{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,18]],"date-time":"2026-06-18T04:09:25Z","timestamp":1781755765360,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":43,"publisher":"ACM","license":[{"start":{"date-parts":[[2016,5,14]],"date-time":"2016-05-14T00:00:00Z","timestamp":1463184000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100001691","name":"Japan Society for the Promotion of Science","doi-asserted-by":"publisher","award":["25220003"],"award-info":[{"award-number":["25220003"]}],"id":[{"id":"10.13039\/501100001691","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2016,5,14]]},"DOI":"10.1145\/2901739.2901773","type":"proceedings-article","created":{"date-parts":[[2016,5,22]],"date-time":"2016-05-22T02:39:36Z","timestamp":1463884776000},"page":"339-350","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["Software ingredients"],"prefix":"10.1145","author":[{"given":"Takashi","family":"Ishio","sequence":"first","affiliation":[{"name":"Osaka University, Osaka, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Raula Gaikovina","family":"Kula","sequence":"additional","affiliation":[{"name":"Osaka University, Osaka, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tetsuya","family":"Kanda","sequence":"additional","affiliation":[{"name":"Osaka University, Osaka, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Daniel M.","family":"German","sequence":"additional","affiliation":[{"name":"University of Victoria, Victoria, BC, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Katsuro","family":"Inoue","sequence":"additional","affiliation":[{"name":"Osaka University, Osaka, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2016,5,14]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Apache BVal Project. Project modules. http:\/\/bval.apache.org\/mvnsite\/modules.html (Accessed January 29 2016).  Apache BVal Project. Project modules. http:\/\/bval.apache.org\/mvnsite\/modules.html (Accessed January 29 2016)."},{"key":"e_1_3_2_1_2_1","volume-title":"Arbitrary remote code execution with InvokerTransformer","author":"Collections Apache Commons","year":"2015","unstructured":"Apache Commons Collections . Arbitrary remote code execution with InvokerTransformer , 2015 . https:\/\/issues.apache.org\/jira\/browse\/COLLECTIONS-580. Apache Commons Collections. Arbitrary remote code execution with InvokerTransformer, 2015. https:\/\/issues.apache.org\/jira\/browse\/COLLECTIONS-580."},{"key":"e_1_3_2_1_3_1","unstructured":"Apache Maven Project. Apache maven assembly plugin. http:\/\/maven.apache.org\/plugins\/maven-assembly-plugin\/.  Apache Maven Project. Apache maven assembly plugin. http:\/\/maven.apache.org\/plugins\/maven-assembly-plugin\/."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.5555\/2662708.2662721"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSM.2013.39"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568286"},{"key":"e_1_3_2_1_7_1","unstructured":"L. Constantin. Developers often unwittingly use components that contain flaws. ITWorld.com http:\/\/www.itworld.com\/article\/2936575\/security\/software-applications-have-on-average-24-vulnerabilities-inherited-from-buggy-components.html {Posted June 16 2015}.  L. Constantin. Developers often unwittingly use components that contain flaws. ITWorld.com http:\/\/www.itworld.com\/article\/2936575\/security\/software-applications-have-on-average-24-vulnerabilities-inherited-from-buggy-components.html {Posted June 16 2015}."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1985441.1985468"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-012-9199-7"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2010.5463282"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSMR-WCRE.2014.6747226"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2011.44"},{"key":"e_1_3_2_1_13_1","unstructured":"Eclipse Documentation. Runnable jar file exporter. http:\/\/help.eclipse.org\/luna\/index.jsp?topic=%2Forg.eclipse.jdt.doc.user%2Ftasks%2Ftasks-37.htm.  Eclipse Documentation. Runnable jar file exporter. http:\/\/help.eclipse.org\/luna\/index.jsp?topic=%2Forg.eclipse.jdt.doc.user%2Ftasks%2Ftasks-37.htm."},{"key":"e_1_3_2_1_14_1","volume-title":"Linkbench: A database benchmark for the social graph","author":"Engineering Facebook","year":"2013","unstructured":"Facebook Engineering . Linkbench: A database benchmark for the social graph , 2013 . https:\/\/www.facebook.com\/notes\/facebook-engineering\/linkbench-a-database-benchmark-for-the-social-graph\/10151391496443920\/. Facebook Engineering. Linkbench: A database benchmark for the social graph, 2013. https:\/\/www.facebook.com\/notes\/facebook-engineering\/linkbench-a-database-benchmark-for-the-social-graph\/10151391496443920\/."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2014.61"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2012.50"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2009.5069483"},{"key":"e_1_3_2_1_18_1","unstructured":"GWT Project. Getting started. http:\/\/www.gwtproject.org\/gettingstarted.html.  