Write a Blog >>
ICSE 2021
Mon 17 May - Sat 5 June 2021

Open-source software (OSS) is widely reused as it provides convenience and efficiency in software development. Despite evident benefits, unmanaged OSS components can introduce threats, such as vulnerability propagation and license violation. Unfortunately, however, identifying reused OSS components is a challenge as the reused OSS is predominantly modified and nested. In this paper, we propose CENTRIS, a precise and scalable mechanism for identifying modified OSS reuse. By segmenting an OSS code base and detecting the reuse of a unique part of the OSS only, CENTRIS is capable of precisely identifying modified OSS reuse in the presence of nested OSS components. For scalability, CENTRIS eliminates redundant code comparisons and accelerates the search using hash functions. When we applied CENTRIS on 10,241 widely-employed GitHub projects, comprising 229,326 versions and 80 billion lines of code, we observed that modified OSS reuse is a norm in software development, occurring 20 times more frequently than exact reuse. Nonetheless, CENTRIS identified reused OSS components with 91% precision and 94% recall in less than a minute per application on average, whereas a recent clone detection technique, which does not take into account modified and nested OSS reuse, hardly reached 10% precision and 40% recall.

Wed 26 May

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

12:55 - 13:55
2.2.1. Modularization and ReusabilitySEIP - Software Engineering in Practice / Technical Track at Blended Sessions Room 1 +12h
Chair(s): Maria Teresa Baldassarre Department of Computer Science, University of Bari
12:55
20m
Paper
CENTRIS: A Precise and Scalable Approach for Identifying Modified Open-Source Software ReuseTechnical Track
Technical Track
Seunghoon Woo Korea University, Sunghan Park Korea University, Seulbae Kim Georgia Institute of Technology, Heejo Lee Korea University, Hakjoo Oh Korea University
Pre-print Media Attached
13:15
20m
Paper
Interpretation-enabled Software Reuse Detection Based on a Multi-Level Birthmark ModelTechnical Track
Technical Track
Xi Xu Xi'an Jiaotong University, Qinghua Zheng MOEKLINNS Lab, Department of Computer Science and Technology, Xi’an Jiaotong University, 710049, China, Zheng Yan Xidian University, China; Aalto University, Finland, Ming Fan Xi'an Jiaotong University, Ang Jia Xi'an Jiaotong University, Ting Liu Xi'an Jiaotong University
Pre-print Media Attached
13:35
20m
Paper
Search-Based Software Re-Modularization: A Case Study at AdyenSEIP
SEIP - Software Engineering in Practice
Casper Schröder Adyen N.V., Adriaan van der Feltz Adyen N.V., Annibale Panichella Delft University of Technology, Maurício Aniche Delft University of Technology
Pre-print Media Attached

Thu 27 May

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

00:55 - 01:55
00:55
20m
Paper
CENTRIS: A Precise and Scalable Approach for Identifying Modified Open-Source Software ReuseTechnical Track
Technical Track
Seunghoon Woo Korea University, Sunghan Park Korea University, Seulbae Kim Georgia Institute of Technology, Heejo Lee Korea University, Hakjoo Oh Korea University
Pre-print Media Attached
01:15
20m
Paper
Interpretation-enabled Software Reuse Detection Based on a Multi-Level Birthmark ModelTechnical Track
Technical Track
Xi Xu Xi'an Jiaotong University, Qinghua Zheng MOEKLINNS Lab, Department of Computer Science and Technology, Xi’an Jiaotong University, 710049, China, Zheng Yan Xidian University, China; Aalto University, Finland, Ming Fan Xi'an Jiaotong University, Ang Jia Xi'an Jiaotong University, Ting Liu Xi'an Jiaotong University
Pre-print Media Attached
01:35
20m
Paper
Search-Based Software Re-Modularization: A Case Study at AdyenSEIP
SEIP - Software Engineering in Practice
Casper Schröder Adyen N.V., Adriaan van der Feltz Adyen N.V., Annibale Panichella Delft University of Technology, Maurício Aniche Delft University of Technology
Pre-print Media Attached