Qiyi Tang

Third-Party Library Dependency for Large-Scale SCA in the C/C++ Ecosystem: How Far Are We?

2023

Existing software composition analysis (SCA) techniques for the C/C++ ecosystem tend to identify the reused components through feature matching between target software project and collected third-party libraries (TPLs). However, feature duplication caused by internal code …