Write a Blog >>
ICSE 2021
Mon 17 May - Sat 5 June 2021

Open-source software (OSS) is widely reused as it provides convenience and efficiency in software development. Despite evident benefits, unmanaged OSS components can introduce threats, such as vulnerability propagation and license violation. Unfortunately, however, identifying reused OSS components is a challenge as the reused OSS is predominantly modified and nested. In this paper, we propose CENTRIS, a precise and scalable mechanism for identifying modified OSS reuse. By segmenting an OSS code base and detecting the reuse of a unique part of the OSS only, CENTRIS is capable of precisely identifying modified OSS reuse in the presence of nested OSS components. For scalability, CENTRIS eliminates redundant code comparisons and accelerates the search using hash functions. When we applied CENTRIS on 10,241 widely-employed GitHub projects, comprising 229,326 versions and 80 billion lines of code, we observed that modified OSS reuse is a norm in software development, occurring 20 times more frequently than exact reuse. Nonetheless, CENTRIS identified reused OSS components with 91% precision and 94% recall in less than a minute per application on average, whereas a recent clone detection technique, which does not take into account modified and nested OSS reuse, hardly reached 10% precision and 40% recall.

Conference Day
Wed 26 May

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

12:55 - 13:55
2.2.1. Modularization and ReusabilitySEIP - Software Engineering in Practice / Technical Track at Blended Sessions Room 1 +12h
Chair(s): Maria Teresa BaldassarreDepartment of Computer Science, University of Bari
12:55
20m
Paper
CENTRIS: A Precise and Scalable Approach for Identifying Modified Open-Source Software ReuseTechnical Track
Technical Track
Seunghoon WooKorea University, Sunghan ParkKorea University, Seulbae KimGeorgia Institute of Technology, Heejo LeeKorea University, Hakjoo OhKorea University
Pre-print Media Attached
13:15
20m
Paper
Interpretation-enabled Software Reuse Detection Based on a Multi-Level Birthmark ModelTechnical Track
Technical Track
Xi XuXi'an Jiaotong University, Qinghua ZhengMOEKLINNS Lab, Department of Computer Science and Technology, Xi’an Jiaotong University, 710049, China, Zheng YanXidian University, China; Aalto University, Finland, Ming FanXi'an Jiaotong University, Ang JiaXi'an Jiaotong University, Ting LiuXi'an Jiaotong University
Pre-print Media Attached
13:35
20m
Paper
Search-Based Software Re-Modularization: A Case Study at AdyenSEIP
SEIP - Software Engineering in Practice
Casper SchröderAdyen N.V., Adriaan van der FeltzAdyen N.V., Annibale PanichellaDelft University of Technology, Maurício AnicheDelft University of Technology
Pre-print Media Attached

Conference Day
Thu 27 May

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

00:55 - 01:55
00:55
20m
Paper
CENTRIS: A Precise and Scalable Approach for Identifying Modified Open-Source Software ReuseTechnical Track
Technical Track
Seunghoon WooKorea University, Sunghan ParkKorea University, Seulbae KimGeorgia Institute of Technology, Heejo LeeKorea University, Hakjoo OhKorea University
Pre-print Media Attached
01:15
20m
Paper
Interpretation-enabled Software Reuse Detection Based on a Multi-Level Birthmark ModelTechnical Track
Technical Track
Xi XuXi'an Jiaotong University, Qinghua ZhengMOEKLINNS Lab, Department of Computer Science and Technology, Xi’an Jiaotong University, 710049, China, Zheng YanXidian University, China; Aalto University, Finland, Ming FanXi'an Jiaotong University, Ang JiaXi'an Jiaotong University, Ting LiuXi'an Jiaotong University
Pre-print Media Attached
01:35
20m
Paper
Search-Based Software Re-Modularization: A Case Study at AdyenSEIP
SEIP - Software Engineering in Practice
Casper SchröderAdyen N.V., Adriaan van der FeltzAdyen N.V., Annibale PanichellaDelft University of Technology, Maurício AnicheDelft University of Technology
Pre-print Media Attached