publications
publications by categories in reversed chronological order. generated by jekyll-scholar.
2026
- C16Assessing the Cross-Version Applicability of Java Library Vulnerability ExploitsIn Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering (ASE), 2026
- C15Answer is Cheap, Show Me the Evidence! Augmenting Automated Vulnerability Assessment with EvidenceIn Proceedings of the 35th ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), 2026
- C13Mitigating Implicit Inconsistencies in Patch PortingIn Proceedings of the 34th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (FSE) - Industry Track, 2026
- J7Detecting Protracted Vulnerabilities in Open Source ProjectsACM Transactions on Software Engineering and Methodology (TOSEM), 2026
- C14Lingxi: Repository-Level Issue Resolution Framework Enhanced by Procedural Knowledge Guided ScalingIn Proceedings of the 35th ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), 2026
- C12Diffploit: Facilitating Cross-Version Exploit Migration for Open Source Library VulnerabilitiesIn Proceedings of the 48th IEEE/ACM International Conference on Software Engineering (ICSE), 2026
2025
- J6An Empirical Study on Vulnerability Disclosure Management of Open Source Software SystemsACM Transactions on Software Engineering and Methodology (TOSEM), 2025
- C10Code Change Intention, Development Artifact and History Vulnerability: Putting Them Together for Vulnerability Fix Detection by LLMIn Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering (FSE), 2025
- C11One-for-All Does Not Work! Enhancing Vulnerability Detection by Mixture-of-Experts (MoE)In Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering (FSE), 2025
- C8Similar but Patched Code Considered Harmful – The Impact of Similar but Patched Code on Recurring Vulnerability Detection and How to Remove ThemIn Proceedings of the 47th IEEE/ACM International Conference on Software Engineering (ICSE), 2025
- C9From Industrial Practices to Academia: Uncovering the Gap in Vulnerability Research and PracticeIn Proceedings of the 22nd IEEE/ACM International Conference on Mining Software Repositories (MSR), 2025
2024
- C5Silent Taint-Style Vulnerability Fixes IdentificationIn Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), 2024
- C7An Empirical Study of Automatic Program Repair Techniques for Injection VulnerabilitiesIn Proceedings of the 40th IEEE International Conference on Software Maintenance and Evolution (ICSME), 2024
- C4Towards More Practical Automation of Vulnerability AssessmentIn Proceedings of the 46th IEEE/ACM International Conference on Software Engineering (ICSE), 2024
- C6Unveil the Mystery of Critical Software VulnerabilitiesIn Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering (FSE), 2024
2023
- J5Multi-granularity detector for vulnerability fixesIEEE Transactions on Software Engineering (TSE), 2023
- C3Colefunda: Explainable silent vulnerability fix identificationIn Proceedings of the 45th IEEE/ACM International Conference on Software Engineering (ICSE), 2023
2022
- C2Automated unearthing of dangerous issue reportsIn Proceedings of the 30th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2022
- J4Studying donations and their expenses in open source projects: a case study of GitHub projects collecting donations through open collectivesEmpirical Software Engineering (EMSE), 2022
2021
- C1Finding a needle in a haystack: Automated mining of silent vulnerability fixesIn Proceedings of the 36th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2021
- J3Studying backers and hunters in bounty issue addressing process of open source projectsEmpirical Software Engineering (EMSE), 2021
2020
- Studying the Use of Extrinsic Incentives to Support Crowdsourced Software Engineering ActivitiesQueen’s University (Canada), 2020
- J1Bounties on technical Q&A sites: a case study of Stack Overflow bountiesEmpirical Software Engineering (EMSE), 2020
- J2Studying the association between bountysource bounties and the issue-addressing likelihood of github issue reportsIEEE Transactions on Software Engineering (TSE), 2020