmund, Dortmund, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6208-4743","authenticated-orcid":false,"given":"Serena Elisa","family":"Ponta","sequence":"additional","affiliation":[{"name":"SAP Security Research, Mougins, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3470-3647","authenticated-orcid":false,"given":"Eric","family":"Bodden","sequence":"additional","affiliation":[{"name":"Secure Software Engineering, Department of Computer Science, Paderborn University, Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"The state of open source security in commercial applications","author":"Pittenger","year":"2016"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-21347-2_16"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.2012.6405311"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-014-9325-9"},{"key":"ref5","article-title":"Equifax","year":"2017"},{"key":"ref6","article-title":"Equifax Breach","author":"Krebs","year":"2018"},{"key":"ref7","article-title":"Cve-2017\u20135638","year":"2017"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-017-9521-5"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-020-09830-x"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2019.00064"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2018.00054"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2020.3025443"},{"key":"ref13","article-title":"Evaluation framework for dependency analysis","year":"2020"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3239235.3268920"},{"key":"ref15","article-title":"Central download statistics for OSS projects","year":"2020"},{"key":"ref17","article-title":"The unfortunate reality of insecure libraries","author":"Williams","year":"2014"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3133908"},{"key":"ref19","article-title":"NVD","year":"2020"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2484313.2484377"},{"key":"ref21","article-title":"CVE-2018\u20131271","year":"2020"},{"key":"ref22","article-title":"Exploit database","year":"2020"},{"key":"ref23","article-title":"Security alerts","year":"2020"},{"key":"ref24","first-page":"1","article-title":"BugBox: A vulnerability corpus for PHP web applications","volume-title":"Proc. 6th Workshop Cyber Secur. Exp. Test","author":"Nilson"},{"key":"ref25","article-title":"Samate - software assurance metrics and tool evaluation","year":"2018"},{"key":"ref26","article-title":"Securibench","author":"Livshits","year":"2012"},{"key":"ref27","article-title":"Juliet test suite","year":"2017"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/1167515.1167488"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/APSEC.2010.46"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.5381\/jot.2017.16.4.a1"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-008-9102-8"},{"key":"ref32","article-title":"100 popular projects","year":"2020"},{"key":"ref33","article-title":"Vulnerability assessment knowledge base","year":"2020"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3315568.3329966"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2014.45"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CTC.2013.9"},{"key":"ref37","article-title":"Steady","year":"2020"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/32\/9894039\/09506931.pdf?arnumber=9506931","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,11]],"date-time":"2024-01-11T22:38:36Z","timestamp":1705012716000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9506931\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,9,1]]},"references-count":36,"journal-issue":{"issue":"9"},"URL":"https:\/\/doi.org\/10.1109\/tse.2021.3101739","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,9,1]]}}}