Carlos E. Budde

A methodology to perform cross-ecosystems case-control security studies

2026 · Empirical Software Engineering

Abstract The choice of one’s programming language and relative ecosystem of libraries can affect the likelihood of encountering a critical vulnerability. Simply counting the vulnerabilities by mining a software repository is not enough, and case-control …