{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,13]],"date-time":"2026-08-13T14:55:25Z","timestamp":1786632925994,"version":"3.56.0"},"reference-count":71,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"11","license":[{"start":{"date-parts":[[2024,11,1]],"date-time":"2024-11-01T00:00:00Z","timestamp":1730419200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,11,1]],"date-time":"2024-11-01T00:00:00Z","timestamp":1730419200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,11,1]],"date-time":"2024-11-01T00:00:00Z","timestamp":1730419200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62102197"],"award-info":[{"award-number":["62102197"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62202245"],"award-info":[{"award-number":["62202245"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006606","name":"Natural Science Foundation of Tianjin","doi-asserted-by":"publisher","award":["22JCYBJC01010"],"award-info":[{"award-number":["22JCYBJC01010"]}],"id":[{"id":"10.13039\/501100006606","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2024,11]]},"DOI":"10.1109\/tse.2024.3454960","type":"journal-article","created":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T18:13:20Z","timestamp":1725560000000},"page":"2906-2920","source":"Crossref","is-referenced-by-count":9,"title":["Does the Vulnerability Threaten Our Projects? Automated Vulnerable API Detection for Third-Party Libraries"],"prefix":"10.1109","volume":"50","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-9599-1369","authenticated-orcid":false,"given":"Fangyuan","family":"Zhang","sequence":"first","affiliation":[{"name":"DISSec, NDST, College of Computer Science, Nankai University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2428-9297","authenticated-orcid":false,"given":"Lingling","family":"Fan","sequence":"additional","affiliation":[{"name":"DISSec, NDST, College of Cyber Science, Nankai University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9477-4100","authenticated-orcid":false,"given":"Sen","family":"Chen","sequence":"additional","affiliation":[{"name":"College of Intelligence and Computing, Tianjin University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-2747-3169","authenticated-orcid":false,"given":"Miaoying","family":"Cai","sequence":"additional","affiliation":[{"name":"DISSec, NDST, College of Computer Science, Nankai University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6887-6231","authenticated-orcid":false,"given":"Sihan","family":"Xu","sequence":"additional","affiliation":[{"name":"DISSec, NDST, College of Cyber Science, Nankai University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-9832-8948","authenticated-orcid":false,"given":"Lida","family":"Zhao","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Nanyang Technological University, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE43902.2021.00150"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3114381"},{"key":"ref3","article-title":"The 2022 \u201cOpen source security and risk analysis","year":"2023"},{"key":"ref4","article-title":"Component analysis OWASP foundation","year":"2023"},{"key":"ref5","article-title":"OWASP","year":"2023"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2018.00054"},{"key":"ref7","article-title":"Dependabot","year":"2023"},{"key":"ref8","article-title":"OSS Index","year":"2023"},{"key":"ref9","article-title":"Snyk","year":"2023"},{"key":"ref10","article-title":"blackduck","year":"2023"},{"key":"ref11","article-title":"Software composition analysis for devSecOps","year":"2023"},{"key":"ref12","article-title":"WhiteSource","year":"2023"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3611643.3616299"},{"key":"ref14","article-title":"Eclipse steady","year":"2023"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236056"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380426"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00068"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3057767"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510142"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00212"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3556956"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ASE56229.2023.00058"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00033"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3239235.3268920"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.2015.7332492"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-020-09830-x"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3680305"},{"key":"ref28","article-title":"Maven central repository","year":"2023"},{"key":"ref29","article-title":"What is Log4Shell?","year":"2023"},{"key":"ref30","article-title":"Software composition analysis (SCA): What is it and does your company need it?","year":"2023"},{"key":"ref31","article-title":"National Vulnerability Database","year":"2023"},{"key":"ref32","article-title":"Snyk Vulnerability DB","year":"2023"},{"key":"ref33","article-title":"GitHub Advisory Database","year":"2023"},{"key":"ref34","article-title":"GitHub","year":"2023"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2642937.2642982"},{"key":"ref36","article-title":"Patch commit of CVE-2011-2730","year":"2023"},{"key":"ref37","article-title":"CVE-2011-2730","year":"2023"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598120"},{"key":"ref39","article-title":"Patch commit of CVE-2022-26884","year":"2023"},{"key":"ref40","article-title":"CVE-2022-40955","year":"2023"},{"key":"ref41","article-title":"Patch commit of CVE-2022-40955","year":"2023"},{"key":"ref42","article-title":"Spring-framework","year":"2023"},{"key":"ref43","article-title":"Patch commit of CVE-2021-29480","year":"2023"},{"key":"ref44","article-title":"Patch commit of CVE-2020-36319","year":"2023"},{"key":"ref45","article-title":"Patch commit of CVE-2014-0193","year":"2023"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.2307\/2685469"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-015-9408-2"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME55016.2022.00037"},{"key":"ref49","article-title":"Home page of project \u2018KB\u2019","year":"2023"},{"key":"ref50","article-title":"Soot","year":"2023"},{"key":"ref51","article-title":"Wala","year":"2023"},{"key":"ref52","article-title":"CVE-2020-10683","year":"2023"},{"key":"ref53","article-title":"Patch commit of CVE-2020-10683","year":"2023"},{"key":"ref54","article-title":"Patch commit of CVE-2021-30640","year":"2023"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2816033"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3524842.3528482"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME46990.2020.00014"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3556921"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00095"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2020.3025443"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.38"},{"key":"ref62","first-page":"919","article-title":"Automated third-party library detection for android applications: Are we there yet?","volume-title":"Proc. 35th IEEE\/ACM Int. Conf. Autom. Softw. Eng. (ASE)","author":"Zhan","year":"2020"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3293882.3330563"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2018.8330204"},{"key":"ref65","first-page":"653","article-title":"LibRadar: Fast and accurate detection of third-party libraries in Android apps","volume-title":"Proc. 38th Int. Conf. Softw. Eng. Companion (ICSE-C)","author":"Ma","year":"2016"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978333"},{"key":"ref67","doi-asserted-by":"crossref","first-page":"13","DOI":"10.1145\/3197231.3197248","article-title":"ORLIS: Obfuscation-resilient library detection for Android","volume-title":"Proc. 5th Int. Conf. Mobile Softw. Eng. Syst. (MOBILESoft)","author":"Wang","year":"2018"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134048"},{"key":"ref69","first-page":"659","article-title":"Finding unknown malice in 10 seconds: Mass vetting for new threats at the Google-Play scale","volume-title":"Proc. 24th USENIX Security Symp. (USENIX Security 15)","author":"Chen","year":"2015"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2016.52"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/3292006.3300020"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/32\/10752626\/10666791.pdf?arnumber=10666791","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,27]],"date-time":"2024-11-27T00:34:08Z","timestamp":1732667648000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10666791\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11]]},"references-count":71,"journal-issue":{"issue":"11"},"URL":"https:\/\/doi.org\/10.1109\/tse.2024.3454960","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,11]]}}}