相关实验视频
Updated: Sep 12, 2025

13:01
gP2S, an Information Management System for CryoEM Experiments
Published on: June 10, 2021
5.5K
一个关于影响软件包管理器依赖性的漏洞数据集
A Germán Márquez1, Ángel Jesús Varela-Vaca1, María Teresa Gómez López1
1i3US and University of Seville, Dept. of Computer Languages and Systems, IDEA Research Group, Seville, Spain.
Data in brief
|August 8, 2025
概括
本研究介绍了一个数据集,用于映射NPM,PyPI,Cargo和RubyGems的软件依赖漏洞. 它揭示了数百万个受影响的包版本,突出了关键软件供应链的安全风险.
科学领域:
- 计算机科学 计算机科学
- 软件工程 软件工程 软件工程
- 网络安全 网络安全
背景情况:
- 对第三方的依赖是现代软件开发的组成部分.
- 它们的使用为软件供应链带来了重大安全风险.
- 现有的漏洞数据需要结构化整合才能进行有效的分析.
研究的目的:
- 创建一个全面的数据集,绘制主要包管理器的漏洞.
- 为了实现软件依赖性易受攻击的自动监控和分析.
- 支持开发用于增强软件供应链安全的工具.
主要方法:
- 从NPM,PyPI,Cargo和RubyGems中提取了依赖和版本数据.
- 与来自开源漏洞 (OSV) 的漏洞报告相关联的包数据.
- 结构化了数据集,包含数百万个包版本和数千个已知的漏洞.
主要成果:
- 数据集涵盖了4,437,679个独特包和60,950,846个版本.
- 确定了270,430个已知漏洞,这些漏洞与特定的软件包版本有关.
- 在PyPI (0.42%),RubyGems (7.5%),Cargo (3.91%) 和NPM (6.93%) 中发现了大量易受攻击的版本.
结论:
- 该数据集为改善软件供应链安全提供了基础.
- 能够提前发现漏洞,并制定缓解策略.
- 通过数据驱动的安全分析,促进更安全的软件生态系统.
相关概念视频
Integration of Synaptic Events
2.2K
Synaptic integration mainly includes the summation of graded potentials. Graded potentials, regardless of their type, cause subtle alterations in membrane voltage, resulting in either depolarization or hyperpolarization. These incremental changes, when combined or summed, can propel the neuron toward its threshold. Consider, for example, a membrane experiencing a +15 mV shift, causing it to depolarize from -70 mV to -55 mV. In this scenario, graded potentials govern the membrane's ability to...
2.2K
Distribution Reliability and Automation
157
Distribution reliability in electrical power systems is critical for ensuring an uninterrupted power supply to consumers at minimal cost. According to IEEE Standard Terms, reliability is the probability that a device will function without failure over a specified time period or amount of usage. For electric power distribution, this translates to maintaining continuous power supply and addressing customer concerns over power outages. Several indices, as defined by IEEE Standard 1366-2012, are...
157
Synaptic Signaling
5.8K
Neurons communicate at synapses, or junctions, to excite or inhibit the activity of other neurons or target cells, such as muscles. Synapses may be chemical or electrical.
Most synapses are chemical, meaning an electrical impulse or action potential spurs the release of chemical messengers called neurotransmitters. The neuron sending the signal is called the presynaptic neuron, and the neuron receiving the signal is the postsynaptic neuron.
The presynaptic neuron fires an action potential that...
Most synapses are chemical, meaning an electrical impulse or action potential spurs the release of chemical messengers called neurotransmitters. The neuron sending the signal is called the presynaptic neuron, and the neuron receiving the signal is the postsynaptic neuron.
The presynaptic neuron fires an action potential that...
5.8K
Pharmacovigilance
993
Post-marketing surveillance is a critical component of pharmaceutical regulation, often uncovering unanticipated adverse drug reactions (ADRs) once a drug is widely used over an extended period.
This process, termed pharmacovigilance, aims to detect, evaluate, and minimize harmful effects related to medication use. The data collection for pharmacovigilance depends on spontaneous reporting systems, where healthcare professionals or patients voluntarily report suspected ADRs.
In some cases, there...
This process, termed pharmacovigilance, aims to detect, evaluate, and minimize harmful effects related to medication use. The data collection for pharmacovigilance depends on spontaneous reporting systems, where healthcare professionals or patients voluntarily report suspected ADRs.
In some cases, there...
993
Leaky Scanning
5.2K
During most eukaryotic translation processes, the small 40S ribosome subunit scans an mRNA from its 5' end until it encounters the first start AUG codon. The large 60S ribosomal subunit then joins the smaller one to initiate protein synthesis. The location of the translation initiation is largely determined by the nucleotides near the start codon as there may be multiple translation initiation sites present on the mRNA. Marilyn Kozak discovered that the sequence RCCAUGG (where R...
5.2K
Mean Absolute Deviation
2.7K
The mean absolute deviation is also a measure of the variability of data in a sample. It is the absolute value of the average difference between the data values and the mean.
Let us consider a dataset containing the number of unsold cupcakes in five shops: 10, 15, 8, 7, and 10. Initially, calculate the sample mean. Then calculate the deviation, or the difference, between each data value and the mean. Next, the absolute values of these deviations are added and divided by the sample size to...
Let us consider a dataset containing the number of unsold cupcakes in five shops: 10, 15, 8, 7, and 10. Initially, calculate the sample mean. Then calculate the deviation, or the difference, between each data value and the mean. Next, the absolute values of these deviations are added and divided by the sample size to...
2.7K

