{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,16]],"date-time":"2026-10-16T02:58:16Z","timestamp":1792119496301,"version":"4.4.0"},"publisher-location":"New York, NY, USA","reference-count":42,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,4,12]],"date-time":"2024-04-12T00:00:00Z","timestamp":1712880000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"CUHK","award":["14209323"],"award-info":[{"award-number":["14209323"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,4,12]]},"DOI":"10.1145\/3597503.3639104","type":"proceedings-article","created":{"date-parts":[[2024,4,12]],"date-time":"2024-04-12T16:43:26Z","timestamp":1712940206000},"page":"1-12","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":9,"title":["Strengthening Supply Chain Security with Fine-grained Safe Patch Identification"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2133-3384","authenticated-orcid":false,"given":"Changhua","family":"Luo","sequence":"first","affiliation":[{"name":"The Chinese University of Hong Kong, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8260-3304","authenticated-orcid":false,"given":"Wei","family":"Meng","sequence":"additional","affiliation":[{"name":"The Chinese University of Hong Kong, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0866-0308","authenticated-orcid":false,"given":"Shuai","family":"Wang","sequence":"additional","affiliation":[{"name":"HKUST, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,4,12]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2023. Lua version used for wireshark dissectors. https:\/\/github.com\/o-gs\/dji-firmware-tools\/issues\/153."},{"key":"e_1_3_2_1_2_1","unstructured":"Proton AG. 2023. Proton VPN. https:\/\/play.google.com\/store\/apps\/details?id=ch.protonvpn.android&utm_campaign=ww-all-2a-vpn-int_site-g_acq-apps_links_free_vpn_page&utm_source=protonvpn.com&utm_medium=link&utm_content=free_vpn_page&utm_term=android&pli=1."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3409757"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.17"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484594"},{"key":"e_1_3_2_1_6_1","volume-title":"Proceedings of the 17th USENIX Symposium on Operating Systems Design and Implementation (OSDI)","author":"David Yaniv","year":"2020","unstructured":"Yaniv David, Xudong Sun, Raphael J Sofaer, Aditya Senthilnathan, Junfeng Yang, Zhiqiang Zuo, Guoqing Harry Xu, Jason Nieh, and Ronghui Gu. 2020. {UPGRADVISOR}: Early Adopting Dependency Updates Using Hybrid Program Analysis and Hardware Tracing. In Proceedings of the 17th USENIX Symposium on Operating Systems Design and Implementation (OSDI). Carlsbad, CA, USA."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2642937.2642982"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2017.15"},{"key":"e_1_3_2_1_9_1","volume-title":"Bad Binder: Android In-The-Wild Exploit. https:\/\/googleprojectzero.blogspot.com\/2019\/11\/bad-binder-android-in-wild-exploit.html.","year":"2023","unstructured":"Google. 2023. Bad Binder: Android In-The-Wild Exploit. https:\/\/googleprojectzero.blogspot.com\/2019\/11\/bad-binder-android-in-wild-exploit.html."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00071"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2017.19"},{"key":"e_1_3_2_1_12_1","volume-title":"Proceedings of the 43nd IEEE Symposium on Security and Privacy (Oakland)","author":"Jiang Zheyue","year":"2022","unstructured":"Zheyue Jiang, Yuan Zhang, Jun Xu, Xinqian Sun, Zhuang Liu, and Min Yang. 2022. AEM: Facilitating Cross-Version Exploitability Assessment of Linux Kernel Vulnerabilities. In Proceedings of the 43nd IEEE Symposium on Security and Privacy (Oakland). San Francisco, CA, USA."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.62"},{"key":"e_1_3_2_1_14_1","unstructured":"Klee. 2023. KLEE Symbolic Execution Engine. KLEESymbolicExecutionEngine."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2019.2895423"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-32304-2_3"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354244"},{"key":"e_1_3_2_1_18_1","unstructured":"Lua. 2015. Potential arithmetic overflow in Lua. https:\/\/clang-analyzer.llvm.org\/scan-build.html."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/2635868.2635900"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833613"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00038"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815400.2815422"},{"key":"e_1_3_2_1_23_1","unstructured":"openvpn. 2023. Compatiblity issues in OpenVPN. https:\/\/forums.openvpn.net\/viewtopic.php?t=35028."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1453101.1453131"},{"key":"e_1_3_2_1_25_1","unstructured":"Redis. 2023. Redis. https:\/\/github.com\/redis\/redis\/blob\/unstable\/deps\/README.md."