{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,16]],"date-time":"2026-10-16T02:57:56Z","timestamp":1792119476627,"version":"4.4.0"},"publisher-location":"New York, NY, USA","reference-count":56,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,9,11]],"date-time":"2024-09-11T00:00:00Z","timestamp":1726012800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"National Key R&D Program of China","award":["2021ZD011450"],"award-info":[{"award-number":["2021ZD011450"]}]},{"name":"the RIE2020 Industry Alignment Fund ? Industry Collaboration Projects (IAF-ICP) Funding Initiativ","award":["RIE2020"],"award-info":[{"award-number":["RIE2020"]}]},{"name":"the National Research Foundation, Singapore, and the Cyber Security Agency under its National Cybersecurity R&D Programme","award":["NCRP25-P04-TAICeN"],"award-info":[{"award-number":["NCRP25-P04-TAICeN"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,9,11]]},"DOI":"10.1145\/3650212.3680305","type":"proceedings-article","created":{"date-parts":[[2024,9,11]],"date-time":"2024-09-11T11:44:25Z","timestamp":1726055065000},"page":"590-602","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":18,"title":["PatchFinder: A Two-Phase Approach to Security Patch Tracing for Disclosed Vulnerabilities in Open-Source Software"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3517-353X","authenticated-orcid":false,"given":"Kaixuan","family":"Li","sequence":"first","affiliation":[{"name":"East China Normal University, Shanghai, China \/ Nanyang Technological University, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8316-1894","authenticated-orcid":false,"given":"Jian","family":"Zhang","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9477-4100","authenticated-orcid":false,"given":"Sen","family":"Chen","sequence":"additional","affiliation":[{"name":"Tianjin University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-8384-7933","authenticated-orcid":false,"given":"Han","family":"Liu","sequence":"additional","affiliation":[{"name":"East China Normal University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7300-9215","authenticated-orcid":false,"given":"Yang","family":"Liu","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1235-5530","authenticated-orcid":false,"given":"Yixiang","family":"Chen","sequence":"additional","affiliation":[{"name":"East China Normal University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,9,11]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/s42979-021-00566-z"},{"key":"e_1_3_2_1_2_1","volume-title":"Introduction to modern information retrieval","author":"Chowdhury Gobinda G","unstructured":"Gobinda G Chowdhury. 2010. Introduction to modern information retrieval. Facet publishing."},{"key":"e_1_3_2_1_3_1","unstructured":"ClusterLabs\/pacemaker. 2023. Fix: acl: Do not delay evaluation of added nodes in some situations \u00b7 ClusterLabs\/pacemaker@84ac07c \u00b7 GitHub. https:\/\/github.com\/ClusterLabs\/pacemaker\/commit\/84ac07c (Accessed on 10\/09\/2023)"},{"key":"e_1_3_2_1_4_1","unstructured":"CVE. 2023. Home | CVE. https:\/\/www.cve.org\/ (Accessed on 10\/10\/2023)"},{"key":"e_1_3_2_1_5_1","unstructured":"CWE. 2023. CWE - CWE Glossary. https:\/\/cwe.mitre.org\/documents\/glossary\/index.html (Accessed on 10\/12\/2023)"},{"key":"e_1_3_2_1_6_1","unstructured":"National Vulnerability Database. 2022. Spring4Shell: CVE-2022-22965. https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2022-22965 (Accessed on 31\/01\/2023)"},{"key":"e_1_3_2_1_7_1","volume-title":"Bert: Pre-training of deep bidirectional transformers for language understanding. arXiv preprint arXiv:1810.04805.","author":"Devlin Jacob","year":"2018","unstructured":"Jacob Devlin, Ming-Wei Chang, Kenton Lee, and Kristina Toutanova. 2018. Bert: Pre-training of deep bidirectional transformers for language understanding. arXiv preprint arXiv:1810.04805."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.14722\/madweb.2022.23010"},{"key":"e_1_3_2_1_9_1","volume-title":"Codebert: A pre-trained model for programming and natural languages. arXiv:2002.08155.","author":"Feng Zhangyin","year":"2020","unstructured":"Zhangyin Feng, Daya Guo, Duyu Tang, Nan Duan, Xiaocheng Feng, Ming Gong, Linjun Shou, Bing Qin, Ting Liu, and Daxin Jiang. 