Exploiting Token and Path-based Representations of Code for Identifying Security-Relevant Commits

Achyudh Ram, Ji Xin, Meiyappan Nagappan +4

Public vulnerability databases such as CVE and NVD account for only 60% of security vulnerabilities present in open-source projects, and are known to suffer from inconsistent quali…