3 ms·
>>>On the Feasibility of Stealthily Introducing Vulnerabilities in Open-Source Software via Hypocrite Commits Qiushi Wu, and Kangjie Lu. To appear in Proceeding
by dd82 5y ago
>>>On the Feasibility of Stealthily Introducing Vulnerabilities in Open-Source Software via Hypocrite Commits
Qiushi Wu, and Kangjie Lu.
To appear in Proceedings of the 42nd IEEE Symposium on Security and Privacy (Oakland'21). Virtual conference, May 2021.
from Lu's list of publications at https://www-users.cs.umn.edu/~kjlu/ https://www-users.cs.umn.edu/~kjlu/
Seems like a conference presentation at IEEE at minimum?
- xucheng 5y agoIEEE S&P is actually one of the top conferences in the field of computer security. It does mention some guidance on ethical consideration. > If a paper raises significant ethical and/or legal concerns, it might be rejected based on these concerns. https://www.ieee-security.org/TC/SP2021/cfpapers.html https://www.ieee-security.org/TC/SP2021/cfpapers.html So if the kernel maintainers report the issue to the S&P PC, the paper could potentially be rejected.
- corty 5y agoWhich shows that IEEE also has a problem with research ethics if they accepted such a paper.
- svarog-run 5y agoIEEE is a garbage organization. Or atleast their India chapter is. 3 out of 5 professors in our university would recommend to avoid any paper published by Indians from IEEE. Here in India, publishing trash papers with the help of one's 'influence' is a common occurrence
- deleted 5y ago[deleted]
- anonymousDan 5y agoWow, that is basically the top computer security conference.