2020. Codebert: A pre-trained model for programming and natural languages. arXiv:2002.08155."},{"key":"e_1_3_2_1_10_1","unstructured":"Forum of Incident Response and Security Teams Inc.. 2023. Common Vulnerability Scoring System SIG. https:\/\/www.first.org\/cvss\/ (Accessed on 10\/12\/2023)"},{"key":"e_1_3_2_1_11_1","unstructured":"GitHub. 2023. GitHub. https:\/\/github.com\/ (Accessed on 10\/13\/2023)"},{"key":"e_1_3_2_1_12_1","unstructured":"GitLab. 2023. GitLab. https:\/\/about.gitlab.com\/ (Accessed on 10\/13\/2023)"},{"key":"e_1_3_2_1_13_1","unstructured":"Google. 2023. google\/oss-fuzz. https:\/\/github.com\/google\/oss-fuzz\/tree\/master\/projects (Accessed on 10\/12\/2023)"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180167"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3498537"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE56229.2023.00181"},{"key":"e_1_3_2_1_17_1","unstructured":"ImageMagick. 2024. GitHub. https:\/\/github.com\/ImageMagick\/ImageMagick\/commit\/79e5dbcdd1fc2f714f9bae548bc55d5073f3ed20 (Accessed on 05\/03\/2024)"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICOASE.2019.8723825"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-main.550"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3397271.3401075"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.62"},{"key":"e_1_3_2_1_22_1","volume-title":"Kingma and Jimmy Ba","author":"Diederik","year":"2017","unstructured":"Diederik P. Kingma and Jimmy Ba. 2017. Adam: A Method for Stochastic Optimization. arxiv:1412.6980."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3540250.3549081"},{"key":"e_1_3_2_1_24_1","unstructured":"LibVNC. 2024. fix overflow and refactor websockets decode (Hybi) \u00b7 LibVNC\/libvncserver@aac95a9 \u00b7 GitHub. https:\/\/github.com\/LibVNC\/libvncserver\/commit\/aac95a9dcf4bbba87b76c72706c3221a842ca433 (Accessed on 05\/03\/2024)"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510142"},{"key":"e_1_3_2_1_26_1","unstructured":"Meta. 2023. A library for efficient similarity search and clustering of dense vectors.. https:\/\/github.com\/facebookresearch\/faiss (Accessed on 10\/12\/2023)"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3540250.3558936"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/SANER53432.2022.00018"},{"key":"e_1_3_2_1_29_1","unstructured":"NVD. 2023. CVE-2022-0080. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-0080 (Accessed on 05\/03\/2024)"},{"key":"e_1_3_2_1_30_1","unstructured":"NVD. 2023. NVD - CVE-2015-1867. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2015-1867 (Accessed on 10\/09\/2023)"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813604"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583497"},{"key":"e_1_3_2_1_33_1","unstructured":"Alec Radford Karthik Narasimhan Tim Salimans and Ilya Sutskever. 2018. Improving language understanding by generative pre-training."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.5555\/3455716.3455856"},{"key":"e_1_3_2_1_35_1","unstructured":"Redis. 2024. Redis. https:\/\/redis.io\/ (Accessed on 05\/03\/2024)"},{"key":"e_1_3_2_1_36_1","volume-title":"The probabilistic relevance framework: BM25 and beyond. Foundations and Trends\u00ae in Information Retrieval, 3, 4","author":"Robertson Stephen","year":"2009","unstructured":"Stephen Robertson and Hugo Zaragoza. 2009. The probabilistic relevance framework: BM25 and beyond. Foundations and Trends\u00ae in Information Retrieval, 3, 4 (2009), 333\u2013389."},{"key":"e_1_3_2_1_37_1","volume-title":"Yossi Adi, Jingyu Liu, Tal Remez, and J\u00e9r\u00e9my Rapin.","author":"Roziere Baptiste","year":"2023","unstructured":"Baptiste Roziere, Jonas Gehring, Fabian Gloeckle, Sten Sootla, Itai Gat, Xiaoqing Ellen Tan, Yossi Adi, Jingyu Liu, Tal Remez, and J\u00e9r\u00e9my Rapin. 2023. Code llama: Open foundation models for code. arXiv preprint arXiv:2308.12950."