Concepedia

Package Ecosystem Security

Package Ecosystem Security is a formal construct in software security that characterizes the resilience and integrity of a software package ecosystem against vulnerabilities, malicious packages, and supply chain attacks through coordinated governance, metadata verification, and trust mechanisms.

9

Publications

456

Citations

34

Authors

14

Institutions

Publications per year

2017–2026

9

Parents

Publications

9

Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

Ruian Duan, Omar Alrawi, Ranjita Pai Kasturi et al. · 2021 · 98 citations · Full text

, , +16

Small World with High Risks: A Study of Security Threats in the npm Ecosystem

Markus Zimmermann, Cristian-Alexandru Staicu, Cam Tenny et al. · arXiv (Cornell University) · 2019 · 89 citations · Full text

, , +13

An Empirical Study of Real-World WebAssembly Binaries

Aaron Hilbig, Daniel Lehmann, Michael Pradel · 2021 · 86 citations · Full text

, , +17

Typosquatting and Combosquatting Attacks on the Python Ecosystem

Duc‐Ly Vu, Ivan Pashchenko, Fabio Massacci et al. · 2020 · 52 citations · Full text

, , +10

Detecting Suspicious Package Updates

Kalil Anderson Garrett, Gabriel Ferreira, Limin Jia et al. · 2019 · 51 citations

, , +14

1–5 of 9

Authors

34

  1. MP
    Michael Pradel

    University of Stuttgart, Germany

    3 publications · 209 citations

    3

    h-index

  2. CT
    Cam Tenny

    Technische Universität Darmstadt, Germany

    2 publications · 123 citations

    2

    h-index

  3. BS
    Brendan Saltaformaggio

    Purdue University West Lafayette, United States

    2 publications · 110 citations

    2

    h-index

  4. MZ
    Markus Zimmermann

    Technical University of Munich, Germany

    2 publications · 123 citations

    2

    h-index

  5. RP
    Ranjita Pai Kasturi

    Georgia Institute of Technology, United States

    2 publications · 110 citations

    2

    h-index

1–5 of 34

Institutions

14

  1. Technische Universität Darmstadt

    Darmstadt, Germany

    2 h-index

    6 publications

    369 citations

  2. National University of Defense Technology

    Changsha, China

    1 h-index

    1 publications

    16 citations

  3. Georgia Institute of Technology

    Atlanta, United States

    1 h-index

    6 publications

    588 citations

  4. Georgia State University

    Atlanta, United States

    1 h-index

    1 publications

    51 citations

  5. University of Stuttgart

    Stuttgart, Germany

    1 h-index

    3 publications

    258 citations

  6. Guangzhou HKUST Fok Ying Tung Research Institute

    Guangzhou, China

    1 h-index

    1 publications

    16 citations

  7. University of Trento

    Trento, Italy

    1 h-index

    3 publications

    156 citations

  8. Carnegie Mellon University

    Pittsburgh, United States

    1 h-index

    4 publications

    204 citations

1–8 of 14

Venues

  1. arXiv (Cornell University)

    Repository · 3 publications · 119 citations

    3

    h-index

  2. CISPA Helmholtz Center

    Repository · 1 publications · 34 citations

    1

    h-index

  3. IEEE Transactions on Software Engineering

    TSE · 1 publications · 16 citations

    1

    h-index

1–5