GraphSPD: Graph-Based Security Patch Detection with Enriched Code Semantics

With the increasing popularity of open-source software, embedded vulnerabilities have been widely propagating to downstream software. Due to different maintenance policies, software vendors may silently release security patches without providing sufficient advisories (e.g., CVE). This leaves users u... View More