{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,4]],"date-time":"2026-11-04T18:56:27Z","timestamp":1793818587518,"version":"4.6.1"},"publisher-location":"New York, NY, USA","reference-count":36,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,4,16]],"date-time":"2024-04-16T00:00:00Z","timestamp":1713225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,4,16]]},"DOI":"10.1145\/3643691.3648586","type":"proceedings-article","created":{"date-parts":[[2024,7,29]],"date-time":"2024-07-29T14:29:09Z","timestamp":1722263349000},"page":"28-35","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Code Ownership in Open-Source AI Software Security"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-4675-4485","authenticated-orcid":false,"given":"Jiawen","family":"Wen","sequence":"first","affiliation":[{"name":"The University of Sydney, Sydney, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1130-0888","authenticated-orcid":false,"given":"Dong","family":"Yuan","sequence":"additional","affiliation":[{"name":"The University of Sydney, Sydney, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8621-2420","authenticated-orcid":false,"given":"Lei","family":"Ma","sequence":"additional","affiliation":[{"name":"The University of Tokyo, Tokyo, Japan"},{"name":"University of Alberta, Edmonton, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5678-472X","authenticated-orcid":false,"given":"Huaming","family":"Chen","sequence":"additional","affiliation":[{"name":"The University of Sydney, Sydney, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,7,29]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2023. Determining the Source of Truth for Software Components. https:\/\/www.Hnux.com\/news\/determining-the-source-of-truth-for-software-components\/ Accessed: 2023-11-02."},{"key":"e_1_3_2_1_2_1","unstructured":"2023. Frobenius Norm. https:\/\/mathworld.wolfram.com\/FrobeniusNorm.html. Accessed: 2023-11-03."},{"key":"e_1_3_2_1_3_1","volume-title":"System Sciences, 2009. HICSS'09. 42nd Hawaii International Conference on. IEEE, 1--8.","author":"Arafat O.","unstructured":"O. Arafat and D. Riehle. 2009. The commit size distribution of open source software. In System Sciences, 2009. HICSS'09. 42nd Hawaii International Conference on. IEEE, 1--8."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1080\/1206212X.2018.1497575"},{"key":"e_1_3_2_1_5_1","volume-title":"Proc. 19th ACM SIGSOFT Symp. 13th Eur. Conf. Found. Softw. Eng.","author":"Bird C.","unstructured":"C. Bird, B. Murphy, and H. Gall. 2011. Don't touch my code! Examining the effects of ownership on software quality. In Proc. 19th ACM SIGSOFT Symp. 13th Eur. Conf. Found. Softw. Eng."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.5555\/1543767.1543778"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2010.83"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/32.935855"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/FLOSS.2007.9"},{"key":"e_1_3_2_1_10_1","volume-title":"Proc. of the 18th International Conference on Evaluation and Assessment in Software Engineering","author":"Foucault M.","unstructured":"M. Foucault, J.-R. Falleri, and X. Blanc. 2014. Code ownership in open-source software. In Proc. of the 18th International Conference on Evaluation and Assessment in Software Engineering. New York."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511815867"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.2307\/2841583"},{"key":"e_1_3_2_1_13_1","volume-title":"Proc. of the 12th International Working Conference on Mining Software Repositories. 2--12","author":"Greiler M.","unstructured":"M. Greiler, K. Herzig, and J. Czerwonka. 2015. Code Ownership and Software Quality: A Replication Study. In Proc. of the 12th International Working Conference on Mining Software Repositories. 2--12."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/s42452-019-1142-8"},{"key":"e_1_3_2_1_15_1","unstructured":"Joseph R. Biden Jr. 2021. Executive Order on Improving the Nation's Cybersecurity."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1093\/biomet\/30.1-2.81"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-017-9521-5"},{"key":"e_1_3_2_1_18_1","volume-title":"Proc. of the 44th IEEE Symposium on Security and Privacy (S&P '23)","author":"Ladisa P.","unstructured":"P. Ladisa, H. Plate, M. Martinez, and O. Barais. 2023. Sok: Taxonomy of attacks on open-source software supply chains. In Proc. of the 44th IEEE Symposium on Security and Privacy (S&P '23). 167--184."},{"key":"e_1_3_2_1_19_1","volume-title":"Proceedings of the 31st EUROMICRO Conference. IEEE Computer Society Press.","author":"Lau K.