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510216"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2901739.2903495"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.5555\/2337223.2337269"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106300"},{"key":"e_1_3_2_1_30_1","volume-title":"Proceedings of the 43nd IEEE Symposium on Security and Privacy (Oakland)","author":"Wang Shu","year":"2022","unstructured":"Shu Wang, Xinda Wang, Kun Sun, Sushil Jajodia, Haining Wang, and Qi Li. 2022. GraphSPD: Graph-Based Security Patch Detection with Enriched Code Semantics. In Proceedings of the 43nd IEEE Symposium on Security and Privacy (Oakland). San Francisco, CA, USA."},{"key":"e_1_3_2_1_31_1","volume-title":"An empirical study of secret security patch in open source software. Adaptive Autonomous Secure Cyber Systems","author":"Wang Xinda","year":"2020","unstructured":"Xinda Wang, Kun Sun, Archer Batcheller, and Sushil Jajodia. 2020. An empirical study of secret security patch in open source software. Adaptive Autonomous Secure Cyber Systems (2020), 269--289."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48987.2021.00030"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM52596.2021.9652940"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/CNS48642.2020.9162237"},{"key":"e_1_3_2_1_35_1","volume-title":"Proceedings of the 29th ACM Conference on Computer and Communications Security (CCS)","author":"Woo Seunghoon","year":"2022","unstructured":"Seunghoon Woo, Hyunji Hong, Eunjin Choi, and Heejo Lee. 2022. {MOVERY}: A Precise Approach for Modified Vulnerable Code Clone Discovery from Modified { Open-Source } Software Components. In Proceedings of the 29th ACM Conference on Computer and Communications Security (CCS). Los Angeles, CA, USA."},{"key":"e_1_3_2_1_36_1","volume-title":"Proceedings of the 44th International Conference on Software Engineering (ICSE)","author":"Woo Seunghoon","year":"2022","unstructured":"Seunghoon Woo, Sunghan Park, Seulbae Kim, Heejo Lee, and Hakjoo Oh. 2022. CENTRIS: A precise and scalable approach for identifying modified open-source software reuse. In Proceedings of the 44th International Conference on Software Engineering (ICSE). Pittsburgh, PA, USA."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24419"},{"key":"e_1_3_2_1_38_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (Security). Virtual Event.","author":"Xiao Yang","year":"2020","unstructured":"Yang Xiao, Bihuan Chen, Chendong Yu, Zhengzi Xu, Zimu Yuan, and Feng Li. 2020. MVP : Detecting Vulnerabilities using Patch-Enhanced Vulnerability Signatures. In Proceedings of the 29th USENIX Security Symposium (Security). Virtual Event."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.44"},{"key":"e_1_3_2_1_40_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (Security). Virtual Event.","author":"Zhang Zheng","year":"2020","unstructured":"Zheng Zhang, Hang Zhang, Zhiyun Qian, and Billy Lau. 2020. An Investigation of the Android Kernel Patch Ecosystem.. In Proceedings of the 29th USENIX Security Symposium (Security). Virtual Event."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3468854","article-title":"Spi: Automated identification of security patches via commits","volume":"31","author":"Zhou Yaqin","year":"2021","unstructured":"Yaqin Zhou, Jing Kai Siow, Chenyu Wang, Shangqing Liu, and Yang Liu. 2021. Spi: Automated identification of security patches via commits. ACM Transactions on Software Engineering and Methodology (TOSEM) 31, 1 (2021), 1--27.","journal-title":"ACM Transactions on Software Engineering and Methodology (TOSEM)"},{"key":"e_1_3_2_1_42_1","volume-title":"Proceedings of the 31st USENIX Security Symposium (Security)","author":"Zou Xiaochen","year":"2022","unstructured":"Xiaochen Zou, Guoren Li, Weiteng Chen, Hang Zhang, and Zhiyun Qian. 2022. {SyzScope}: Revealing {High-Risk} Security Impacts of {Fuzzer-Exposed} Bugs in Linux kernel. In Proceedings of the 31st USENIX Security Symposium (Security). Boston, MA, USA."}],"event":{"name":"ICSE '24: IEEE\/ACM 46th International Conference on Software Engineering","location":"Lisbon Portugal","acronym":"ICSE '24","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS","Faculty of Engineering of University of Porto"]},"container-title":["Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597503.3639104","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3597503.3639104","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T22:49:11Z","timestamp":1750286951000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597503.3639104"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,12]]},"references-count":42,"alternative-id":["10.1145\/3597503.3639104","10.1145\/3597503"],"URL":"https:\/\/doi.org\/10.1145\/3597503.3639104","relation":{},"subject":[],"published":{"date-parts":[[2024,4,12]]},"assertion":[{"value":"2024-04-12","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}