Security Commits & Patches Literature

This repository collects key academic and industry papers on security commit messages and security patches, starting with publications by the security-commits-messages organization.

---

📚 Papers authored by the organization

Title	Authors	Year	Venue/Link
SECOM: Towards a convention for security commit messages (🏆 FOSS Impact Award)	S. Reis, R. Abreu, H. Erdogmus, C. Păsăreanu	2022	MSR'22
Are security commit messages informative? Not enough!	S. Reis, R. Abreu, C. Păsăreanu	2023	EASE'23
Towards Security Commit Message Standardization	S. Reis, R. Abreu, C. Păsăreanu	2025	MSR'25

---

🔍 Other Relevant Papers

Security Commit Message Analysis

Title	Authors	Year	Venue/Link

Security Patches & Vulnerability Fixes

Title	Authors	Year	Venue/Link

---

🚀 Getting Started

1. Clone this repository

   git clone https://github.com/security-commits-messages/lit-review.git

2. Add a paper:
   1. Fork the repo & create a branch.
   2. Update the appropriate table in README.md.
   3. Submit a pull request.

---

🤝 Contributing

Contributions are welcome! Please:

• Verify paper metadata (title, authors, year, link).
• Respect the existing categorization.
• Provide a short summary in the PR description.

---

📄 License

This repository is released under the CC BY 4.0 license.