一句话：面向不可复现构建，提出自动定位方法以降低人工搜索成本并识别致因。
可复现构建要求在预定义构建环境下生成完全相同的二进制，这对质量保障和检测针对构建环境的攻击很重要，并已在 Debian、Bitcoin 等开源仓库中普及。然而，不可复现问题难以定位：一方面缺乏引导搜索的信息，另一方面导致二进制差异的原因多种多样，人工排查耗时费力。论文标题表明工作聚焦于不可复现构建的自动定位，目标是在此类场景中自动识别问题或致因，从而减少人工劳动。给出的摘要未披露具体定位技术、工具实现及实验评估结果，因此无法进一步总结方法细节与关键性能指标。
Reproducibility is the ability of recreating identical binaries under pre-defined build environments. Due to the need of quality assurance and the benefit of better detecting attacks against build environments, the practice of reproducible builds has gained popularity in many open-source software repositories such as Debian and Bitcoin. However, identifying the unreproducible issues remains a labour intensive and time consuming challenge, because of the lacking of information to guide the search and the diversity of the causes that may lead to the unreproducible binaries.
DOI 原文 ·
@inproceedings{paperbot4522,
title = {Automated localization for unreproducible builds},
author = {Zhilei Ren and He Jiang and Jifeng Xuan and Zijiang Yang},
booktitle = {ICSE},
year = {2018},
doi = {10.1145/3180155.3180224}
}