},{"key":"e_1_3_2_1_38_1","unstructured":"Snyk. 2023. Snyk Vulnerability Database. https:\/\/security.snyk.io\/ (Accessed on 10\/12\/2023)"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484593"},{"key":"e_1_3_2_1_40_1","unstructured":"Tensorflow. 2024. Prevent a division by 0 in average ops. tensorflow\/tensorflow@dfa22b3 \u00b7 GitHub. https:\/\/github.com\/tensorflow\/tensorflow\/commit\/dfa22b348b70bb89d6d6ec0ff53973bacb4f4695 (Accessed on 05\/03\/2024)"},{"key":"e_1_3_2_1_41_1","unstructured":"Torvald. 2023. torvalds\/linux: Linux kernel source tree. https:\/\/github.com\/torvalds\/linux (Accessed on 10\/10\/2023)"},{"key":"e_1_3_2_1_42_1","unstructured":"Hugo Touvron Louis Martin Kevin Stone Peter Albert Amjad Almahairi Yasmine Babaei Nikolay Bashlykov Soumya Batra Prajjwal Bhargava and Shruti Bhosale. 2023. Llama 2: Open foundation and fine-tuned chat models. arXiv preprint arXiv:2307.09288."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"crossref","unstructured":"Shichao Wang Yun Zhang Lingfeng Bao Xin Xia and Minghui Wu. 2022. VCMatch: A Ranking-based Approach for Automatic Security Patches Localization for OSS Vulnerabilities. In 2022 IEEE International Conference on Software Analysis Evolution and Reengineering (SANER). 589\u2013600.","DOI":"10.1109\/SANER53432.2022.00076"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM52596.2021.9652940"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"crossref","unstructured":"Yue Wang Weishi Wang Shafiq Joty and Steven CH Hoi. 2021. Codet5: Identifier-aware unified pre-trained encoder-decoder models for code understanding and generation. arXiv preprint arXiv:2109.00859.","DOI":"10.18653\/v1\/2021.emnlp-main.685"},{"key":"e_1_3_2_1_46_1","unstructured":"Website. 2023. Website of Our Paper. https:\/\/sites.google.com\/view\/issta2024-patchfinder\/home (Accessed on 16\/12\/2023)"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3192631"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3540250.3549125"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380383"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE56229.2023.00058"},{"key":"e_1_3_2_1_51_1","volume-title":"Bertscore: Evaluating text generation with bert. arXiv preprint arXiv:1904.09675.","author":"Zhang Tianyi","year":"2019","unstructured":"Tianyi Zhang, Varsha Kishore, Felix Wu, Kilian Q Weinberger, and Yoav Artzi. 2019. Bertscore: Evaluating text generation with bert. arXiv preprint arXiv:1904.09675."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3611643.3616299"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00214"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE51524.2021.9678720"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3117771"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3468854","article-title":"Spi: Automated identification of security patches via commits","volume":"31","author":"Zhou Yaqin","year":"2021","unstructured":"Yaqin Zhou, Jing Kai Siow, Chenyu Wang, Shangqing Liu, and Yang Liu. 2021. Spi: Automated identification of security patches via commits. ACM Transactions on Software Engineering and Methodology (TOSEM), 31, 1 (2021), 1\u201327.","journal-title":"ACM Transactions on Software Engineering and Methodology (TOSEM)"}],"event":{"name":"ISSTA '24: 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis","location":"Vienna Austria","acronym":"ISSTA '24","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","AITO"]},"container-title":["Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3650212.3680305","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3650212.3680305","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T22:50:07Z","timestamp":1750287007000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3650212.3680305"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,9,11]]},"references-count":56,"alternative-id":["10.1145\/3650212.3680305","10.1145\/3650212"],"URL":"https:\/\/doi.org\/10.1145\/3650212.3680305","relation":{},"subject":[],"published":{"date-parts":[[2024,9,11]]},"assertion":[{"value":"2024-09-11","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}