Learning to Triage Vulnerability Reports from Program Analysis: An Empirical Study in Node.js

Ronghao Ni, Aidan Z. H. Yang, Min-Chien Hsu +5

Program analysis tools often produce large volumes of candidate vulnerability reports that require costly manual review, creating a practical challenge: how can security analysts p…