Abstract:In the current software development environment, third-party libraries play a crucial role. They provide developers with rich functionality and convenient solutions, speeding up the pace and efficiency of software development. However, with the widespread use of third-party libraries, associated security risks and potential vulnerabilities are increasingly apparent. Malicious attackers can exploit these vulnerabilities to infiltrate systems, execute unauthorized operations, or steal sensitive information, posing a severe threat to software security. Research on third-party libraries in software becomes paramount to address this growing security challenge. Numerous research findings exist regarding third-party libraries' usage, ecosystem, detection, and fortification defenses. Understanding the usage and ecosystem of third-party libraries helps developers comprehend the potential risks they bring and select trustworthy libraries. Third-party library detection tools aid developers in automatically discovering third-party libraries in software, facilitating their management. In addition to detection, fortification defenses are also indispensable. This article profoundly investigates and analyzes this literature, summarizing current research achievements and future development directions. It aims to provide practical and valuable insights for developers and researchers, jointly promoting the healthy development of software ecosystems and better-protecting software from security threats.

Study on Protection Method for Dynamic Shared Library

Securing c programs by dynamic type checking

Introduction to Back Door and Defensive Method of DLL

An Efficient Safe Directory Based File Protection Mechanism

Dynamic communication monitors in secure local area networks

A Survey of Third-Party Library Security Research in Application Software

A Dynamic Detection Method Against ROP and JOP

LibsafeXP: A Practical and Transparent Tool for Run-time Buffer Overflow Preventions

Software Protection with Encryption and Verification

Preliminary Study of the Security of Web Application Program

Security mechanisms for mobile code in evolutionary networks

Study of Scalable Security for Active Network

SecretSafe: A Lightweight Approach against Heap Buffer Over-Read Attack

A new software approach to defend against cache-based timing attacks

A Dynamic Approach to Detecting, Eliminating and Fixing Memory Leaks

Dynamic Code Analysis and Its Implementation in Interpreted Languages

Memory-related Vulnerabilities Localization Technology Based on Dynamic Tainting

Trusted Computing-Based Security Model for Software Protection

DESIGN OF SECURITY MONITOR MODULE AT RUNTIME BASED ON DYNAMIC INFORMATION FLOW TRACKING

Study on OpenSSL Heartbleed Attack Principle and Defense Method

Combining Static and Dynamic Analysis to Discover Software Vulnerabilities