Cargo Ecosystem Dependency-Vulnerability Knowledge Graph Construction and Vulnerability Propagation Study. (arXiv:2210.07482v1 [cs.CR])

Currently, little is known about the structure of the Cargo ecosystem and the
potential for vulnerability propagation. Many empirical studies generalize
third-party dependency governance strategies from a single software ecosystem
to other ecosystems but ignore the differences in the technical structures of
different software ecosystems, making it difficult to directly generalize
security governance strategies from other ecosystems to the Cargo ecosystem. To
fill the gap in this area, this paper constructs a knowledge graph of
dependency vulnerabilities for the Cargo …

cargo construction dependency ecosystem study vulnerability