中文
相关论文

相关论文: Large-Scale-Exploit of GitHub Repository Metadata …

200 篇论文

GitHub's issue reports provide developers with valuable information that is essential to the evolution of a software development project. Contributors can use these reports to perform software engineering tasks like submitting bugs,…

软件工程 · 计算机科学 2023-03-22 Nafiseh Nikeghbal , Amir Hossein Kargaran , Abbas Heydarnoori , Hinrich Schütze

GitHub recommends that projects adopt a security file that outlines vulnerability reporting procedures. However, the effectiveness and operational challenges of such files are not yet fully understood. This study aims to clarify the…

软件工程 · 计算机科学 2025-10-17 Rintaro Kanaji , Brittany Reid , Yutaro Kashiwa , Raula Gaikovina Kula , Hajimu Iida

Current paper reports the advantages of the application of GitHub and LaTeX for the MSc thesis writing. The existing code-based program implemented in GitHub portal provides a great tool for scientists and students for data sharing and…

计算机与社会 · 计算机科学 2018-12-27 Polina Lemenkova

Version Control Systems (VCS) like Git allow developers to locally rewrite recorded history, e.g., to reorder and suppress commits or specific data in them. These alterations have legitimate use cases, but become problematic when performed…

软件工程 · 计算机科学 2025-09-12 Solal Rapaport , Laurent Pautet , Samuel Tardieu , Stefano Zacchiroli

Real-time, online-editing web apps provide free and convenient services for collaboratively editing, sharing and storing files. The benefits of these web applications do not come for free: not only do service providers have full access to…

密码学与安全 · 计算机科学 2019-11-19 Yihao Hu , Ari Trachtenberg , Prakash Ishwar

Broken access control is one of the most common security vulnerabilities in web applications. These vulnerabilities are the major cause of many data breach incidents, which result in privacy concern and revenue loss. However, preventing and…

密码学与安全 · 计算机科学 2023-04-24 Li Zhong

The email system is the central battleground against phishing and social engineering attacks, and yet email providers still face key challenges to authenticate incoming emails. As a result, attackers can apply spoofing techniques to…

密码学与安全 · 计算机科学 2018-01-04 Hang Hu , Gang Wang

With the generalization of mobile communication systems, solicitations of all kinds in the form of messages and emails are received by users with increasing proportion of malicious ones. They are customized to pass anti-spam filters and ask…

密码学与安全 · 计算机科学 2017-06-30 P-Y. Cousin , V. Bernard , A. Lefaillet , M. Mugaruka , C. Raibaud

GitHub Actions is a widely used platform to automate the build and deployment of software projects through configurable workflows. As the platform's popularity grows, it also becomes a target of choice for software supply chain attacks.…

软件工程 · 计算机科学 2026-03-18 Madjda Fares , Yogya Gamage , Benoit Baudry

The software supply chain is becoming a widespread analogy to designate the series of steps taken to go from source code published by developers to executables running on the users? computers. A security vulnerability in any of these steps…

软件工程 · 计算机科学 2022-06-30 Ludovic Courtès

Online collaboration platforms such as GitHub have provided software developers with the ability to easily reuse and share code between repositories. With clone-and-own and forking becoming prevalent, maintaining these shared files is…

软件工程 · 计算机科学 2021-02-15 Hideaki Hata , Raula Gaikovina Kula , Takashi Ishio , Christoph Treude

Data mining is also being useful to give solutions for invasion finding and auditing. While data mining has several applications in protection, there are also serious privacy fears. Because of email mining, even inexperienced users can…

密码学与安全 · 计算机科学 2014-05-06 Tarushi Sharma , AmanPreet Kaur

Software developed on public platform is a source of data that can be used to make predictions about those projects. While the individual developing activity may be random and hard to predict, the developing behavior on project level can be…

软件工程 · 计算机科学 2022-03-21 Tianpei Xia , Wei Fu , Rui Shu , Rishabh Agrawal , Tim Menzies

Software projects frequently use automation tools to perform repetitive activities in the distributed software development process. Recently, GitHub introduced GitHub Actions, a feature providing automated workflows for software projects.…

软件工程 · 计算机科学 2024-01-24 Mairieli Wessel , Joseph Vargovich , Marco A. Gerosa , Christoph Treude

This research study was conducted to illustrate how it is easily possible to get data access to disabled or blocked repositories in Github using GraphQL. There are situations in which you can lose access to your Github repositories; When…

密码学与安全 · 计算机科学 2020-05-28 Shahriar Yazdipour

In the fight against tax evaders and other cheats, governments seek to gather more information about their citizens. In this paper we claim that this increased transparency, combined with ineptitude, or corruption, can lead to widespread…

计算机与社会 · 计算机科学 2017-12-11 Zacharias Tzermias , Panagiotis Papadopoulos , Sotiris Ioannidis , Vassilis Prevelakis

Ever since the beginning of the outbreak of the COVID-19 pandemic, researchers from interdisciplinary domains have worked together to fight against the crisis. The open source community, plays a vital role in coping with the pandemic which…

软件工程 · 计算机科学 2020-10-26 Liu Wang , Ruiqing Li , Jiaxin Zhu , Guangdong Bai , Haoyu Wang

Github Copilot, trained on billions of lines of public code, has recently become the buzzword in the computer science research and practice community. Although it is designed to help developers implement safe and effective code with…

密码学与安全 · 计算机科学 2022-02-15 Zhensu Sun , Xiaoning Du , Fu Song , Mingze Ni , Li Li

In open-source software development environments; textual, numerical and relationship-based data generated are of interest to researchers. Various data sets are available for this data, which is frequently used in areas such as software…

软件工程 · 计算机科学 2020-10-01 Abdulkadir Şeker , Banu Diri , Halil Arslan

As a fundamental communicative service, email is playing an important role in both individual and corporate communications, which also makes it one of the most frequently attack vectors. An email's authenticity is based on an authentication…

密码学与安全 · 计算机科学 2022-04-15 Kaiwen Shen , Chuhan Wang , Minglei Guo , Xiaofeng Zheng , Chaoyi Lu , Baojun Liu , Yuxuan Zhao , Shuang Hao , Haixin Duan , Qingfeng Pan , Min Yang