SCORED@CCS

Publications

2023

Tamas K. Lengyel
Estimating Security Risk Through Repository Mining. SCORED@CCS (2023)
Yesenia Yser
The Knockout of the Century: Cyber Resiliency through the Arts. SCORED@CCS (2023)
Tanmay Singla, Dharun Anandayuvaraj, Kelechi G. Kalu, Taylor R. Schorlemmer, James C. Davis
An Empirical Study on Using Large Language Models to Analyze Software Supply Chain Security Failures. SCORED@CCS (2023)
Behnaz Hassanshahi, Trong Nhan Mai, Alistair Michael, Benjamin Selwyn-Smith, Sophie Bates, Padmanabhan Krishnan
Macaron: A Logic-based Framework for Software Supply Chain Security Assurance. SCORED@CCS (2023)
Alex Crawford, Eugene Yakubovich, Rob Szumski
Enforcing SBOMs through the Linux kernel with eBPF and IMA. SCORED@CCS (2023)
Fabian Niklas Froh, Matías Federico Gobbi, Johannes Kinder
Differential Static Analysis for Detecting Malicious Updates to Open Source Packages. SCORED@CCS (2023)
Sufiyan Bukhari, Benjamin Tan, Lorenzo De Carli
Distinguishing AI- and Human-Generated Code: A Case Study. SCORED@CCS (2023)
Musard Balliu, Benoit Baudry, Sofia Bobadilla, Mathias Ekstedt, Martin Monperrus, Javier Ron, Aman Sharma, Gabriel Skoglund, César Soto-Valero, Martin Wittlinger
Software Bill of Materials in Java. SCORED@CCS (2023)
Piergiorgio Ladisa, Merve Sahin, Serena Elisa Ponta, Marco Rosa, Matias Martinez, Olivier Barais
The Hitchhiker's Guide to Malicious Third-Party Dependencies. SCORED@CCS (2023)
Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses, SCORED 2023, Copenhagen, Denmark, 30 November 2023 SCORED@CCS (2023)
Russ Cox
Open Source Supply Chain Security at Google. SCORED@CCS (2023)
Thomas Hennen
Scalable Policies for Supply Chain Security. SCORED@CCS (2023)
William Woodruff
What Does it Look Like to Code-sign for an Entire Packaging Ecosystem? SCORED@CCS (2023)
Elizabeth Wyss, Lorenzo De Carli, Drew Davidson
(Nothing But) Many Eyes Make All Bugs Shallow. SCORED@CCS (2023)

2022