-K.","unstructured":"K.-K. Lau and Z. Wang. 2005. A Taxonomy of Software Component Models. In Proceedings of the 31st EUROMICRO Conference. IEEE Computer Society Press."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2023.3266137"},{"key":"e_1_3_2_1_21_1","first-page":"209","article-title":"The detection of disease clustering and a generalized regression approach","volume":"27","author":"Mantel N.","year":"1967","unstructured":"N. Mantel. 1967. The detection of disease clustering and a generalized regression approach. Cancer Research 27, 2 (1967), 209--220.","journal-title":"Cancer Research"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/ESEM.2013.19"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2011.11.010"},{"key":"e_1_3_2_1_24_1","volume-title":"Proc. of the 26th ACM SIGSOFT Int. Symposium on Software Testing and Analysis","author":"Mostafa S.","unstructured":"S. Mostafa, R. Rodriguez, and X. Wang. 2017. Experience paper: a study on behavioral backward incompatibilities of Java software libraries. In Proc. of the 26th ACM SIGSOFT Int. Symposium on Software Testing and Analysis (Santa Barbara, CA, USA). 215--225."},{"key":"e_1_3_2_1_25_1","volume-title":"Proceedings of the 27th International Conference on Software Engineering. 284--292","author":"Nagappan N.","unstructured":"N. Nagappan and T. Ball. 2005. Use of relative code churn measures to predict system defect density. In Proceedings of the 27th International Conference on Software Engineering. 284--292."},{"key":"e_1_3_2_1_26_1","volume-title":"Enisa threat landscape","author":"European Network and Information Security Agency","year":"2021","unstructured":"European Network and Information Security Agency. 2021. Enisa threat landscape 2021. Technical Report. European Network and Information Security Agency."},{"key":"e_1_3_2_1_27_1","volume-title":"Proceedings of the ACM SIGSOFT international symposium on Software testing and analysis.","author":"Ostrand T.","unstructured":"T. Ostrand, E. Weyuker, and R. Bell. 2004. Where the bugs are. In Proceedings of the ACM SIGSOFT international symposium on Software testing and analysis."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.apm.2014.08.006"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3239235.3268920"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1098\/rspl.1895.0041"},{"key":"e_1_3_2_1_31_1","volume-title":"Proc. of ICSME'15","author":"Plate H.","unstructured":"H. Plate, S. E. Ponta, and A. Sabetta. 2015. Impact assessment for vulnerabilities in open-source software libraries. In Proc. of ICSME'15. IEEE, 411--420."},{"key":"e_1_3_2_1_32_1","volume-title":"2018 IEEE International Conference on Software Maintenance and Evolution (ICSME). IEEE.","author":"Ponta S. E.","unstructured":"S. E. Ponta, H. Plate, and A. Sabetta. 2018. Beyond metadata: Code-centric and usage-based analysis of known vulnerabilities in open-source software. In 2018 IEEE International Conference on Software Maintenance and Evolution (ICSME). IEEE."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.2307\/1412159"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2007.909760"},{"key":"e_1_3_2_1_35_1","volume-title":"Proceedings of the 7th Annual Conference of the Southern Association for Information Systems. 285--290","author":"Wynn D.","year":"2004","unstructured":"D. Wynn. 2004. Organizational structure of open source projects: a life cycle approach. In Proceedings of the 7th Annual Conference of the Southern Association for Information Systems. 285--290."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2016.01.025"}],"event":{"name":"RAIE '24: 2nd International Workshop on Responsible AI Engineering","location":"Lisbon Portugal","acronym":"RAIE '24","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS","Faculty of Engineering of University of Porto"]},"container-title":["Proceedings of the 2nd International Workshop on Responsible AI Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643691.3648586","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3643691.3648586","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:04:20Z","timestamp":1750291460000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3643691.3648586"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,16]]},"references-count":36,"alternative-id":["10.1145\/3643691.3648586","10.1145\/3643691"],"URL":"https:\/\/doi.org\/10.1145\/3643691.3648586","relation":{},"subject":[],"published":{"date-parts":[[2024,4,16]]},"assertion":[{"value":"2024-07-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}