GWT Project. Getting started. http:\/\/www.gwtproject.org\/gettingstarted.html."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.5555\/2022115.2022138"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1985441.1985453"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2012.45"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.5555\/2337223.2337263"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2002.1019480"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/2491627.2491637"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/SCAM.2014.17"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/VISSOFT.2014.29"},{"key":"e_1_3_2_1_27_1","volume-title":"UCI source code data sets","author":"Lopes C.","year":"2010","unstructured":"C. Lopes , S. Bajracharya , J. Ossher , and P. Baldi . UCI source code data sets , 2010 . http:\/\/www.ics.uci.edu\/~lopes\/datasets\/. C. Lopes, S. Bajracharya, J. Ossher, and P. Baldi. UCI source code data sets, 2010. http:\/\/www.ics.uci.edu\/~lopes\/datasets\/."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2635868.2635900"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.5555\/998675.999433"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2013.142"},{"key":"e_1_3_2_1_31_1","volume-title":"Subversion Repository of muCommander. https:\/\/svn.mucommander.com\/mucommander\/ (Accessed","author":"Project Commander","year":"2016","unstructured":"mu Commander Project . Subversion Repository of muCommander. https:\/\/svn.mucommander.com\/mucommander\/ (Accessed January 29, 2016 ). muCommander Project. Subversion Repository of muCommander. https:\/\/svn.mucommander.com\/mucommander\/ (Accessed January 29, 2016)."},{"key":"e_1_3_2_1_32_1","unstructured":"National Vulnerability Database. CVE-2014-0107 2014. https:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2014-0107.  National Vulnerability Database. CVE-2014-0107 2014. https:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2014-0107."},{"key":"e_1_3_2_1_33_1","unstructured":"National Vulnerability Database. CVE-2014-3577 2014. https:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2014-3577.  National Vulnerability Database. CVE-2014-3577 2014. https:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2014-3577."},{"key":"e_1_3_2_1_34_1","unstructured":"National Vulnerability Database. CVE-2015-0254 2015. https:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2015-0254.  National Vulnerability Database. CVE-2015-0254 2015. https:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2015-0254."},{"key":"e_1_3_2_1_35_1","first-page":"261","volume-title":"Proceedings of the 22nd IEEE International Conference on Software Analysis, Evolution, and Reengineering","author":"Qiu J.","year":"2015","unstructured":"J. Qiu , X. Su , and P. Ma . Library functions identification in binary code by using graph isomorphism testings . In Proceedings of the 22nd IEEE International Conference on Software Analysis, Evolution, and Reengineering , pages 261 -- 270 , 2015 . J. Qiu, X. Su, and P. Ma. Library functions identification in binary code by using graph isomorphism testings. In Proceedings of the 22nd IEEE International Conference on Software Analysis, Evolution, and Reengineering, pages 261--270, 2015."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/SCAM.2014.30"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2491627.2491644"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/1572272.1572287"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043174.2043193"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/2597073.2597111"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1002\/smr.1660"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2013.6671293"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.5555\/2820282.2820330"}],"event":{"name":"ICSE '16: 38th International Conference on Software Engineering","location":"Austin Texas","acronym":"ICSE '16","sponsor":["ACM Association for Computing Machinery","SIGSOFT ACM Special Interest Group on Software Engineering","IEEE-CS\\DATC IEEE Computer Society","TCSE IEEE Computer Society's Tech. Council on Software Engin."]},"container-title":["Proceedings of the 13th International Conference on Mining Software Repositories"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2901739.2901773","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2901739.2901773","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T19:05:32Z","timestamp":1750273532000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2901739.2901773"}},"subtitle":["detection of third-party component reuse in Java software release"],"short-title":[],"issued":{"date-parts":[[2016,5,14]]},"references-count":43,"alternative-id":["10.1145\/2901739.2901773","10.1145\/2901739"],"URL":"https:\/\/doi.org\/10.1145\/2901739.2901773","relation":{},"subject":[],"published":{"date-parts":[[2016,5,14]]},"assertion":[{"value":"2016-05-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}