{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T16:32:33Z","timestamp":1784392353588,"version":"3.55.0"},"reference-count":68,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2025,4,1]],"date-time":"2025-04-01T00:00:00Z","timestamp":1743465600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,4,1]],"date-time":"2025-04-01T00:00:00Z","timestamp":1743465600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,4,1]],"date-time":"2025-04-01T00:00:00Z","timestamp":1743465600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key R&D Program of China","award":["2022YFB2901502"],"award-info":[{"award-number":["2022YFB2901502"]}]},{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272400"],"award-info":[{"award-number":["62272400"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2025,4]]},"DOI":"10.1109\/tse.2025.3537102","type":"journal-article","created":{"date-parts":[[2025,1,31]],"date-time":"2025-01-31T18:31:58Z","timestamp":1738348318000},"page":"990-1006","source":"Crossref","is-referenced-by-count":4,"title":["PATEN: Identifying Unpatched Third-Party APIs via Fine-Grained Patch-Enhanced AST-Level Signature"],"prefix":"10.1109","volume":"51","author":[{"ORCID":"https:\/\/orcid.org\/0009-0004-9895-8360","authenticated-orcid":false,"given":"Li","family":"Lin","sequence":"first","affiliation":[{"name":"School of Informatics, Xiamen University, Xiamen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-9812-4999","authenticated-orcid":false,"given":"Jialin","family":"Ye","sequence":"additional","affiliation":[{"name":"School of Informatics, Xiamen University, Xiamen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1672-915X","authenticated-orcid":false,"given":"Chao","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Informatics, Xiamen University, Xiamen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4648-3795","authenticated-orcid":false,"given":"Rongxin","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Informatics, Xiamen University, Xiamen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2018.00054"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2015.7081868"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3239235.3268920"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-020-09830-x"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME46990.2020.00014"},{"key":"ref6","article-title":"OWASP Dependency-Check","author":"Project","year":"2024"},{"key":"ref7","article-title":"OWASP Dependency-Check","author":"Inc.","year":"2024"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2018.00067"},{"key":"ref9","first-page":"101","article-title":"Software ecosystem call graph for dependency management","volume-title":"Proc. ICSE-NIER","author":"Hejderup","year":"2018"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.13"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.62"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2012.6227183"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23158"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/1858996.1859089"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884877"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180179"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1368088.1368132"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICPC.2008.41"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2007.30"},{"key":"ref20","first-page":"1165","article-title":"{MVP}: Detecting vulnerabilities using patch-enhanced vulnerability signatures","volume-title":"Proc. USENIX Secur.","author":"Xiao","year":"2020"},{"key":"ref21","first-page":"3037","article-title":"MOVERY: A precise approach for modified vulnerable code clone discovery from modified Open-Source software components","volume-title":"Proc. USENIX Secur.","author":"Woo","year":"2022"},{"key":"ref22","first-page":"1447","article-title":"Vision: Identifying affected library versions for open source software vulnerabilities","volume-title":"Proc. 39th IEEE\/ACM Int. Conf. Automated Softw. Eng.","author":"Wu","year":"2024"},{"key":"ref26","article-title":"OWASP Top 10","year":"2013"},{"key":"ref27","article-title":"OWASP Top 10,\u201d 2017","year":"2024"},{"key":"ref28","article-title":"OWASP Top 10,\u201d 2024","year":"2024"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238219"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1137\/0205011"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1137\/0218082"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1111\/j.0824-7935.2004.00255.x"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242590"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2642937.2642982"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236056"},{"key":"ref40","article-title":"National vulnerability database","year":"2024"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.acl-long.499"},{"key":"ref42","article-title":"Joern","year":"2024"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2007.70725"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2013.01.008"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1016\/j.scico.2009.02.007"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.2010.5609665"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2012.48"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2002.1019480"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2006.18"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1002\/smr.1707"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/2970276.2970326"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.1998.738528"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568286"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ICPC.2011.26"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/CSMR.2009.20"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1002\/smr.1592"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/1572272.1572283"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/1985793.1985835"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-47764-0_3"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2016.0185"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/394"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/ICPC.2019.00021"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/1869459.1869475"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/1287624.1287634"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2006.28"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-60876-1_15"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991102"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2018.2821768"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/2666356.2594343"},{"key":"ref71","first-page":"303","article-title":"Blanket execution: Dynamic similarity testing for program binaries and components","author":"Egele","year":"2014","journal-title":"USENIX Secur."},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23185"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978370"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.49"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664269"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134018"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/32\/10969500\/10859162.pdf?arnumber=10859162","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,18]],"date-time":"2025-04-18T17:38:01Z","timestamp":1744997881000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10859162\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4]]},"references-count":68,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tse.2025.3537102","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,4]]}}}