gousiosg
Joined 13 years ago
Karma
72
Submissions
9
Member since
May 20
Researcher on software engineering and all things software
View on Hacker NewsRecent submissions
Comment · 5 years ago
Co-author here. The paper reports on a system that is being run on 100s of repos at Microsoft.
Comment · 7 years ago
Here is some recent research where we are trying to solve the security and update issues in Rust/Cargo:
https://pure.tudelft.nl/portal/files/46926997/main2.pdf
TLDR: it boils down to analysing dependencies at the level of the callgraph; but building those callgraphs isn't easy. The benefit in the security use case is ~3x increased accuracy when identifying vulnerable packages (by eliminating false positives).
Comment · 12 years ago
Yes, please see slide 34 of the attached presentation and also section 5 of the paper linked to at the end.