{"id":"https://openalex.org/W7166730385","doi":"https://doi.org/10.1145/3808096","title":"Understanding the Limitations of C/C++ Binary Third-Party Library Detection Tool: An Empirical Study at Scale","display_name":"Understanding the Limitations of C/C++ Binary Third-Party Library Detection Tool: An Empirical Study at Scale","publication_year":2026,"publication_date":"2026-06-30","ids":{"openalex":"https://openalex.org/W7166730385","doi":"https://doi.org/10.1145/3808096"},"language":"en","primary_location":{"id":"doi:10.1145/3808096","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3808096","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3808096","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139700144","display_name":"Chengyue Liu","orcid":"https://orcid.org/0009-0003-7986-8004"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Chengyue Liu","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0009-0003-7986-8004","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049629263","display_name":"Zhengzi Xu","orcid":"https://orcid.org/0000-0002-8390-7518"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Zhengzi Xu","raw_affiliation_strings":["Imperial Global Singapore of Imperial College London, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-8390-7518","affiliations":[{"raw_affiliation_string":"Imperial Global Singapore of Imperial College London, Singapore, Singapore","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100713124","display_name":"Kaixuan Li","orcid":"https://orcid.org/0000-0002-3517-353X"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Kaixuan Li","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-3517-353X","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100636729","display_name":"Jiahui Wu","orcid":"https://orcid.org/0000-0001-6758-4635"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jiahui Wu","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-6758-4635","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044890415","display_name":"Sihao Qiu","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sihao Qiu","raw_affiliation_strings":["Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0003-4746-9412","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100406653","display_name":"Siyuan Li","orcid":"https://orcid.org/0009-0004-4096-1209"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Siyuan Li","raw_affiliation_strings":["Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0004-4096-1209","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068562142","display_name":"Siyang Xiong","orcid":"https://orcid.org/0009-0004-8393-0058"},"institutions":[{"id":"https://openalex.org/I202502355","display_name":"Singapore Polytechnic","ror":"https://ror.org/05pxcn248","country_code":"SG","type":"education","lineage":["https://openalex.org/I202502355"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Siyang Xiong","raw_affiliation_strings":["Desay SV Automotive Singapore Pte, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0009-0008-7395-2762","affiliations":[{"raw_affiliation_string":"Desay SV Automotive Singapore Pte, Singapore, Singapore","institution_ids":["https://openalex.org/I202502355"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100604658","display_name":"Yang Xiao","orcid":"https://orcid.org/0009-0005-8009-2252"},"institutions":[{"id":"https://openalex.org/I114218197","display_name":"Chinese Academy of Social Sciences","ror":"https://ror.org/05bxbmy32","country_code":"CN","type":"facility","lineage":["https://openalex.org/I114218197"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Xiao","raw_affiliation_strings":["at Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0005-8009-2252","affiliations":[{"raw_affiliation_string":"at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I114218197","https://openalex.org/I4210165038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100355692","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-7300-9215","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.83861973,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"3","issue":"FSE","first_page":"1981","last_page":"2002"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.5174000263214111,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.5174000263214111,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.28040000796318054,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0794999971985817,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5835000276565552},{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.5580000281333923},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.5440999865531921},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.5274999737739563},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.5238000154495239},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.5023000240325928},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.484499990940094},{"id":"https://openalex.org/keywords/aggregate","display_name":"Aggregate (composite)","score":0.47380000352859497}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7139000296592712},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5839999914169312},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5835000276565552},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.5795000195503235},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.5580000281333923},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.5440999865531921},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.5274999737739563},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.5238000154495239},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.5023000240325928},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.484499990940094},{"id":"https://openalex.org/C4679612","wikidata":"https://www.wikidata.org/wiki/Q866298","display_name":"Aggregate (composite)","level":2,"score":0.47380000352859497},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.4672999978065491},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4659000039100647},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.445499986410141},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.4203000068664551},{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.38269999623298645},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3671000003814697},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.32010000944137573},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2939999997615814},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.2818000018596649},{"id":"https://openalex.org/C63435697","wikidata":"https://www.wikidata.org/wiki/Q864135","display_name":"Binary code","level":3,"score":0.26030001044273376},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.2556999921798706},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.2554999887943268},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25220000743865967},{"id":"https://openalex.org/C2779190172","wikidata":"https://www.wikidata.org/wiki/Q4913888","display_name":"Binary data","level":3,"score":0.25209999084472656},{"id":"https://openalex.org/C87007009","wikidata":"https://www.wikidata.org/wiki/Q210832","display_name":"Statistical hypothesis testing","level":2,"score":0.25060001015663147}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3808096","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3808096","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3808096","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3808096","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W1574447377","https://openalex.org/W1974164168","https://openalex.org/W2024671287","https://openalex.org/W2754799758","https://openalex.org/W2766078311","https://openalex.org/W3000692790","https://openalex.org/W3006568433","https://openalex.org/W3015184307","https://openalex.org/W3122252170","https://openalex.org/W3160189022","https://openalex.org/W3160616715","https://openalex.org/W3160786004","https://openalex.org/W3198845576","https://openalex.org/W4224245093","https://openalex.org/W4284690592","https://openalex.org/W4297648349","https://openalex.org/W4365505517","https://openalex.org/W4384154537","https://openalex.org/W4384345724","https://openalex.org/W4387055195","https://openalex.org/W4389164790","https://openalex.org/W4389474069","https://openalex.org/W4393192529","https://openalex.org/W4394745954"],"related_works":[],"abstract_inverted_index":{"Detecting":[0],"third-party":[1],"libraries":[2,96,181],"(TPLs)":[3],"in":[4,16,216],"C/C++":[5],"binaries":[6,173],"is":[7,51],"essential":[8],"for":[9,212],"ensuring":[10],"software":[11],"security":[12],"and":[13,18,24,46,66,120,128,164,180,190,198,209],"compliance,":[14],"particularly":[15],"safety-":[17],"performance-critical":[19],"domains.":[20],"While":[21],"numerous":[22],"academic":[23],"commercial":[25,123],"Software":[26],"Composition":[27],"Analysis":[28],"(SCA)":[29],"tools":[30,58,156],"have":[31],"been":[32],"proposed,":[33],"their":[34],"true":[35],"capabilities":[36],"remain":[37],"unclear":[38],"due":[39,186],"to":[40,88,142,187,203],"the":[41,83,137,144],"absence":[42],"of":[43,55,77,102,147],"large-scale":[44,75],"benchmarks":[45],"systematic":[47],"evaluation.":[48],"Equally":[49],"lacking":[50],"a":[52,74,99],"deeper":[53],"understanding":[54],"why":[56],"these":[57],"often":[59],"underperform,":[60],"which":[61],"limits":[62],"both":[63],"research":[64,118,207],"progress":[65],"practical":[67,210],"adoption.":[68],"We":[69,81],"address":[70],"this":[71,106],"gap":[72],"with":[73,159],"study":[76],"binary":[78,148,217],"SCA":[79],"tools.":[80],"construct":[82],"largest":[84],"publicly":[85],"available":[86],"benchmark":[87],"date,":[89],"encompassing":[90],"38,228":[91],"test":[92],"cases":[93],"across":[94,125],"1,873":[95],"drawn":[97],"from":[98],"defined":[100],"scope":[101],"13,675":[103],"libraries.":[104],"Using":[105],"benchmark,":[107],"we":[108,135,199],"systematically":[109],"evaluate":[110],"11":[111],"representative":[112],"tools,":[113],"covering":[114],"all":[115],"open":[116],"source":[117],"prototypes":[119],"widely":[121],"adopted":[122],"solutions,":[124],"versions,":[126],"architectures,":[127],"feature-database":[129],"scales.":[130],"Beyond":[131],"aggregate":[132],"performance":[133],"metrics,":[134],"perform":[136,157],"first":[138],"fine-grained,":[139],"feature-level":[140],"analysis":[141,169],"identify":[143],"intrinsic":[145],"challenges":[146],"TPL":[149],"detection.":[150],"Our":[151],"results":[152],"show":[153],"that":[154],"existing":[155],"unsatisfactorily,":[158],"average":[160],"recall":[161],"below":[162],"60%":[163],"precision":[165],"around":[166],"75%.":[167],"Feature-level":[168],"reveals":[170],"fundamental":[171],"obstacles:":[172],"lose":[174],"most":[175],"source-code":[176],"features":[177],"during":[178],"compilation,":[179],"exhibit":[182],"high":[183],"feature":[184],"overlap":[185],"functional":[188],"similarity":[189],"dependency":[191],"propagation.":[192],"These":[193],"findings":[194],"explain":[195],"current":[196],"shortcomings,":[197],"build":[200],"on":[201],"them":[202],"provide":[204],"design":[205],"recommendations,":[206],"directions,":[208],"guidance":[211],"managing":[213],"open-source":[214],"risks":[215],"software.":[218]},"counts_by_year":[],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2026-07-01T00:00:00"}